CUPS 1.4.2

Michael Sweet mike at easysw.com
Mon Nov 9 15:15:00 PST 2009


CUPS 1.4.2 is now available for download from:

    http://www.cups.org/software.php

CUPS 1.4.2 fixes a web interface security issue and several build issues. Changes include:

- SECURITY: The CUPS web interface was vulnerable to several XSS and HTTP header/body attacks via attribute injection (STR #3367, STR #3401)
- Fixed localization errors (STR #3359, STR #3372, STR #3380, STR #3387)
- The documentation for classes.conf and printers.conf did not provide the correct instructions for manual changes (STR #3351)
- The scheduler did not always rebuild printer cache files when the driver was changed (STR #3356)
- The documentation makefile failed to install localizations when using newer versions of Bash (STR #3360)
- The configure script did not use the --with-xinetd value for the default LPD configuration path (STR #3347)
- The configure script incorrectly required glib for DBUS support (STR #3346)
- The cupstestppd program incorrectly reported filters with bad permisssions as missing (STR #3363)
- The cups.desktop file used the wrong locale names (STR #3358)
- cupsSideChannelRead() did not return an error for short reads.
- The installed PAM configuration file did not use the correct options with the pam_unix2 module (STR #3313)
- The scheduler did not preserve default options that contained special characters (STR #3340)
- The scheduler did not remove old pre-filters when updating a printer driver (STR #3342)
- The HP/GL-2 filter did not check for early end-of-file (STR #3319)
- The USB backend did not compile on some platforms (STR #3332)
- cupsSideChannelSNMPWalk() could go into an infinite loop with broken SNMP implementations.

Enjoy!





More information about the cups mailing list