CUPS 1.4.2
Created at 15:13 Nov 09, 2009 by mike, last modified at 15:14 Nov 09, 2009
CUPS 1.4.2 is now available for download from:
http://www.cups.org/software.php
CUPS 1.4.2 fixes a web interface security issue and several build issues. Changes include:
- SECURITY: The CUPS web interface was vulnerable to several XSS and HTTP header/body attacks via attribute injection (STR #3367, STR #3401)
- Fixed localization errors (STR #3359, STR #3372, STR #3380, STR #3387)
- The documentation for classes.conf and printers.conf did not provide the correct instructions for manual changes (STR #3351)
- The scheduler did not always rebuild printer cache files when the driver was changed (STR #3356)
- The documentation makefile failed to install localizations when using newer versions of Bash (STR #3360)
- The configure script did not use the --with-xinetd value for the default LPD configuration path (STR #3347)
- The configure script incorrectly required glib for DBUS support (STR #3346)
- The cupstestppd program incorrectly reported filters with bad permisssions as missing (STR #3363)
- The cups.desktop file used the wrong locale names (STR #3358)
- cupsSideChannelRead() did not return an error for short reads.
- The installed PAM configuration file did not use the correct options with the pam_unix2 module (STR #3313)
- The scheduler did not preserve default options that contained special characters (STR #3340)
- The scheduler did not remove old pre-filters when updating a printer driver (STR #3342)
- The HP/GL-2 filter did not check for early end-of-file (STR #3319)
- The USB backend did not compile on some platforms (STR #3332)
- cupsSideChannelSNMPWalk() could go into an infinite loop with broken SNMP implementations.
Download ·
Home Page ·
Listing
Submit Comment