RHBA-2009:1360 - Bug Fix Advisory

Topic

Updated cups packages that fix several bugs are now available.

Description

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX and Unix-like operating systems.

These updated packages address the following bugs:

• the libcups library's HTTP state machine could get into a busy loop when

a connection was closed at an unexpected point. (BZ#474323)

• web interface template files and translated template files were not

marked as configuration files so local modifications to them would be lost
when applying updates. This update will also cause local modifications to
those files to be lost, but will prevent the same situation occurring with
future updates. (BZ#474769)

• the "compression" job option was encoded with the wrong IPP tag,

preventing the "document-format" job option from overriding automatic MIME
type detection of compressed job files . (BZ#474814)

• the "mailto" CUPS notifier used the wrong line ending when transferring

messages to an SMTP server, causing it not to send any notifications.
(BZ#474920)

• automatic MIME type detection would fail when the document name was

required by the relevant rule but only one file was present in the job.
MIME detection would also fail with some rules using "+" (e.g.
application/x-shell). (BZ#479635)

• incorrect web interface URLs would be given when the server's domain name

resolved to a local loopback address on the server. (BZ#479809)

• the CUPS configuration file directive "Satisfy Any" was not correctly

implemented, causing access to be restricted in situations where it should
not have been. (BZ#481303)

• an optimization in the libcups library for fetching details of a print

queue when its name is known caused problems with obtaining the name of the
default printer when "lpoptions" files listed a non-existent queue as the
default. (BZ#481481)

• RPM verification would fail on configuration files even though content

changes were expected. (BZ#487161)

• the CUPS scheduler requires an updated version of the krb5 package in

order to function correctly but this was not an RPM dependency. (BZ#489714)

• the text-only filter would not send form-feed characters correctly.

(BZ#491190)

• incorrect IPP-Get-Jobs requests, accepted by CUPS in current versions of

Red Hat Enterprise Linux but rejected in newer versions of the upstream
package, were generated by the cupsGetJobs2() API function and by the
lpstat and lpq commands. (BZ#497529)

All cups users should upgrade to these updated packages, which resolve
these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 474323 - another libcups busy-loop
• BZ - 474769 - templates and translated templates should be marked as configuration files
• BZ - 474814 - Cannot override CUPS' auto-typing for compressed files
• BZ - 474920 - CUPS' mailto notifier is broken up-to 1.3.9 (inclusive)
• BZ - 479635 - CUPS gets MIME type of application/x-shell wrong
• BZ - 479809 - CUPS web interface admin URLs are incorrect
• BZ - 481303 - cupsd.conf directive "Satisfy Any" broken when upgrading from CUPS v1.2.4 to CUPS v1.3.7
• BZ - 481481 - LPR no longer knows system default printer, but not LPQ, after upgrading to cups-1.3.7
• BZ - 487161 - cups rpm verification fails on configfile
• BZ - 489714 - Needs explicit versioned krb5-libs dependency
• BZ - 491190 - SendFF does not work
• BZ - 497529 - lpstat uses incorrect IPP-Get-Jobs request; rejected by CUPS-1.3.10

CVEs

(none)

References

(none)