Security update for cups
This update for cups fixes the following issues:
- Version upgrade to 2.4.11:
See https://github.com/openprinting/cups/releases
CUPS 2.4.11 brings several bug fixes regarding IPP response
validation, processing PPD values, Web UI support
(checkbox support, modifying printers) and others fixes.
Detailed list (from CHANGES.md):
- Updated the maximum file descriptor limit
for cupsd to 64k-1 (Issue #989)
- Fixed
lpoptions -d with a discovered
but not added printer (Issue #833)
- Fixed incorrect error message for HTTP/IPP errors (Issue #893)
- Fixed JobPrivateAccess and SubscriptionPrivateAccess support
for "all" (Issue #990)
- Fixed issues with cupsGetDestMediaByXxx (Issue #993)
- Fixed adding and modifying of printers
via the web interface (Issue #998)
- Fixed HTTP PeerCred authentication
for domain users (Issue #1001)
- Fixed checkbox support (Issue #1008)
- Fixed printer state notifications (Issue #1013)
- Fixed IPP Everywhere printer setup (Issue #1033)
Issues are those at https://github.com/OpenPrinting/cups/issues
In particular CUPS 2.4.11 contains those commit regarding
IPP response validation and processing PPD values:
- "Quote PPD localized strings"
https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
plus a cleanup to "Fix warnings for unused vars"
https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Version upgrade to 2.4.10:
See https://github.com/openprinting/cups/releases
CUPS 2.4.10 brings two fixes:
- Fixed error handling when reading a mixed 1setOf attribute.
- Fixed scheduler start if there is only domain socket
to listen on (Issue #985) which is fix for regression
after fix for CVE-2024-35235 in scenarios where is
no other listeners in cupsd.conf than domain socket
created on demand by systemd, launchd or upstart.
Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
See https://github.com/openprinting/cups/releases
CUPS 2.4.9 brings security fix for CVE-2024-35235 and
several bug fixes regarding CUPS Web User Interface,
PPD generation and HTTP protocol implementation.
Detailed list (from CHANGES.md):
- Fixed domain socket handling (CVE-2024-35235)
- Fixed creating of
cupsUrfSupported PPD keyword
(Issue #952)
- Fixed searching for destinations in web ui (Issue #954)
- Fixed TLS negotiation using OpenSSL with servers
that require the TLS SNI extension.
- Really raised
cups_enum_dests() timeout for listing
available IPP printers (Issue #751)...
- Fixed
Host header regression (Issue #967) - Fixed DNS-SD lookups of local services with Avahi
(Issue #970)
- Fixed listing jobs in destinations in web ui.
(Apple issue #6204)
- Fixed showing search query in web ui help page.
(Issue #977)
Issues are those at https://github.com/OpenPrinting/cups/issues
Apple issues are those at https://github.com/apple/cups/issues
See https://github.com/openprinting/cups/releases
CUPS 2.4.8 brings many bug fixes which aggregated over the last
half a year. It brings the important fix for race conditions
and errors which can happen when installing permanent
IPP Everywhere printer, support for PAM modules password-auth
and system-auth and new option for lpstat which can show only
the successful jobs.
Detailed list (from CHANGES.md):
- Added warning if the device has to be asked for
'all,media-col-database' separately (Issue #829)
- Added new value for 'lpstat' option '-W' - successfull - for
getting successfully printed jobs (Issue #830)
- Added support for PAM modules password-auth
and system-auth (Issue #892)
- Updated IPP Everywhere printer creation error
reporting (Issue #347)
- Updated and documented the MIME typing buffering
limit (Issue #925)
- Raised 'cups_enum_dests()' timeout for listing
available IPP printers (Issue #751)
- Now report an error for temporary printer defaults
with lpadmin (Issue #237)
- Fixed mapping of PPD InputSlot, MediaType,
and OutputBin values (Issue #238)
- Fixed "document-unprintable-error" handling (Issue #391)
- Fixed the web interface not showing an error
for a non-existent printer (Issue #423)
- Fixed printing of jobs with job name longer than 255 chars
on older printers (Issue #644)
- Really backported fix for Issue #742
- Fixed 'cupsCopyDestInfo' device connection
detection (Issue #586)
- Fixed "Upgrade" header handling when there is
no TLS support (Issue #775)
- Fixed memory leak when unloading a job (Issue #813)
- Fixed memory leak when creating color profiles (Issue #815)
- Fixed a punch finishing bug in the IPP Everywhere
support (Issue #821)
- Fixed crash in 'scan_ps()' if incoming argument
is NULL (Issue #831)
- Fixed setting job state reasons for success
