Return to Articles  ·  Show Comments  ·  Submit Comment

CUPS 1.4.2

Created at 15:13 Nov 09, 2009 by mike, last modified at 15:14 Nov 09, 2009

CUPS 1.4.2 is now available for download from:

    http://www.cups.org/software.php

CUPS 1.4.2 fixes a web interface security issue and several build issues. Changes include:

• SECURITY: The CUPS web interface was vulnerable to several XSS and HTTP header/body attacks via attribute injection (STR #3367, STR #3401)
• Fixed localization errors (STR #3359, STR #3372, STR #3380, STR #3387)
• The documentation for classes.conf and printers.conf did not provide the correct instructions for manual changes (STR #3351)
• The scheduler did not always rebuild printer cache files when the driver was changed (STR #3356)
• The documentation makefile failed to install localizations when using newer versions of Bash (STR #3360)
• The configure script did not use the --with-xinetd value for the default LPD configuration path (STR #3347)
• The configure script incorrectly required glib for DBUS support (STR #3346)
• The cupstestppd program incorrectly reported filters with bad permisssions as missing (STR #3363)
• The cups.desktop file used the wrong locale names (STR #3358)
• cupsSideChannelRead() did not return an error for short reads.
• The installed PAM configuration file did not use the correct options with the pam_unix2 module (STR #3313)
• The scheduler did not preserve default options that contained special characters (STR #3340)
• The scheduler did not remove old pre-filters when updating a printer driver (STR #3342)
• The HP/GL-2 filter did not check for early end-of-file (STR #3319)
• The USB backend did not compile on some platforms (STR #3332)
• cupsSideChannelSNMPWalk() could go into an infinite loop with broken SNMP implementations.

Download  ·  Home Page  ·  Listing

---

Comments

Submit Comment