pkg/37830: Request for update of cups

[slrn_robert%yahoo.de@localhost]

>Number:         37830
>Category:       pkg
>Synopsis:       security issueÑ? in cups
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Jan 21 08:35:00 +0000 2008
>Originator:     Robert Wappler
>Release:        NetBSD 3.1.0_PATCH
>Organization:
>Environment:
        
        
System: NetBSD robert-pickton 3.1.0_PATCH NetBSD 3.1.0_PATCH (ROBERT_PICKTON) 
#0: Sun Apr 29 02:57:40 CEST 2007 
mary@robert-pickton:/usr/src/obj/sys/arch/i386/compile/ROBERT_PICKTON i386
Architecture: i386
Machine: i386
>Description:
        Since the cups versions 1.3.4 and prior have arbitrary code execution
        vulnerabilities.
        Thus I request an update.
        References:
                http://www.cups.org/str.php?L2589
                http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4352
                http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5392
                http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393
        (taken from audit-packages)

        Thank you

>How-To-Repeat:
        n/a
>Fix:
        Ugrade to >cups-1.3.4

>Unformatted: