Bug 49197 – [4.3] Regression: Unknown directive Include on line 630 of /etc/cups/cupsd.conf

Bug 49197 - [4.3] Regression: Unknown directive Include on line 630 of /etc/cups/cupsd.conf


Summary:	[4.3] Regression: Unknown directive Include on line 630 of /etc/cups/cupsd.conf

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Printserver
Version:	UCS 4.3
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.3-3-errata
Assigned To:	Julia Bremer
QA Contact:	Florian Best

URL:	https://github.com/apple/cups/commit/...
Keywords:

Depends on:	48437
Blocks:
	Show dependency tree / graph

Reported:	2019-03-29 13:33 CET by Arvid Requate
Modified:	2019-04-10 14:35 CEST (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	3: Will affect average number of installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.103
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Security
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2019-03-29 13:33:07 CET

We should also fix this for UCS 4.3


+++ This bug was initially created as a clone of Bug #48437 +++

The cupsd.conf UCR template uses an "Include" directive to include cups-access-limit.conf (and cupsd.local.conf if cups/include/local is set).

This Include directive has been removed upstream and the patch has been shipped with the following security updates: 

http://errata.software-univention.de/ucs/4.3/149.html
http://errata.software-univention.de/ucs/4.2/443.html

This was the vulnerability:
 https://security-tracker.debian.org/tracker/CVE-2018-4181

This probably causes a regression for the use cases of Bug #31902 and Bug #19552

Found / reported by: Martin Castillo.

Comment 1 Julia Bremer

2019-04-04 18:13:22 CEST

Successful build
Package: univention-printserver
Version: 11.0.1-6A~4.3.0.201904041804
Branch: ucs_4.3-0
Scope: errata4.3-3
User: jbremer

1b72f12d9d Bug #49197: Yaml
cf089fa224 Bug #49197: Merge branch 'jbremer/bug49197' into 4.3-3
4bfcedf1e3 Bug #49197: Version bump
4ab10593eb Bug #49197: cupsd.conf is now a multifile to avoid using removed cups include directive

Comment 2 Florian Best

2019-04-05 13:30:18 CEST

OK: code review
OK: changes work nice and as expected
OK: UCR variable description
OK: UCS manual/documentation changes
OK: YAML (adjusted the description)

Comment 3 Erik Damrose

2019-04-10 14:35:33 CEST

<http://errata.software-univention.de/ucs/4.3/476.html>