MDKSA-2001:048 - cups update

From: Linux Mandrake Security Team (security@linux-mandrake.com)
Date: Thu May 10 2001 - 22:07:39 PDT

  • Next message: Albrecht Guenther: "security hole in os groupware suite PHProjekt"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    ________________________________________________________________________
    
                    Linux-Mandrake Security Update Advisory
    ________________________________________________________________________
    
    Package name:           cups
    Date:                   May 10th, 2001
    Advisory ID:            MDKSA-2001:048
    
    Affected versions:      7.2, 8.0
    ________________________________________________________________________
    
    Problem Description:
    
     The version of cups shipped with Linux-Mandrake 8.0 has a problem where
     when a user prints a multi-page PostScript file with embedded pictures,
     the pages following the first with the picture are all printed on the
     same page, one on top of the other.  From multi-page Abiword files
     (only text) only the last page is printed.  This update resolves this
     bug.  As well, the upstream 1.1.7 release of cups fixes some security
     issues.
    ________________________________________________________________________
    
    References:
    
     http://www.cups.org/relnotes.html#01010700
    ________________________________________________________________________
    
    Please verify the update prior to upgrading to ensure the integrity of
    the downloaded package.  You can do this with the command:
      rpm --checksig package.rpm
    You can get the GPG public key of the Linux-Mandrake Security Team at
      http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS
    If you use MandrakeUpdate, the verification of md5 checksum and GPG
    signature is performed automatically for you.
    
    Linux-Mandrake 7.2:
    6e0a57e07dd533d2246f06d2a0c118e1  7.2/RPMS/cups-1.1.7-1.2mdk.i586.rpm
    b2cf2c19abaec2c29053347d5bb68e80  7.2/RPMS/cups-devel-1.1.7-1.2mdk.i586.rpm
    6506642b0d2373537b900f1335048f1b  7.2/SRPMS/cups-1.1.7-1.2mdk.src.rpm
    
    Linux-Mandrake 8.0:
    fbc94215d225cd510a0c9f6fe13ba1c0  8.0/RPMS/cups-1.1.7-1.1mdk.i586.rpm
    02e4e78db4b2d587642fd2502239b851  8.0/RPMS/cups-common-1.1.7-1.1mdk.i586.rpm
    5dc7406ab3b00c9c31e871b32adafb84  8.0/RPMS/libcups1-1.1.7-1.1mdk.i586.rpm
    21583d5997e80ed41a125e65ed0287e8  8.0/RPMS/libcups1-devel-1.1.7-1.1mdk.i586.rpm
    927cb4a7f52284dee5d503e1e7a6fdae  8.0/SRPMS/cups-1.1.7-1.1mdk.src.rpm
    ________________________________________________________________________
    
    Bug IDs fixed (see https://qa.mandrakesoft.com for more information):
    
    3469 - postscript printing fails with embedded graphics
    ________________________________________________________________________
    
    To upgrade automatically, use MandrakeUpdate.
    
    If you want to upgrade manually, download the updated package from one
    of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".
    
    You can download the updates directly from one of the mirror sites
    listed at:
    
      http://www.linux-mandrake.com/en/ftp.php3.
    
    Updated packages are available in the "updates/[ver]/RPMS/" directory.
    For example, if you are looking for an updated RPM package for
    Linux-Mandrake 8.0, look for it in "updates/8.0/RPMS/".  Updated source
    RPMs are available as well, but you generally do not need to download
    them.
    
    Please be aware that sometimes it takes the mirrors a few hours to
    update.
    
    You can view other security advisories for Linux-Mandrake at:
    
      http://www.linux-mandrake.com/en/security/
    
    If you want to report vulnerabilities, please contact
    
      security@linux-mandrake.com
    ________________________________________________________________________
    
    Linux-Mandrake has two security-related mailing list services that
    anyone can subscribe to:
    
    security-announce@linux-mandrake.com
    
      Linux-Mandrake's security announcements mailing list.  Only
      announcements are sent to this list and it is read-only.
    
    security-discuss@linux-mandrake.com
    
      Linux-Mandrake's security discussion mailing list.  This list is open
      to anyone to discuss Linux-Mandrake security specifically and Linux
      security in general.
    
    To subscribe to either list, send a message to
      sympa@linux-mandrake.com
    with "subscribe [listname]" in the body of the message.
    
    To remove yourself from either list, send a message to
      sympa@linux-mandrake.com
    with "unsubscribe [listname]" in the body of the message.
    
    To get more information on either list, send a message to
      sympa@linux-mandrake.com
    with "info [listname]" in the body of the message.
    
    Optionally, you can use the web interface to subscribe to or unsubscribe
    from either list:
    
      http://www.linux-mandrake.com/en/flists.php3#security
    ________________________________________________________________________
    
    Type Bits/KeyID     Date       User ID
    pub  1024D/22458A98 2000-07-10 Linux Mandrake Security Team
      <security@linux-mandrake.com>
    
    
    - -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: GnuPG v1.0.5 (GNU/Linux)
    Comment: For info see http://www.gnupg.org
    
    mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday
    L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7
    WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo
    P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl
    hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx
    PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg
    2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs
    iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD
    LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu
    ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t
    PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy
    /NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulqIRgQQEQIA
    BgUCOtNVGQAKCRBZ5w3um0pAJJWQAKDUoL5He+mKbfrMaTuyU5lmRyJ0fwCgoFAP
    WdvQlu/kFjphF740XeOwtOqIRgQQEQIABgUCOu8A6QAKCRBynDnb9lq3CnpjAJ4w
    Pk0SEE9U4r40IxWpwLU+wrWVugCdFfSPllPpZRCiaC7HwbFcfExRmPa5AQ0EOWnn
    7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ9F77
    9FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzRxBXV
    Jb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z269s
    +A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN6SCX
    Vl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZjTcl
    3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo0NAi
    RYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJEJGX
    lA==
    =0ahQ
    - -----END PGP PUBLIC KEY BLOCK-----
    
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.5 (GNU/Linux)
    Comment: For info see http://www.gnupg.org
    
    iD8DBQE6+3FFmqjQ0CJFipgRAoF1AKDWU9iibUS5iRDTeiSsV5EjVqM41gCdGJc7
    d6EzGdlKI9QyN67yCRVRUW0=
    =Ydh5
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Mon May 14 2001 - 03:07:09 PDT