Format: 1.7 Date: Tue, 18 Nov 2008 14:36:40 -0500 Source: hplip Binary: hplip hplip-data hplip-gui hplip-dbg hplip-doc hpijs-ppds hpijs Architecture: amd64_translations amd64 Version: 2.8.2-0ubuntu8.1 Distribution: hardy Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: hpijs - HP Linux Printing and Imaging - gs IJS driver (hpijs) hpijs-ppds - HP Linux Printing and Imaging - HPIJS PPD files hplip - HP Linux Printing and Imaging System (HPLIP) hplip-data - HP Linux Printing and Imaging - data files hplip-dbg - HP Linux Printing and Imaging - debugging information hplip-doc - HP Linux Printing and Imaging - documentation hplip-gui - HP Linux Printing and Imaging - GUI utilities Changes: hplip (2.8.2-0ubuntu8.1) hardy-security; urgency=low . * SECURITY UPDATE: privilege escalation using the hplip alert-mailing functionality. - debian/patches/92_SECURITY_CVE-2008-2940.dpatch: fix handle_event() in hpssd.py to validate device-uri parameter and disable handle_setalerts(). This fix alters hplip behaviour by preventing users from setting alerts and by moving alert configuration to a root-controlled /etc/hp/alerts.conf file. - CVE-2008-2940 * SECURITY UPDATE: denial of service in hpssd message parser. - debian/patches/93_SECURITY_CVE-2008-2941.dpatch: fix handle_event() in hpssd.py to correctly validate parameters. - CVE-2008-2941 Files: ae847e0e58c8343419dbc470e64117ca 214582 raw-translations - hplip_2.8.2-0ubuntu8.1_amd64_translations.tar.gz 5c2e135b7ea35a6202d0b087820a84e5 382262 text optional hpijs_2.8.2+2.8.2-0ubuntu8.1_amd64.deb 3709f156c5528d77d70584da2385812b 320852 utils optional hplip_2.8.2-0ubuntu8.1_amd64.deb 2babafedcd53a956049591f84d6b5664 811692 utils extra hplip-dbg_2.8.2-0ubuntu8.1_amd64.deb Original-Maintainer: Debian HPIJS and HPLIP maintainers