mirror of
https://github.com/openbsd/ports.git
synced 2026-06-17 23:13:55 +02:00
SECURITY update to cups-2.4.17.
- CVE-2026-27447: The scheduler treated local user and group names as case-insensitive. - CVE-2026-34978: The RSS notifier could write outside the scheduler's RSS directory. - CVE-2026-34980: The scheduler did not filter control characters from option values. - CVE-2026-34979: The scheduler did not always allocate enough memory for a job's options string. - CVE-2026-34990: The scheduler incorrectly allowed local certificates over the loopback interface. - CVE-2026-39314: Fixed the range check for job password strings. - CVE-2026-39316: Fixed a printer subscription bug in the scheduler. - CVE-2026-NNNNN: Fixed a SNMP string conversion bug in the backends.
This commit is contained in:
+1
-1
@@ -10,7 +10,7 @@ COMMENT-libs= CUPS libraries and headers
|
||||
VERSION= ${GH_TAGNAME:S/v//:S/op/./}
|
||||
GH_ACCOUNT= OpenPrinting
|
||||
GH_PROJECT= cups
|
||||
GH_TAGNAME= v2.4.16
|
||||
GH_TAGNAME= v2.4.17
|
||||
|
||||
CATEGORIES= print sysutils
|
||||
|
||||
|
||||
+2
-2
@@ -1,2 +1,2 @@
|
||||
SHA256 (cups-2.4.16.tar.gz) = BR9Lv6EJJOo5niqL7y2U+jzY3Ih2xftOClfSM5YgM5U=
|
||||
SIZE (cups-2.4.16.tar.gz) = 8207073
|
||||
SHA256 (cups-2.4.17.tar.gz) = OC1w2mRVc2LCiO41ZSXfseZ0pkoPt8D8Aokm2liRO3M=
|
||||
SIZE (cups-2.4.17.tar.gz) = 8214236
|
||||
|
||||
@@ -4,7 +4,7 @@ on low-end configurations.
|
||||
Index: backend/ipp.c
|
||||
--- backend/ipp.c.orig
|
||||
+++ backend/ipp.c
|
||||
@@ -676,7 +676,7 @@ main(int argc, /* I - Number of command-line args
|
||||
@@ -677,7 +677,7 @@ main(int argc, /* I - Number of command-line args
|
||||
|
||||
http = httpConnect2(hostname, port, addrlist, AF_UNSPEC, cupsEncryption(), 1,
|
||||
0, NULL);
|
||||
@@ -13,7 +13,7 @@ Index: backend/ipp.c
|
||||
|
||||
/*
|
||||
* See if the printer supports SNMP...
|
||||
@@ -2563,7 +2563,7 @@ monitor_printer(
|
||||
@@ -2565,7 +2565,7 @@ monitor_printer(
|
||||
|
||||
http = httpConnect2(monitor->hostname, monitor->port, NULL, AF_UNSPEC,
|
||||
monitor->encryption, 1, 0, NULL);
|
||||
|
||||
@@ -4,7 +4,7 @@ on low-end configurations.
|
||||
Index: scheduler/ipp.c
|
||||
--- scheduler/ipp.c.orig
|
||||
+++ scheduler/ipp.c
|
||||
@@ -4512,7 +4512,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
|
||||
@@ -4518,7 +4518,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
|
||||
close(temppipe[1]);
|
||||
|
||||
/*
|
||||
@@ -13,7 +13,7 @@ Index: scheduler/ipp.c
|
||||
*/
|
||||
|
||||
total = 0;
|
||||
@@ -4532,7 +4532,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
|
||||
@@ -4538,7 +4538,7 @@ copy_model(cupsd_client_t *con, /* I - Client connect
|
||||
FD_SET(temppipe[0], &input);
|
||||
FD_SET(CGIPipes[0], &input);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user