Fedora Legacy Test Update Notification: foomatic

[Marc Deslauriers]

---------------------------------------------------------------------
Fedora Legacy Test Update Notification
FEDORALEGACY-2004-2076
Bugzilla https://bugzilla.fedora.us/show_bug.cgi?id=2076
2004-10-07
---------------------------------------------------------------------

Name        : foomatic
Versions    : fc1: 3.0.0-21.5.legacy
Summary     : Foomatic printer database.
Description : 
Foomatic is a comprehensive, spooler-independent database of printers,
printer drivers, and driver descriptions. It contains utilities to
generate driver description files and printer queues for CUPS, LPD,
LPRng, and PDQ using the database. There is also the possibility to
read the PJL options out of PJL-capable laser printers and take them
into account at the driver description file generation.
 
There are spooler-independent command line interfaces to manipulate
queues (foomatic-configure) and to print files/manipulate jobs
(foomatic printjob).
 
The site http://www.linuxprinting.org/ is based on this database.

---------------------------------------------------------------------
Update Information:

Sebastian Krahmer reported a bug in the cupsomatic and foomatic-rip
print filters, used by the CUPS print spooler. An attacker who has
printing access could send a carefully named file to the print server
causing arbitrary commands to be executed as root. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CAN-2004-0801 to this issue.

---------------------------------------------------------------------
fc1 changelog:
* Thu Oct 07 2004 Marc Deslauriers <marcdeslauriers at videotron.ca>
3.0.0-21.5.legacy
 
- Added missing BuildRequires: a2ps, enscript, mpage, cups, automake,
  autoconf, ghostscript
 
* Wed Sep 22 2004 Rob Myers <rob.myers at gtri.gatech.edu>
3.0.0-21.4.legacy
 
- Fix security issue (CAN-2004-0801, bug #130951).  Patch from Till
  Kamppeter.

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedoralegacy.org/
(sha1sums)

8a425a8debf0be9be2dbbc0f028ed1eb8350e833 
fedora/1/updates-testing/i386/foomatic-3.0.0-21.5.legacy.i386.rpm
a684fc034e1cde9ee35185f5db9e3da4446104b3 
fedora/1/updates-testing/SRPMS/foomatic-3.0.0-21.5.legacy.src.rpm

---------------------------------------------------------------------

Please test and comment in bugzilla.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20041007/785b785d/attachment.sig>