[Pkg-cups-devel] [rt.debian.org #3419] cups: multiple issues

[Yves-Alexis Perez via RT]

On mar., 2011-11-08 at 13:09 +0000, Yves-Alexis Perez via RT wrote:
> <URL: https://rt.debian.org/Ticket/Display.html?id=3419 >
> 
> On Fri Sep 30 07:34:39 2011, iuculano wrote:
> > CVE-2011-2876, CVE-2011-2896, CVE-2011-3170 (incomplete fix for CVE-2011-
> > 2896) need to be fixed in stable and oldstable.
> > 
> > 
> 
> Hey Giuseppe,
> 
> are you sure CVE-2011-2876 is related? It looks like a webkit/chromium issue, completely 
> unrelated to CUPS.
> 
Fwiw, I've just built lenny and squeeze packages fixing CVE-2011-2896
and CVE-2011-3170, the problem seems fixed with the test image. I'm just
waiting for Giuseppe to comment on this (hoping he did get a mail) about
CVE-2011-2876.

Regards,
-- 
Yves-Alexis

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-cups-devel/attachments/20111108/80f9cc2b/attachment.pgp>