<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-extended/cups, branch scarthgap</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2026-01-26T09:45:39+00:00</updated>
<entry>
<title>cups: allow unknown directives in conf files</title>
<updated>2026-01-26T09:45:39+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2026-01-01T12:14:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8df07c56620109ce2d7092139c99327f0ead08f1'/>
<id>urn:sha1:8df07c56620109ce2d7092139c99327f0ead08f1</id>
<content type='text'>
Patch for CVE-2025-61915 by mistake causes fatal error on unknown
directives in configuration files.
The default configuration already contains unknown directive in
non-systemd setups:
Unknown directive IdleExitTimeout on line 32 of /etc/cups/cupsd.conf

Backport fix for this from 2.4.x branch which reverts this behavior.

(From OE-Core rev: 2f36a12a72cf1f91a2d6ee68bd04292979608eb9)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Paul Barker &lt;paul@pbarker.dev&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cups 2.4.11: Fix CVE-2025-61915</title>
<updated>2025-12-31T15:49:31+00:00</updated>
<author>
<name>Deepak Rathore</name>
<email>deeratho@cisco.com</email>
</author>
<published>2025-12-12T15:14:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=85e5f0fa1e4a1fa1549d9544f69ae3afbc747266'/>
<id>urn:sha1:85e5f0fa1e4a1fa1549d9544f69ae3afbc747266</id>
<content type='text'>
Upstream Repository: https://github.com/OpenPrinting/cups.git

Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-61915
Type: Security Fix
CVE: CVE-2025-61915
Score: 6.7
Patch: https://github.com/OpenPrinting/cups/commit/db8d560262c2

(From OE-Core rev: ca252aac4e50b7ed8864bf7482a86fe7129e737e)

Signed-off-by: Deepak Rathore &lt;deeratho@cisco.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups 2.4.11: Fix CVE-2025-58436</title>
<updated>2025-12-31T15:49:31+00:00</updated>
<author>
<name>Deepak Rathore</name>
<email>deeratho@cisco.com</email>
</author>
<published>2025-12-12T15:09:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=15a18fae405a4cb261401042bc513c0df9129205'/>
<id>urn:sha1:15a18fae405a4cb261401042bc513c0df9129205</id>
<content type='text'>
Upstream Repository: https://github.com/OpenPrinting/cups.git

Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-58436
Type: Security Fix
CVE: CVE-2025-58436
Score: 5.5
Patch: https://github.com/OpenPrinting/cups/commit/5d414f1f91bd

(From OE-Core rev: 6a721aad5f531ac74996386cbaaa0173c2c5001a)

Signed-off-by: Deepak Rathore &lt;deeratho@cisco.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups: Fix for CVE-2025-58060 and CVE-2025-58364</title>
<updated>2025-09-22T20:17:52+00:00</updated>
<author>
<name>Vijay Anusuri</name>
<email>vanusuri@mvista.com</email>
</author>
<published>2025-09-17T11:26:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c0775e49999088784dff543d02a1cb48d35f724c'/>
<id>urn:sha1:c0775e49999088784dff543d02a1cb48d35f724c</id>
<content type='text'>
Upstream-Status: Backport from
https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221
&amp; https://github.com/OpenPrinting/cups/commit/e58cba9d6fceed4242980e51dbd1302cf638ab1d

(From OE-Core rev: 6f3b7e6efdf14d080b74a48d8cdc445255e9025f)

Signed-off-by: Vijay Anusuri &lt;vanusuri@mvista.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups: upgrade 2.4.10 -&gt; 2.4.11</title>
<updated>2025-09-22T20:17:52+00:00</updated>
<author>
<name>Vijay Anusuri</name>
<email>vanusuri@mvista.com</email>
</author>
<published>2025-09-17T11:26:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d4f27582ea22a5a702b215b9bcad95a80227037d'/>
<id>urn:sha1:d4f27582ea22a5a702b215b9bcad95a80227037d</id>
<content type='text'>
Removed CVE-2024-47175 patches which is fixed by upgrade
system-cups.slice added to FILES

Changelog
==========

v2.4.11

CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support (checkbox support, modifying printers) and others fixes.

