Debian Patches

Status for cups/2.4.2-3+deb12u8

Patch Description Author Forwarded Bugs Origin Last update
0006-Apple-AirPrint-support.patch Apple AirPrint support Till Kamppeter <till.kamppeter@gmail.com> yes debian upstream 2016-08-09
0007-Keep-foomatic-PPDs-recommended-stanzas-in-NickNames.patch Keep foomatic PPDs "(recommended)" stanzas in NickNames Till Kampetter <till.kampetter@gmail.com> invalid 2016-08-09
0008-Debian-Set-LogFileGroup-to-adm.patch Debian: Set LogFileGroup to adm Martin Pitt <mpitt@debian.org> not-needed 2016-08-09
0009-Debian-Move-cupsd.conf.default-from-SERVERROOT-to-DA.patch Debian: Move cupsd.conf.default from SERVERROOT to DATADIR Didier Raboud <odyx@debian.org> yes debian upstream vendor 2016-08-09
0010-Debian-Do-not-alter-the-permissions-of-cupsd.conf-ev.patch Debian: Do not alter the permissions of cupsd.conf, ever Martin Pitt <mpitt@debian.org> yes upstream vendor 2016-08-09
0011-Debian-Show-compile-command-lines.patch Debian: Show compile command lines Till Kampetter <till.kampetter@gmail.com> not-needed 2016-08-09
0012-Debian-Use-dpkg-architecture-in-cups-config-to-make-.patch Debian: Use dpkg-architecture in cups-config to make it architecture-independant

Also filter -L/usr/lib/(triplet) out of LDFLAGS.
Also strip unnecessary libs from --libs.
Also launch krb5-config at runtime to avoid getting usr/lib/(triplet) from krb5-config
Didier Raboud <odyx@debian.org> not-needed debian 2016-08-09
0013-Debian-Build-mantohtml-with-the-build-architecture-c.patch Debian: Build mantohtml with the build architecture compiler
mantohtml is run during build. Thus it needs to be built with the build
architecture compiler (or execution fails). The obvious part is switching to
CC_FOR_BUILD. That also depends on it not requiring any other cups components.
In particular, removing uses of strlcpy and replacing host architecture-
specific includes is thus needed.
Helmut Grohne <helmut@subdivi.de> not-needed debian 2016-08-09
0014-Debian-Reproducibility-httpAddrGetHostname-test-fail.patch Debian: Reproducibility: httpAddrGetHostname() test fails under reprotest; skip it Didier Raboud <odyx@debian.org> not-needed 2021-02-03
0015-Debian-Reproducibility-Do-not-run-stp-tests-as-root.patch Debian: Reproducibility: Do not run stp tests as root
Reprotest insist in running these tests as root; skip them there.
Didier Raboud <odyx@debian.org> no 2021-02-03
0016-Debian-po4a-infrastructure-and-translations-for-manp.patch Debian: po4a infrastructure and translations for manpages Nicolas François <nicolas.francois@centraliens.net>, Helge Kreutzmann <debian@helgefjell.de> not-needed debian vendor 2016-08-09
0012-add-pt.patch add pt Thorsten Alteholz <debian@alteholz.de> no 2023-02-26
0013-CVE-2023-32324.patch CVE-2023-32324 Thorsten Alteholz <debian@alteholz.de> no 2023-06-24
0014-CVE-2023-34241.patch CVE-2023-34241 Thorsten Alteholz <debian@alteholz.de> no 2023-06-24
0015-CVE-2023-4504.patch CVE-2023-4504 Thorsten Alteholz <debian@alteholz.de> no 2023-09-20
0016-CVE-2023-32360.patch CVE-2023-32360 Thorsten Alteholz <debian@alteholz.de> no 2023-09-20
0017-check-colormodel-also-for-CMYK.patch check colormodel also for CMYK Thorsten Alteholz <debian@alteholz.de> no 2023-12-02
0018-dont-override-color-settings-from-print-dialoag.patch dont override color settings from print dialoag Thorsten Alteholz <debian@alteholz.de> no 2023-12-02
0019-CVE-2024-35235.patch commit 2f87c46b719e6edf0b6900e5eb307b7154e183e8

Fix domain socket handling

- Check status of unlink and bind system calls.
- Don't allow extra domain sockets when running from launchd/systemd.
- Validate length of domain socket path (< sizeof(sun_path))

Fixes CVE-2024-35235, written by Mike Sweet

===================================================================
Zdenek Dohnal <zdohnal@redhat.com> no 2024-06-03
0020-CVE-2024-35235-regression1.patch commit 7adb50839710f908af11a2f0a7d4b7aa506af2b8

Don't abort early if there are no listen sockets after loading cupsd.conf (Issue #985)

===================================================================
Michael R Sweet <msweet@msweet.org> no 2024-06-14
0021-CVE-2024-35235-regression2.patch commit 824f49f24d6babc2c02215ee6303fee7ce6a553a

Fix builds without on-demand support.

===================================================================
Michael R Sweet <msweet@msweet.org> no 2024-06-14
0022-CVE-2024-35235-regression3.patch commit 74f437b7d20be44bacbbbc792da69ff9c82dfe8f

scheduler: Fix cupsd activated on-demand via socket

If only the expected cups.sock is set as listener in cupsd.conf, the
array Listeners was NULL. To prevent copying the code, do the array
allocation earlier and have only one check for Listeners, in
service_checkin() which is run every time cupsd starts.

Fixes #985

===================================================================
Zdenek Dohnal <zdohnal@redhat.com> no 2024-06-18
0023-CVE-2024-35235-regression4.patch commit fb0c914e0d998e23d1ec24c4213fb35c7a931594

conf.c: Add newline to fprintf

===================================================================
Zdenek Dohnal <zdohnal@redhat.com> no 2024-06-18
0024-CVE-2024-47175-and-further-hardening.patch fix CVE-2024-47175 and further hardening Thorsten Alteholz <debian@alteholz.de> no 2024-09-27

All known versions for source package 'cups'

Links