SECURITY update to cups-2.4.17.

- CVE-2026-27447: The scheduler treated local user and group names as case-insensitive.
- CVE-2026-34978: The RSS notifier could write outside the scheduler's RSS directory.
- CVE-2026-34980: The scheduler did not filter control characters from option values.
- CVE-2026-34979: The scheduler did not always allocate enough memory for a job's options string.
- CVE-2026-34990: The scheduler incorrectly allowed local certificates over the loopback interface.
- CVE-2026-39314: Fixed the range check for job password strings.
- CVE-2026-39316: Fixed a printer subscription bug in the scheduler.
- CVE-2026-NNNNN: Fixed a SNMP string conversion bug in the backends.
This commit is contained in:
ajacoutot
2026-04-18 05:38:41 +00:00
parent cbf12c4bdf
commit ffffef33a1
4 changed files with 7 additions and 7 deletions
+1 -1
View File
@@ -10,7 +10,7 @@ COMMENT-libs= CUPS libraries and headers
VERSION= ${GH_TAGNAME:S/v//:S/op/./}
GH_ACCOUNT= OpenPrinting
GH_PROJECT= cups
GH_TAGNAME= v2.4.16
GH_TAGNAME= v2.4.17
CATEGORIES= print sysutils
+2 -2
View File
@@ -1,2 +1,2 @@
SHA256 (cups-2.4.16.tar.gz) = BR9Lv6EJJOo5niqL7y2U+jzY3Ih2xftOClfSM5YgM5U=
SIZE (cups-2.4.16.tar.gz) = 8207073
SHA256 (cups-2.4.17.tar.gz) = OC1w2mRVc2LCiO41ZSXfseZ0pkoPt8D8Aokm2liRO3M=
SIZE (cups-2.4.17.tar.gz) = 8214236
+2 -2
View File
@@ -4,7 +4,7 @@ on low-end configurations.
Index: backend/ipp.c
--- backend/ipp.c.orig
+++ backend/ipp.c
@@ -676,7 +676,7 @@ main(int argc, /* I - Number of command-line args
@@ -677,7 +677,7 @@ main(int argc, /* I - Number of command-line args
http = httpConnect2(hostname, port, addrlist, AF_UNSPEC, cupsEncryption(), 1,
0, NULL);
@@ -13,7 +13,7 @@ Index: backend/ipp.c
/*
* See if the printer supports SNMP...
@@ -2563,7 +2563,7 @@ monitor_printer(
@@ -2565,7 +2565,7 @@ monitor_printer(
http = httpConnect2(monitor->hostname, monitor->port, NULL, AF_UNSPEC,
monitor->encryption, 1, 0, NULL);
+2 -2
View File
@@ -4,7 +4,7 @@ on low-end configurations.
Index: scheduler/ipp.c
--- scheduler/ipp.c.orig
+++ scheduler/ipp.c
@@ -4512,7 +4512,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
@@ -4518,7 +4518,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
close(temppipe[1]);
/*
@@ -13,7 +13,7 @@ Index: scheduler/ipp.c
*/
total = 0;
@@ -4532,7 +4532,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
@@ -4538,7 +4538,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
FD_SET(temppipe[0], &input);
FD_SET(CGIPipes[0], &input);