Re: [Printing-architecture] github.com/OpenPrinting/goipp 1.1.0 and ipp-usb 0.9.24 announce

Michael Sweet <[email protected]> Fri, 8 Dec 2023 12:14:44 -0500
Newsgroups dev.linux.lists.printing-architecture
Message-ID <[email protected]>
Alexander,

> On Dec 8, 2023, at 11:02 AM, Alexander Pevzner <[email protected]> wrote:
> ...
> Please note, that fixing Pantum M7300FDW requires the similar patch in CUPS, which is not currently approved (see https://github.com/OpenPrinting/cups/pull/826).

*No*.  Fixing this printers requires that the printer manufacturer fixes their firmware...  It is one thing if an attribute is using an odd syntax (e.g. name instead of keyword), but quite another thing when they break a fundamental part of the IPP encoding that has known, *previously exploited* security implications.  Think of it as a malicious USB device that causes an issue when plugged into a computer...

________________________
Michael Sweet