Detailed list of changes is available in CHANGES.md

(From OE-Core rev: 117a401756a3cf26d1fc0a6694b0c42967e00fec)

Signed-off-by: Vijay Anusuri &lt;vanusuri@mvista.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups: Backport fix for CVE-2024-47175</title>
<updated>2024-10-18T13:04:40+00:00</updated>
<author>
<name>Hitendra Prajapati</name>
<email>hprajapati@mvista.com</email>
</author>
<published>2024-10-08T05:12:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=afbf467405f6d74e39690e96c0f2b885a7624ff1'/>
<id>urn:sha1:afbf467405f6d74e39690e96c0f2b885a7624ff1</id>
<content type='text'>
Upstream-Status: Backport from
https://github.com/OpenPrinting/cups/commit/9939a70b750edd9d05270060cc5cf62ca98cfbe5
&amp;
https://github.com/OpenPrinting/cups/commit/04bb2af4521b56c1699a2c2431c56c05a7102e69
&amp;
https://github.com/OpenPrinting/cups/commit/e0630cd18f76340d302000f2bf6516e99602b844
&amp;
https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
&amp;
https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b

Reference: https://security-tracker.debian.org/tracker/CVE-2024-47175

(From OE-Core rev: f00847d91eb9440c9f1bc2f34cd0edd2af490f78)

Signed-off-by: Hitendra Prajapati &lt;hprajapati@mvista.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups: upgrade 2.4.9 -&gt; 2.4.10</title>
<updated>2024-09-09T13:08:10+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2024-07-10T09:43:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=50cd89849b38e1695071ab0a0e7b31fdd6916fde'/>
<id>urn:sha1:50cd89849b38e1695071ab0a0e7b31fdd6916fde</id>
<content type='text'>
Changelog:
===========
- Fixed error handling when reading a mixed "1setOf" attribute.
- Fixed scheduler start if there is only domain socket to listen on

0001-use-echo-only-in-init.patch
0002-don-t-try-to-run-generated-binaries.patch
0004-cups-fix-multilib-install-file-conflicts.patch
refreshed for 2.4.10.

(From OE-Core rev: 01039c35a89de4bbd1410b3ee08a99cf325adf2b)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit dd7a978d2d7feb11f6c265ba812c8ca29912ebc6)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups: Upgrade 2.4.7 -&gt; 2.4.9</title>
<updated>2024-06-20T13:29:44+00:00</updated>
<author>
<name>Siddharth Doshi</name>
<email>sdoshi@mvista.com</email>
</author>
<published>2024-06-13T02:06:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=abcd5a88a3712e07589073212d95adff4b4ce959'/>
<id>urn:sha1:abcd5a88a3712e07589073212d95adff4b4ce959</id>
<content type='text'>
CVE's Fixed by upgrade:
CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777

Other Changes between 2.4.7 -&gt; 2.4.9
====================================
https://github.com/OpenPrinting/cups/blob/2.4.x/CHANGES.md

(From OE-Core rev: fea7f804f916d0c6c86823fc8dce6463c425532d)

Signed-off-by: Siddharth Doshi &lt;sdoshi@mvista.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>cups: use LOCALE_PATHS to split localized HTML templates</title>
<updated>2024-02-14T13:53:36+00:00</updated>
<author>
<name>Jonathan GUILLOT</name>
<email>jonathan@joggee.fr</email>
</author>
<published>2023-12-06T16:06:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8da6bd69dc2f05b6eb692f9ad311f888405fbab3'/>
<id>urn:sha1:8da6bd69dc2f05b6eb692f9ad311f888405fbab3</id>
<content type='text'>
Localized HTML templates in /usr/share/cups/templates are now part of
locale packages.

(From OE-Core rev: beb21ac92e95b6f4bf64e4932b154f78e2c6c2ef)

Signed-off-by: Jonathan GUILLOT &lt;jonathan@joggee.fr&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cups: Add root,sys,wheel to system groups</title>
<updated>2023-12-02T17:18:57+00:00</updated>
<author>
<name>Markus Volk</name>
<email>f_l_k@t-online.de</email>
</author>
<published>2023-11-25T11:15:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4371f927bc5e94eac0b11e47e2abcd3a0621655c'/>
<id>urn:sha1:4371f927bc5e94eac0b11e47e2abcd3a0621655c</id>
<content type='text'>
The Cups documentation states:
The default contains "admin", "lpadmin", "root", "sys" and/or "system".
https://www.cups.org/doc/man-cups-files.conf.html#:~:text=SystemGroup

Add root and sys accordingly
Also add wheel group. This is required for systems with polkit support in order to
control the printer settings with cups-pk-helper.
Not only for gnome-control-center, but also when using plain system-config-printer on
a system with running polkit, cups-pk-helper would be a required rdepend.

(From OE-Core rev: 572fed0ac6dbcf5749e19c7b624826fc30cf301e)

Signed-off-by: Markus Volk &lt;f_l_k@t-online.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
