[Bug 2089041] [NEW] Please merge cups cups_2.4.10-2 from debian unstable

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Ubuntu Foundations Team Bug Bot (crichton):

cups (2.4.10-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2219t)

  [ Thorsten Alteholz ]
  * CVE-2024-47175
    Fix CVE and upstream also added some extra hardening to patch
    - validate URIs, attribute names, and capabilities
      in cups/ppd-cache.c, scheduler/ipp.c
    - sanitize make and model in cups/ppd-cache.c
    - PPDize preset and template names in cups/ppd-cache.c
    - quote PPD localized strings in  cups/ppd-cache.c
    - fix warnings in cups/ppd-cache.c

 -- Thorsten Alteholz <debian at alteholz.de>  Thu, 26 Sep 2024 23:45:05
+0200


The debian CVE mega-patch is identical to our 5 patches, I've verified after applying patches (there's just a copyright year diff).

** Affects: cups (Ubuntu)
     Importance: Wishlist
         Status: Confirmed


** Tags: patch
-- 
Please merge cups cups_2.4.10-2 from debian unstable
https://bugs.launchpad.net/bugs/2089041
You received this bug notification because you are a member of Ubuntu Sponsors, which is subscribed to the bug report.