Univention Bugzilla – Bug 54808
cups: Multiple issues (5.0)
Last modified: 2022-06-01 16:51:16 CEST
New Debian cups 2.2.10-6+deb10u6A~5.0.1.202205301139 fixes: This update addresses the following issue: * authorization bypass when using "local" authorization (CVE-2022-26691)
--- mirror/ftp/pool/main/c/cups/cups_2.2.10-6+deb10u5A~5.0.1.202203271459.dsc +++ apt/ucs_5.0-0-errata5.0-1/source/cups_2.2.10-6+deb10u6A~5.0.1.202205301139.dsc @@ -1,4 +1,4 @@ -2.2.10-6+deb10u5A~5.0.1.202203271459 [Sun, 27 Mar 2022 14:59:43 +0200] Univention builddaemon <buildd@univention.de>: +2.2.10-6+deb10u6A~5.0.1.202205301139 [Mon, 30 May 2022 11:40:21 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. The following patches have been applied to the original source package 01-do-not-set-auth-info-automatically @@ -8,6 +8,12 @@ 15_postponed-univention-lpadmin-systemd 20_no-on-demand-systemd-service +2.2.10-6+deb10u6 [Mon, 23 May 2022 22:03:02 +0200] Thorsten Alteholz <debian@alteholz.de>: + + * CVE-2022-26691 + Fix certificate comparison. + (Thanks to Zdenek Dohnal <zdohnal@redhat.com> for the patch) + 2.2.10-6+deb10u5 [Wed, 23 Feb 2022 22:03:02 +0100] Thorsten Alteholz <debian@alteholz.de>: * Non-maintainer upload by the LTS Team. <http://piuparts.knut.univention.de/5.0-1/#5731684769009033813>
OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-1] e237f43d5c Bug #54808: cups 2.2.10-6+deb10u6A~5.0.1.202205301139 doc/errata/staging/cups.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x318>