Bug 21168

Summary:	CUPS 2.2.4
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	herman.viaene, jim, marja11, sysadmin-bugs
Version:	6	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	advisory MGA6-32-OK MGA6-64-OK
Source RPM:	cups-2.2.3-2.mga6.src.rpm	CVE:
Status comment:

Description David Walser 2017-07-01 19:40:22 CEST

CUPS 2.2.4 has been released on June 30:
https://github.com/apple/cups/releases/tag/v2.2.4

Two of the fixes are security-relevant (though certainly not critical):
- Fixed a potential buffer overflow in the cupstestppd utility (Issue #4996)
- The SSLOptions directive in "client.conf" and "cupsd.conf" now supports
DenyCBC and DenyTLS1.0 options (Issue #5037)

Arguably more important is the first bug fix listed:
- The scheduler did not remove old job files (Issue #4987)

So we should probably ship an update for this after Mageia 6 is released.

Comment 1 Marja Van Waes 2017-07-02 22:22:27 CEST

Assigning to the registered maintainer.

CC: (none) => marja11
Assignee: bugsquad => thierry.vignaud

David Walser 2017-07-17 12:13:31 CEST

Version: Cauldron => 6

Comment 2 David Walser 2017-07-30 04:52:08 CEST

Updated package uploaded for Mageia 6.

Advisory:
----------------------------------------

The cups package has been updated to version 2.2.4, fixing several bugs.  These
include a potential buffer overflow in the cupstestppd utility and an issue
where the scheduler did not remove old job files.  See the release announcement
for more details.

References:
https://github.com/apple/cups/releases/tag/v2.2.4
----------------------------------------

Updated packages in core/updates_testing:
----------------------------------------
cups-2.2.4-1.mga6
cups-common-2.2.4-1.mga6
libcups2-devel-2.2.4-1.mga6
libcups2-2.2.4-1.mga6
cups-filesystem-2.2.4-1.mga6

from cups-2.2.4-1.mga6.src.rpm

Assignee: thierry.vignaud => qa-bugs

Comment 3 James Kerr 2017-08-01 11:17:45 CEST

On mga6-64

Packages installed cleanly:

- cups-2.2.4-1.mga6.x86_64
- cups-common-2.2.4-1.mga6.x86_64
- cups-filesystem-2.2.4-1.mga6.noarch
- lib64cups2-2.2.4-1.mga6.x86_64

Tested printing with HP-Envy-4502 in LO and Ocular

No regressions noted

OK for mga6-64

Perhaps this should be tested with other printers. See bug#21381

CC: (none) => jim

Comment 4 Herman Viaene 2017-08-01 11:24:44 CEST

MGA6-32 on Asus A6000VM MATE
No installation issues.
Removed wifi printer in MCC - Hardware and had it detected and installed again. Printing this bug OK.

CC: (none) => herman.viaene
Whiteboard: (none) => MGA6-32-OK

Comment 5 Herman Viaene 2017-08-01 11:25:59 CEST

Mine is HP Officejet Pro 8100.

Comment 6 James Kerr 2017-08-01 11:44:08 CEST

Since the problem described in bug#21381 seems to have existed before this update I've added the OK for mga6-64.

Whiteboard: MGA6-32-OK => MGA6-32-OK MGA6-64-OK

Comment 7 Rémi Verschelde 2017-08-02 08:30:49 CEST

Advisory uploaded, validating.

Keywords: (none) => validated_update
Whiteboard: MGA6-32-OK MGA6-64-OK => advisory MGA6-32-OK MGA6-64-OK
CC: (none) => sysadmin-bugs

Comment 8 Rémi Verschelde 2017-08-02 08:35:34 CEST

Unvalidating, see bug 21424.

Depends on: (none) => 21424
Keywords: validated_update => (none)

Comment 9 James Kerr 2017-08-02 16:48:38 CEST

I can confirm that there does appear to be a problem with CUPS-2.2.4 in cauldron, https://bugs.mageia.org/show_bug.cgi?id=21424#c6

but that problem does not exist in Mageia 6 (with the same system and the same printer). Printing works consistently and CUPS web interface correctly reports completed jobs.

(I'm using plasma on both installations.)

Comment 10 Rémi Verschelde 2017-08-02 16:50:04 CEST

Oh, I hadn't noticed it was a Cauldron issue. Thanks for checking, revalidating then.

Keywords: (none) => validated_update
Depends on: 21424 => (none)

Comment 11 Mageia Robot 2017-08-03 01:22:21 CEST

An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2017-0052.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED