Format: 1.7
Date: Tue, 18 Nov 2008 13:39:37 -0500
Source: hplip
Binary: hpijs hplip-data hpijs-ppds hplip hplip-doc hplip-gui hplip-dbg
Architecture: lpia_translations lpia
Version: 2.7.7.dfsg.1-0ubuntu5.1
Distribution: gutsy
Urgency: low
Maintainer: Ubuntu/lpia Build Daemon <buildd@molybdenum.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 hpijs      - HP Linux Printing and Imaging - gs IJS driver (hpijs)
 hplip      - HP Linux Printing and Imaging System (HPLIP)
 hplip-dbg  - HP Linux Printing and Imaging - debugging information
Changes: 
 hplip (2.7.7.dfsg.1-0ubuntu5.1) gutsy-security; urgency=low
 .
   * SECURITY UPDATE: privilege escalation using the hplip alert-mailing
     functionality.
     - debian/patches/91_SECURITY_CVE-2008-2940.dpatch: fix handle_event()
       in hpssd.py to validate device-uri parameter and disable
       handle_setalerts(). This fix alters hplip behaviour by preventing
       users from setting alerts and by moving alert configuration to a
       root-controlled /etc/hp/alerts.conf file.
     - CVE-2008-2940
   * SECURITY UPDATE: denial of service in hpssd message parser.
     - debian/patches/92_SECURITY_CVE-2008-2941.dpatch: fix handle_event()
       in hpssd.py to correctly validate parameters.
     - CVE-2008-2941
Files: 
 af170467b8937b8adbcf90a586d68615 165305 raw-translations - hplip_2.7.7.dfsg.1-0ubuntu5.1_lpia_translations.tar.gz
 43391f12453f206b9f225e081e669417 337694 text optional hpijs_2.7.7+2.7.7.dfsg.1-0ubuntu5.1_lpia.deb
 2543c28b0990cddae6edd78988465b4c 290174 utils optional hplip_2.7.7.dfsg.1-0ubuntu5.1_lpia.deb
 72d12b2e01a56317ed133fe9d4461191 925968 utils extra hplip-dbg_2.7.7.dfsg.1-0ubuntu5.1_lpia.deb
Original-Maintainer: Henrique de Moraes Holschuh <hmh@debian.org>