Bug 21168 - CUPS 2.2.4
Summary: CUPS 2.2.4
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: advisory MGA6-32-OK MGA6-64-OK
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2017-07-01 19:40 CEST by David Walser
Modified: 2017-08-03 01:22 CEST (History)
4 users (show)

See Also:
Source RPM: cups-2.2.3-2.mga6.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2017-07-01 19:40:22 CEST
CUPS 2.2.4 has been released on June 30:
https://github.com/apple/cups/releases/tag/v2.2.4

Two of the fixes are security-relevant (though certainly not critical):
- Fixed a potential buffer overflow in the cupstestppd utility (Issue #4996)
- The SSLOptions directive in "client.conf" and "cupsd.conf" now supports
DenyCBC and DenyTLS1.0 options (Issue #5037)

Arguably more important is the first bug fix listed:
- The scheduler did not remove old job files (Issue #4987)

So we should probably ship an update for this after Mageia 6 is released.
Comment 1 Marja Van Waes 2017-07-02 22:22:27 CEST
Assigning to the registered maintainer.

CC: (none) => marja11
Assignee: bugsquad => thierry.vignaud

David Walser 2017-07-17 12:13:31 CEST

Version: Cauldron => 6

Comment 2 David Walser 2017-07-30 04:52:08 CEST
Updated package uploaded for Mageia 6.

Advisory:
----------------------------------------

The cups package has been updated to version 2.2.4, fixing several bugs.  These
include a potential buffer overflow in the cupstestppd utility and an issue
where the scheduler did not remove old job files.  See the release announcement
for more details.

References:
https://github.com/apple/cups/releases/tag/v2.2.4
----------------------------------------

Updated packages in core/updates_testing:
----------------------------------------
cups-2.2.4-1.mga6
cups-common-2.2.4-1.mga6
libcups2-devel-2.2.4-1.mga6
libcups2-2.2.4-1.mga6
cups-filesystem-2.2.4-1.mga6

from cups-2.2.4-1.mga6.src.rpm

Assignee: thierry.vignaud => qa-bugs

Comment 3 James Kerr 2017-08-01 11:17:45 CEST
On mga6-64

Packages installed cleanly:

- cups-2.2.4-1.mga6.x86_64
- cups-common-2.2.4-1.mga6.x86_64
- cups-filesystem-2.2.4-1.mga6.noarch
- lib64cups2-2.2.4-1.mga6.x86_64

Tested printing with HP-Envy-4502 in LO and Ocular

No regressions noted

OK for mga6-64

Perhaps this should be tested with other printers. See bug#21381

CC: (none) => jim

Comment 4 Herman Viaene 2017-08-01 11:24:44 CEST
MGA6-32 on Asus A6000VM MATE
No installation issues.
Removed wifi printer in MCC - Hardware and had it detected and installed again. Printing this bug OK.

CC: (none) => herman.viaene
Whiteboard: (none) => MGA6-32-OK

Comment 5 Herman Viaene 2017-08-01 11:25:59 CEST
Mine is HP Officejet Pro 8100.
Comment 6 James Kerr 2017-08-01 11:44:08 CEST
Since the problem described in bug#21381 seems to have existed before this update I've added the OK for mga6-64.

Whiteboard: MGA6-32-OK => MGA6-32-OK MGA6-64-OK

Comment 7 Rémi Verschelde 2017-08-02 08:30:49 CEST
Advisory uploaded, validating.

Keywords: (none) => validated_update
Whiteboard: MGA6-32-OK MGA6-64-OK => advisory MGA6-32-OK MGA6-64-OK
CC: (none) => sysadmin-bugs

Comment 8 Rémi Verschelde 2017-08-02 08:35:34 CEST
Unvalidating, see bug 21424.

Depends on: (none) => 21424
Keywords: validated_update => (none)

Comment 9 James Kerr 2017-08-02 16:48:38 CEST
I can confirm that there does appear to be a problem with CUPS-2.2.4 in cauldron, https://bugs.mageia.org/show_bug.cgi?id=21424#c6

but that problem does not exist in Mageia 6 (with the same system and the same printer). Printing works consistently and CUPS web interface correctly reports completed jobs.

(I'm using plasma on both installations.)
Comment 10 Rémi Verschelde 2017-08-02 16:50:04 CEST
Oh, I hadn't noticed it was a Cauldron issue. Thanks for checking, revalidating then.

Keywords: (none) => validated_update
Depends on: 21424 => (none)

Comment 11 Mageia Robot 2017-08-03 01:22:21 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2017-0052.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.