Page MenuHomeSolus

Update cups to 2.2.8
ClosedPublic

Authored by kyrios123 on Mar 31 2018, 3:06 PM.

Details

Summary

Changelogs version 2.2.7 - version 2.2.8

Security: fixes CVE-2017-18248

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan

I can do the rebuilds, but it would be nice if someone with a printer could do a few tests first

Diff Detail

Repository
R575 cups
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.

Event Timeline

kyrios123 created this revision.Mar 31 2018, 3:06 PM
kyrios123 requested review of this revision.Mar 31 2018, 3:06 PM
kyrios123 retitled this revision from Update cups to 2.2.7 to Update cups to 2.2.7, fixes CVE-2017-18248.Mar 31 2018, 3:31 PM
kyrios123 added a project: Restricted Project.
DataDrake accepted this revision.Aug 4 2018, 12:47 PM
DataDrake added a project: Requires Rebuilds.
DataDrake added a subscriber: DataDrake.

LGTM. Have fun with rebuilds!

This revision is now accepted and ready to land.Aug 4 2018, 12:47 PM
kyrios123 updated this revision to Diff 8612.Aug 4 2018, 4:34 PM
kyrios123 retitled this revision from Update cups to 2.2.7, fixes CVE-2017-18248 to Update cups to 2.2.8.
kyrios123 edited the summary of this revision. (Show Details)

Bump to 2.2.8, add dependecy with kerberos as it is now in system.base and add a couple of upstream patches

You can also disable kerberbos with --disable-gssapi. The build gets confused with the lack of the devel subpackage. I don't know if we should enable it or not.

LGTM. Have fun with rebuilds!

Bryan I couldn't rebuild 2.2.7 and I saw 2.2.8 was there but it also failed to build. The errors were linked to gss-api because of kerberos ( 8eb73defba72 ). Since it's now in system.base, I think it's better adding it as a dependency rather than disabling gss-api, is that fine ?
I also back-ported a couple of upstream patches.

Please let me know if you agree with these changes since I made them post-approval.

kyrios123 updated this revision to Diff 8616.Aug 4 2018, 5:58 PM

Disable gssapi (otherwise there is an impacts the build stack)

This revision was automatically updated to reflect the committed changes.