Format: 1.7 Date: Tue, 18 Nov 2008 14:36:40 -0500 Source: hplip Binary: hplip hplip-data hplip-gui hplip-dbg hplip-doc hpijs-ppds hpijs Architecture: lpia_translations lpia Version: 2.8.2-0ubuntu8.1 Distribution: hardy Urgency: low Maintainer: Ubuntu/lpia Build Daemon Changed-By: Marc Deslauriers Description: hpijs - HP Linux Printing and Imaging - gs IJS driver (hpijs) hpijs-ppds - HP Linux Printing and Imaging - HPIJS PPD files hplip - HP Linux Printing and Imaging System (HPLIP) hplip-data - HP Linux Printing and Imaging - data files hplip-dbg - HP Linux Printing and Imaging - debugging information hplip-doc - HP Linux Printing and Imaging - documentation hplip-gui - HP Linux Printing and Imaging - GUI utilities Changes: hplip (2.8.2-0ubuntu8.1) hardy-security; urgency=low . * SECURITY UPDATE: privilege escalation using the hplip alert-mailing functionality. - debian/patches/92_SECURITY_CVE-2008-2940.dpatch: fix handle_event() in hpssd.py to validate device-uri parameter and disable handle_setalerts(). This fix alters hplip behaviour by preventing users from setting alerts and by moving alert configuration to a root-controlled /etc/hp/alerts.conf file. - CVE-2008-2940 * SECURITY UPDATE: denial of service in hpssd message parser. - debian/patches/93_SECURITY_CVE-2008-2941.dpatch: fix handle_event() in hpssd.py to correctly validate parameters. - CVE-2008-2941 Files: 386246d4c67769da337bec6c6a2def01 214567 raw-translations - hplip_2.8.2-0ubuntu8.1_lpia_translations.tar.gz 984d300fa15fef7eb813e6e280034a16 377036 text optional hpijs_2.8.2+2.8.2-0ubuntu8.1_lpia.deb 47ae3e6082e1dff01384e8834a959ee6 307612 utils optional hplip_2.8.2-0ubuntu8.1_lpia.deb 7bbf76dce03cee5b2ba7363cfecb5f70 794452 utils extra hplip-dbg_2.8.2-0ubuntu8.1_lpia.deb Original-Maintainer: Debian HPIJS and HPLIP maintainers