Siideynta nidaamka daabacaadda CUPS 2.3 oo leh isbeddel ku yimid shatiga code-ka mashruuca

Ku dhawaad ​​saddex sano ka dib markii la sameeyay laantii ugu dambeysay ee muhiimka ahayd, Apple soo bandhigay siideynta nidaamka daabacaadda bilaashka ah CUPS 2.3 (Nidaamka Daabacaada Guud ee Unix), oo loo isticmaalo macOS iyo inta badan qaybinta Linux. Horumarinta CUPS waxaa si buuxda u maamula Apple, kaas oo 2007 nuugo Alaabooyinka Software-ka fudud, abuuraha CUPS.

Laga bilaabo siideyntan, shatiga koodka ayaa ka beddelay GPLv2 iyo LGPLv2 una beddelay Apache 2.0, kaas oo u oggolaanaya dhinacyada saddexaad inay isticmaalaan koodka CUPS alaabtooda iyaga oo aan furin isha isbeddelada, iyo sidoo kale u oggolaan doona waafaqsanaanta shatiga mashaariicda ilaha kale ee Apple. sida Swift, WebKit iyo mDNSResponder. Shatiga Apache 2.0 ayaa sidoo kale si cad u qeexaya wareejinta xuquuqda tignoolajiyada lahaanshaha oo ay la socoto koodhka. Cawaaqib xumada ka dhalan karta in shatiga laga beddelo GPL loona beddelo Apache waa luminta la qabsiga shatiga ee mashaariicda lagu bixiyo shatiga GPLv2 oo keliya ( shatiga Apache 2.0 wuxuu la jaan qaadayaa GPLv3, laakiin kuma habboona GPLv2). Si arrintan loo xalliyo, ka reebis gaar ah ayaa lagu daray heshiiska shatiga koodka hoos yimaada shatiga GPLv2/LGPLv2.

Main isbedel ku jira CUPS 2.3:

• Taageerada lagu daray presets iyo "dhammeystirid» oo ku jira qaababka shaqada daabacaadda ee borotokoolka IPP meel kasta, kaas oo bixiya qalab loogu talagalay xulashada daabacaha la heli karo ee shabakada, waxay kuu ogolaaneysaa inaad go'aamiso helitaanka madbacadaha, soo dirto codsiyada oo aad sameyso hawlgallada daabacaadda, labadaba si toos ah iyo iyada oo loo marayo martigeliyaha dhexdhexaadka ah;
• Adeeg cusub ayaa lagu daray ippeveprinter iyada oo la hirgelinayo IPP meel kasta oo server ah oo loo isticmaali karo in lagu tijaabiyo software macmiilka ama in lagu socodsiiyo amarrada shaqo kasta oo daabacan;
• Amarka lpstat wuxuu hadda soo bandhigayaa xaaladda hakad ee shaqooyinka daabacaadda cusub;
• Taageerada HTTP Digest iyo xaqiijinta SHA-256 ayaa lagu daray maktabadda libcups;
• Marka la fulinayo borotokoolka wadaagga daabacaha Bonjour Xaqiijiyay isticmaalka magacyada DNS-SD marka la diiwangelinayo daabacaha shabakadda;
• Awoodda lagu qoro faylalka sifada ipserver ayaa lagu daray utility ipptool;
• Taageero lagu daray xulashooyinka MinTLS iyo MaxTLS ee dardaaranka SSLOptions ee xulashada noocyada TLS si loo isticmaalo;
• Taageero lagu daray dardaaranka UserAgentTokens "client.conf";
• Adeegga habaysan ee la cusboonaysiiyay si uu u socodsiiyo koobabka;
• Amarka lpoptions hadda wuxuu awood u leeyahay inuu la shaqeeyo IPP Meel kasta daabacayaasha aan lagu darin safafka daabacaadda maxalliga ah;
• Taageero sax ah oo lagu daray madbacadaha leh qaabka daabacaadda dhinaca hore ee IPP meel kasta darawalka;
• Xeerarka lagu daray si loo tixgeliyo sifooyinka daabacayaasha USB Lexmark E120n, Lexmark Optra E310, Zebra, DYMO 450 Turbo, Canon MP280, Xerox iyo HP LaserJet P1102;
• Nuglaanta ayaa go'an CVE-2019-8696 и CVE-2019-8675, taasoo horseedaysa qulqulka kaydka loo qoondeeyay xidhmada marka la habaynayo xogta khaldan ee asn1_get_packed iyo asn1_get_type function la isticmaalo marka la farsamaynayo codsiyada SNMP;
• Cupsaddsmb iyo cupstestdsc utilities waa la saaray.

Source: opennet.ru