-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Sep 2024 23:45:05 +0200 Source: cups Architecture: source Version: 2.4.10-2 Distribution: unstable Urgency: medium Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: cups (2.4.10-2) unstable; urgency=medium . [ Helge Kreutzmann ] * Update German man page (2219t) . [ Thorsten Alteholz ] * CVE-2024-47175 Fix CVE and upstream also added some extra hardening to patch - validate URIs, attribute names, and capabilities in cups/ppd-cache.c, scheduler/ipp.c - sanitize make and model in cups/ppd-cache.c - PPDize preset and template names in cups/ppd-cache.c - quote PPD localized strings in cups/ppd-cache.c - fix warnings in cups/ppd-cache.c Checksums-Sha1: ecc65a0c42fac283a8be0c6818792074a38175d4 3209 cups_2.4.10-2.dsc ef3faa90a189666a0fe272cf7d7ad68221a42380 388792 cups_2.4.10-2.debian.tar.xz 5259f8758d88ce3166afb59298c0671ae5c7e6c5 13764 cups_2.4.10-2_amd64.buildinfo Checksums-Sha256: e3eddc260b7f3ddf1fecbc93c16beb27f79577c0bf2cbd18e858405049a46c39 3209 cups_2.4.10-2.dsc 630895f87d63da5af226d2737178ebcaa3b6c48163c6899138093bedff2e7ec6 388792 cups_2.4.10-2.debian.tar.xz 81a37c110b83ecc321996a007d56f65fc7cf2fea6588be6c545b2b42a9a6f3db 13764 cups_2.4.10-2_amd64.buildinfo Files: 577a8edb7982b413c0802a27a892c024 3209 net optional cups_2.4.10-2.dsc 7532b1abd417be8fe3ec9bdd8c03c37f 388792 net optional cups_2.4.10-2.debian.tar.xz 4e1b3956b0cfbf845010c6cb0cee51a1 13764 net optional cups_2.4.10-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmb26LRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR+vWEAC9ynnAMan1Z8Q4se2EV9w4bfunFIab MNkpXIGvS8rdo+pqGMNiBUq1bwQEjmPVQwxdvlxS6Hikyf58xamYHWjkCDMRM7l8 ybhBmG0nNnlUUZiu/l5hGaroa49czojrShYJOc0Xiju5d+pLa/OBWrWWmZNOjg8d gNWH0tvMoFLiqo7teBluUHizKloOlSPBAv2Khtt2LNC0Vy2ngqhOEcPCsw6lfHkB E/XbbMSrWBfUIXw8V3qwZ/QiIoeLcXvwv7JTW9Ky+zt81rPH7HvXEgz6EBM89574 rRUHyB7ixhRFSkxBDfVjIs2cauFkl/XsEIuP8FphQfQsWIb3WKh7XwL9SaFONVaI L85iI+pJ4mqxR68EuTILrwHOL9Iq0NsdeW0HB2XVUnmDDleeMpvojF5mYTXLJxCs J6UvHeo6qtHyU+/kslneNzXkgOnmjMoriBwDAFSLI+d4cQVrgYr9PceY2i8gbwo/ Lb2SZSRhIR4dUMrJkkM7370A8zhi6y8po6yGmILuur7j4vFB2KmlGfTaIwnXT0+9 GdsYr1mygwc20O4+BWVU/c+40ae9Uj2Se+TaBnKBq/6s2it1Dxsg/6RfzfhNaCog UhAyY5Y4lGK2oJvL5Te/rnhxto4H7DRPxoVOfm7Qi3MSIeI/YOBYhuJQIqk+cvsP B69zFStJqcgw1A== =90Se -----END PGP SIGNATURE-----