Format: 1.7 Date: Tue, 18 Nov 2008 14:36:40 -0500 Source: hplip Binary: hplip hplip-data hplip-gui hplip-dbg hplip-doc hpijs-ppds hpijs Architecture: hppa_translations hppa Version: 2.8.2-0ubuntu8.1 Distribution: hardy Urgency: low Maintainer: Ubuntu/hppa Build Daemon Changed-By: Marc Deslauriers Description: hpijs - HP Linux Printing and Imaging - gs IJS driver (hpijs) hpijs-ppds - HP Linux Printing and Imaging - HPIJS PPD files hplip - HP Linux Printing and Imaging System (HPLIP) hplip-data - HP Linux Printing and Imaging - data files hplip-dbg - HP Linux Printing and Imaging - debugging information hplip-doc - HP Linux Printing and Imaging - documentation hplip-gui - HP Linux Printing and Imaging - GUI utilities Changes: hplip (2.8.2-0ubuntu8.1) hardy-security; urgency=low . * SECURITY UPDATE: privilege escalation using the hplip alert-mailing functionality. - debian/patches/92_SECURITY_CVE-2008-2940.dpatch: fix handle_event() in hpssd.py to validate device-uri parameter and disable handle_setalerts(). This fix alters hplip behaviour by preventing users from setting alerts and by moving alert configuration to a root-controlled /etc/hp/alerts.conf file. - CVE-2008-2940 * SECURITY UPDATE: denial of service in hpssd message parser. - debian/patches/93_SECURITY_CVE-2008-2941.dpatch: fix handle_event() in hpssd.py to correctly validate parameters. - CVE-2008-2941 Files: 973b3a6c053fc397fad04058b820ab78 214566 raw-translations - hplip_2.8.2-0ubuntu8.1_hppa_translations.tar.gz f40a11402f3aa5764589bd84856cbc1c 413612 text optional hpijs_2.8.2+2.8.2-0ubuntu8.1_hppa.deb 127527ed97a996dab651f0b2c6fe5069 340028 utils optional hplip_2.8.2-0ubuntu8.1_hppa.deb ce791952ad80d565c611eb3f53c19adb 790706 utils extra hplip-dbg_2.8.2-0ubuntu8.1_hppa.deb Original-Maintainer: Debian HPIJS and HPLIP maintainers