linuxgeek: [LINUX_Newbies] Re: CUPS ERROR MESSAGE

The problem you are having should not happen, so it is a bug, and what I am going to suggest isn't the "right" fix, but if it works then hey, why not? First I have to ask, do you really need CUPS on that machine? If the answer is no then you can uninstall CUPS so you can get beyond what is hanging you up.

--- In LINUX_Newbies@yahoogroups.com, "Alan Matthews" <alanm0aqc@...> wrote:
>
> Paul
>
> Thanks for your input, however the upgrade that I am trying to do is
> interrupted by this message, the upgrade stops and does not continue, I
> rerun the upgrade only to get this message popping up again...again...again
> etc.
>
> Regards Alan
>
>
>
>
>
> -------Original Message-------
>
> From: Paul
> Date: 13/04/2013 17:15:33
> To: LINUX_Newbies@yahoogroups.com
> Subject: [LINUX_Newbies] Re: CUPS ERROR MESSAGE
>
>
> It doesn't look like an error message to me. More like an informative
> message. They are simply telling you that they addressed this issue:
>
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5519
>
> Also how to work with the new system.
>
> --- In LINUX_Newbies@yahoogroups.com, "Alan" <alanm0aqc@> wrote:
> >
> > hi I am running linux debian squeeze on my x86 thin client, i am trying to
> upgrade some software that i use on this machine and am getting the
> following error message, this then stops me from upgrading can anyone help
> please.
> >
> > error message......
> >
> > cups (1.4.4-7+squeeze2) stable-security; urgency=high
> > In order to mitigate a privilege escalation from the lpadmin to root
> > (CVE-2012-5519), the /etc/cups/cupsd.conf configuration file is split
> > in two configuration files:
> > * /etc/cups/cupsd.conf can be edited by members of the lpadmin group
> > through the cups web interface;
> > * /etc/cups/cups-files.conf can only be edited by root;
> > Many sensitive configuration statements can now only be set in
> > cups-files.conf. No statements have been moved automatically. Please
> > check the respective manpages.
> > -- Didier Raboud <odyx@> Sat, 29 Dec 2012 12:33:27 +0100
> > /tmp/tmpqn_mAs (END)
> >
>
>
>
>
>
> [Non-text portions of this message have been removed]
>