Univention Bugzilla – Bug 54598
cups: Multiple issues (5.0)
Last modified: 2022-03-30 12:41:35 CEST
New Debian cups 2.2.10-6+deb10u5A~5.0.1.202203271459 fixes: This update addresses the following issue: * access to uninitialized buffer in ipp.c (CVE-2020-10001)
--- mirror/ftp/pool/main/c/cups/cups_2.2.10-6+deb10u4A~5.0.0.202012181655.dsc +++ apt/ucs_5.0-0-errata5.0-1/source/cups_2.2.10-6+deb10u5A~5.0.1.202203271459.dsc @@ -1,4 +1,4 @@ -2.2.10-6+deb10u4A~5.0.0.202012181655 [Fri, 18 Dec 2020 16:55:20 +0100] Univention builddaemon <buildd@univention.de>: +2.2.10-6+deb10u5A~5.0.1.202203271459 [Sun, 27 Mar 2022 14:59:43 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. The following patches have been applied to the original source package 01-do-not-set-auth-info-automatically @@ -8,6 +8,13 @@ 15_postponed-univention-lpadmin-systemd 20_no-on-demand-systemd-service +2.2.10-6+deb10u5 [Wed, 23 Feb 2022 22:03:02 +0100] Thorsten Alteholz <debian@alteholz.de>: + + * Non-maintainer upload by the LTS Team. + * CVE-2020-10001.patch + An input validation issue might allow a malicious application + to read restricted memory. + 2.2.10-6+deb10u4 [Sat, 28 Nov 2020 12:09:48 +0100] Didier Raboud <odyx@debian.org>: * Backport upstream fix: <http://piuparts.knut.univention.de/5.0-1/#4929048373450890611>
OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-1] 923c2157fa Bug #54598: cups 2.2.10-6+deb10u5A~5.0.1.202203271459 doc/errata/staging/cups.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x264>