Re: CUPS 2.4.11 is released!

Hello,

On 2024-09-30 16:42, Till Kamppeter wrote:
> thanks for the quick release, but the CHANGES.md
> does not mention the CVE-related fixes contained in it.

> On 9/30/24 14:25, Zdenek Dohnal wrote:
>> CUPS 2.4.11 brings several bug fixes
>> regarding IPP response validation, processing PPD values,
>> Web UI support (checkbox support, modifying printers)
>> and others fixes.

I was also wondering about CVE-related fixes.
As far as I understand it from the GitHub upstream commits
CUPS 2.4.11 contains (only) those commits regarding
IPP response validation and processing PPD values

"Quote PPD localized strings"
https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd

plus the cleanup to "Fix warnings for unused vars"
https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b

which are somewhat related to those CVEs
by avoiding sililar further issues as in those CVEs
but are not the actual fixes for explicitly those CVEs.


Kind Regards
Johannes Meixner
-- 
SUSE Software Solutions Germany GmbH
Frankenstr. 146 - 90461 Nuernberg - Germany
(HRB 36809, AG Nuernberg) GF: Ivo Totev