linuxgeek: Re: [LINUX_Newbies] Re: CUPS ERROR MESSAGE

Paul

Thanks for your input, however the upgrade that I am trying to do is
interrupted by this message, the upgrade stops and does not continue, I
rerun the upgrade only to get this message popping up again...again...again
etc.

Regards Alan

-------Original Message-------

From: Paul
Date: 13/04/2013 17:15:33
To: LINUX_Newbies@yahoogroups.com
Subject: [LINUX_Newbies] Re: CUPS ERROR MESSAGE

It doesn't look like an error message to me. More like an informative
message. They are simply telling you that they addressed this issue:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5519

Also how to work with the new system.

--- In LINUX_Newbies@yahoogroups.com, "Alan" <alanm0aqc@...> wrote:
>
> hi I am running linux debian squeeze on my x86 thin client, i am trying to
upgrade some software that i use on this machine and am getting the
following error message, this then stops me from upgrading can anyone help
please.
>
> error message......
>
> cups (1.4.4-7+squeeze2) stable-security; urgency=high
> In order to mitigate a privilege escalation from the lpadmin to root
> (CVE-2012-5519), the /etc/cups/cupsd.conf configuration file is split
> in two configuration files:
> * /etc/cups/cupsd.conf can be edited by members of the lpadmin group
> through the cups web interface;
> * /etc/cups/cups-files.conf can only be edited by root;
> Many sensitive configuration statements can now only be set in
> cups-files.conf. No statements have been moved automatically. Please
> check the respective manpages.
> -- Didier Raboud <odyx@...> Sat, 29 Dec 2012 12:33:27 +0100
> /tmp/tmpqn_mAs (END)
>

[Non-text portions of this message have been removed]