Format: 1.7 Date: Tue, 18 Nov 2008 14:36:40 -0500 Source: hplip Binary: hplip hplip-data hplip-gui hplip-dbg hplip-doc hpijs-ppds hpijs Architecture: ia64_translations ia64 Version: 2.8.2-0ubuntu8.1 Distribution: hardy Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Marc Deslauriers Description: hpijs - HP Linux Printing and Imaging - gs IJS driver (hpijs) hpijs-ppds - HP Linux Printing and Imaging - HPIJS PPD files hplip - HP Linux Printing and Imaging System (HPLIP) hplip-data - HP Linux Printing and Imaging - data files hplip-dbg - HP Linux Printing and Imaging - debugging information hplip-doc - HP Linux Printing and Imaging - documentation hplip-gui - HP Linux Printing and Imaging - GUI utilities Changes: hplip (2.8.2-0ubuntu8.1) hardy-security; urgency=low . * SECURITY UPDATE: privilege escalation using the hplip alert-mailing functionality. - debian/patches/92_SECURITY_CVE-2008-2940.dpatch: fix handle_event() in hpssd.py to validate device-uri parameter and disable handle_setalerts(). This fix alters hplip behaviour by preventing users from setting alerts and by moving alert configuration to a root-controlled /etc/hp/alerts.conf file. - CVE-2008-2940 * SECURITY UPDATE: denial of service in hpssd message parser. - debian/patches/93_SECURITY_CVE-2008-2941.dpatch: fix handle_event() in hpssd.py to correctly validate parameters. - CVE-2008-2941 Files: 40d3bad138801b8f672c7981fece4bff 214579 raw-translations - hplip_2.8.2-0ubuntu8.1_ia64_translations.tar.gz 5ae46f9893240c147f9ecea46850935a 448312 text optional hpijs_2.8.2+2.8.2-0ubuntu8.1_ia64.deb d69ed780fcbd219b0bf909b7dadebaeb 409634 utils optional hplip_2.8.2-0ubuntu8.1_ia64.deb 0339d7d14915355742feda5a010fef3a 769634 utils extra hplip-dbg_2.8.2-0ubuntu8.1_ia64.deb Original-Maintainer: Debian HPIJS and HPLIP maintainers