Univention Bugzilla – Bug 56082
cups-filters: Multiple issues (5.0)
Last modified: 2023-05-24 15:43:44 CEST
New Debian cups-filters 1.21.6-5+deb10u1A~5.0.3.202305221024 fixes: This update addresses the following issue: 1.21.6-5+deb10u1 (Fri, 19 May 2023 18:25:20 +0200) * CVE-2023-24805 prevent arbitrary command execution by escaping the quoting of the arguments in a job with a forged job title more information are available in the commit message at: https://github.com/OpenPrinting/cups-filters/commit/93e60d3df35 * debian/control: add myself to Uploaders:
--- mirror/ftp/pool/main/c/cups-filters/cups-filters_1.21.6-5A~5.0.0.202303301212.dsc +++ apt/ucs_5.0-0-errata5.0-3/source/cups-filters_1.21.6-5+deb10u1A~5.0.3.202305221024.dsc @@ -1,7 +1,17 @@ -1.21.6-5A~5.0.0.202303301212 [Thu, 30 Mar 2023 12:12:38 +0200] Univention builddaemon <buildd@univention.de>: +1.21.6-5+deb10u1A~5.0.3.202305221024 [Mon, 22 May 2023 10:25:45 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. The following patches have been applied to the original source package - 00-true-is-case-sensitive-in-ppds + 00-true-is-case-sensitive-in-ppds.quilt + +1.21.6-5+deb10u1 [Fri, 19 May 2023 18:25:20 +0200] Thorsten Alteholz <debian@alteholz.de>: + + * CVE-2023-24805 + prevent arbitrary command execution by escaping the quoting + of the arguments in a job with a forged job title + more information are available in the commit message at: + https://github.com/OpenPrinting/cups-filters/commit/93e60d3df35 + (Closes: #1036224) + * debian/control: add myself to Uploaders: 1.21.6-5 [Wed, 10 Apr 2019 17:13:22 +0200] Didier Raboud <odyx@debian.org>: <http://piuparts.knut.univention.de/5.0-3/#7509870092434185006>
OK: bug OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-3] 9a75da89fd Bug #56082: cups-filters 1.21.6-5+deb10u1A~5.0.3.202305221024 doc/errata/staging/cups-filters.yaml | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) [5.0-3] 6e4ebe6a56 Bug #56082: cups-filters 1.21.6-5+deb10u1A~5.0.3.202305221024 doc/errata/staging/cups-filters.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x669>