Format: 1.7
Date: Tue, 18 Nov 2008 13:39:37 -0500
Source: hplip
Binary: hpijs hplip-data hpijs-ppds hplip hplip-doc hplip-gui hplip-dbg
Architecture: sparc_translations sparc
Version: 2.7.7.dfsg.1-0ubuntu5.1
Distribution: gutsy
Urgency: low
Maintainer: Ubuntu/sparc Build Daemon <buildd@artigas.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 hpijs      - HP Linux Printing and Imaging - gs IJS driver (hpijs)
 hplip      - HP Linux Printing and Imaging System (HPLIP)
 hplip-dbg  - HP Linux Printing and Imaging - debugging information
Changes: 
 hplip (2.7.7.dfsg.1-0ubuntu5.1) gutsy-security; urgency=low
 .
   * SECURITY UPDATE: privilege escalation using the hplip alert-mailing
     functionality.
     - debian/patches/91_SECURITY_CVE-2008-2940.dpatch: fix handle_event()
       in hpssd.py to validate device-uri parameter and disable
       handle_setalerts(). This fix alters hplip behaviour by preventing
       users from setting alerts and by moving alert configuration to a
       root-controlled /etc/hp/alerts.conf file.
     - CVE-2008-2940
   * SECURITY UPDATE: denial of service in hpssd message parser.
     - debian/patches/92_SECURITY_CVE-2008-2941.dpatch: fix handle_event()
       in hpssd.py to correctly validate parameters.
     - CVE-2008-2941
Files: 
 975ec5668d79198b87c4d5ea181a024f 165304 raw-translations - hplip_2.7.7.dfsg.1-0ubuntu5.1_sparc_translations.tar.gz
 0871e23022a68750c75c8354e887e064 332584 text optional hpijs_2.7.7+2.7.7.dfsg.1-0ubuntu5.1_sparc.deb
 53750500e86a4179592d9ee97def4770 289462 utils optional hplip_2.7.7.dfsg.1-0ubuntu5.1_sparc.deb
 8034edab3f572315e082918033eb41ef 717140 utils extra hplip-dbg_2.7.7.dfsg.1-0ubuntu5.1_sparc.deb
Original-Maintainer: Henrique de Moraes Holschuh <hmh@debian.org>