Ukukhutshwa kwenkqubo yoshicilelo yeCUPS 2.3 ngotshintsho kwilayisenisi yekhowudi yeprojekthi

Phantse iminyaka emithathu emva kokusekwa kwesebe lokugqibela elibalulekileyo, iApple thaca ukukhululwa kwenkqubo yoshicilelo yasimahla IINDABA 2.3 (INkqubo yoShicilelo ye-Unix eqhelekileyo), esetyenziswa kwi-macOS nakuninzi losasazo lwe-Linux. Ukuphuhliswa kweCUPS kulawulwa ngokupheleleyo yi-Apple, eyathi ngo-2007 ifunxwe Easy Software Products, umdali CUPS.

Ukuqala ngolu khululo, ilayisenisi yekhowudi itshintshile ukusuka kwi-GPLv2 kunye ne-LGPLv2 ukuya kwi-Apache 2.0, eya kuvumela abantu besithathu ukuba basebenzise ikhowudi ye-CUPS kwiimveliso zabo ngaphandle kokuvula umthombo wotshintsho, kwaye baya kuvumela ukuhambelana kwelayisensi kunye nezinye iiprojekthi ezivulekileyo ze-Apple. njenge Swift, WebKit kunye ne mDNSResponder. Ilayisenisi ye-Apache 2.0 ikwachaza ngokucacileyo ukudluliselwa kwamalungelo kubuchwephesha bobunini kunye nekhowudi. Isiphumo esibi sokutshintsha ilayisenisi ukusuka kwi-GPL ukuya kwi-Apache kukuphulukana nelayisensi yokuhambelana neeprojekthi ezinikezelwe kuphela phantsi kwelayisensi ye-GPLv2 (ilayisensi ye-Apache 2.0 iyahambelana ne-GPLv3, kodwa ayihambelani ne-GPLv2). Ukusombulula lo mba, ngaphandle okukhethekileyo kongezwe kwisivumelwano selayisensi yekhowudi enikwe ilayisenisi phantsi kwe-GPLv2/LGPLv2.

Siseko utshintsho kwiCUPS 2.3:

• Inkxaso eyongeziweyo yokusetha kwangaphambili kunye ne "kugqiba»kushicilelo lwetemplates yomsebenzi weprothokholi IPP Yonke indawo, ebonelela ngezixhobo zokukhetha ngokuguquguqukayo umshicileli okhoyo kumsebenzi womnatha, ikuvumela ukuba umise ubukho babashicileli, thumela izicelo kwaye wenze imisebenzi yoshicilelo, ngokuthe ngqo nangokuphakathi kweenginginya eziphakathi;
• Isixhobo esitsha esiluncedo sibandakanyiwe ipeveprinter ngokuphunyezwa kwe-IPP elula Yonke indawo yomncedisi enokuthi isetyenziswe ukuvavanya isoftware yomxhasi okanye ukuqhuba imiyalelo yomsebenzi ngamnye woshicilelo;
• Umyalelo we-lpstat ngoku ubonisa ubume bophumlo lwemisebenzi emitsha yoshicilelo;
• Inkxaso ye-HTTP Digest kunye ne-SHA-256 yokuqinisekisa yongezwe kwilayibrari ye-libcups;
• Ekuphumezeni iprotocol yokwabelana ngomshicileli hello uqinisekise ukusetyenziswa kwamagama e-DNS-SD xa ubhalisa umshicileli kuthungelwano;
• Ukukwazi ukubhala iifayile zophawu lwe-ippserver zongezwe kusetyenziso lwe-ipptool;
• Inkxaso eyongeziweyo yeenketho zeMinTLS kunye neMaxTLS kumyalelo weSSLOptions wokukhetha iinguqulelo zeTLS eziza kusetyenziswa;
• Inkxaso eyongeziweyo yomyalelo we-UserAgentTokens kwi-"client.conf";
• Inkonzo ehlaziyiweyo yenkqubo yokuqhuba cupsd;
• Umyalelo we lpoptions ngoku unokwazi ukusebenza nge IPP Yonke indawo abashicileli abadityaniswanga kwimigca yoshicilelo yobulali;
• Yongeze inkxaso echanekileyo yabashicileli abanendlela yoshicilelo yecala langaphambili kwi IPP Yonke indawo;
• Imithetho eyongeziweyo yokuthathela ingqalelo iimpawu zabashicileli be-USB Lexmark E120n, Lexmark Optra E310, Zebra, DYMO 450 Turbo, Canon MP280, Xerox kunye neHP LaserJet P1102;
• Ubuthathaka bulungisiwe I-CVE-2019-8696 и I-CVE-2019-8675, ekhokelela ekuphuphumeni kwe-buffer eyabelwe isitaki xa kusetyenzwa idatha engachanekanga kwimisebenzi ye-asn1_get_packed kunye ne-asn1_get_type esetyenziswa xa kusetyenzwa izicelo zeSNMP;
• I cupsaddsmb kunye ne cupstestdsc eziluncedo zisusiwe.

umthombo: opennet.ru