ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ CUPS 2.3 ื“ืจื•ืง ืกื™ืกื˜ืขื ืžื™ื˜ ืึท ืขื ื“ืขืจื•ื ื’ ืื™ืŸ ื“ื™ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืคึฟืึทืจ ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืงืึธื“

ื›ึผืžืขื˜ ื“ืจื™ื™ ื™ืึธืจ ื ืึธืš ื“ื™ ืคืึธืจืžื™ืจื•ื ื’ ืคื•ืŸ ื“ื™ ืœืขืฆื˜ืข ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืฆื•ื•ื™ื™ึทื’, ืขืคึผืœ ื“ืขืจืœืื ื’ื˜ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ืคืจื™ื™ ื“ืจื•ืง ืกื™ืกื˜ืขื CUPS 2.3 (Common Unix Printing System), ื’ืขื ื™ืฆื˜ ืื™ืŸ ืžืึทืงืึธืก ืื•ืŸ ืจื•ื‘ึฟ ืœื™ื ื•ืงืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–. ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ CUPS ืื™ื– ื’ืึธืจ ืงืึทื ื˜ืจืึธื•ืœื“ ื“ื•ืจืš ืขืคึผืœ, ื•ื•ืึธืก ืื™ืŸ 2007 ืึทื‘ื–ืึธืจื‘ื“ Easy Software Products, ื“ืขืจ ื‘ืืฉืขืคืขืจ ืคื•ืŸ CUPS.

ืกื˜ืึทืจื˜ื™ื ื’ ืžื™ื˜ ื“ืขื ืžืขืœื“ื•ื ื’, ื“ื™ ืงืึธื“ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ื”ืื˜ ื’ืขื‘ื™ื˜ืŸ ืคื•ืŸ GPLv2 ืื•ืŸ LGPLv2 ืฆื• Apache 2.0, ื•ื•ืึธืก ื•ื•ืขื˜ ืœืึธื–ืŸ ื“ืจื™ื˜ ืคึผืึทืจื˜ื™ืขืก ืฆื• ื ื•ืฆืŸ CUPS ืงืึธื“ ืื™ืŸ ื–ื™ื™ืขืจ ืคึผืจืึธื“ื•ืงื˜ืŸ ืึธืŸ ืขืคึฟืขื ืขืŸ ืžืงื•ืจ ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ, ืื•ืŸ ื•ื•ืขื˜ ืื•ื™ืš ืœืึธื–ืŸ ืœื™ื™ืกืึทื ืกื™ื ื’ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ ืื ื“ืขืจืข ืขืคึฟืขื ืขืŸ ืžืงื•ืจ ืขืคึผืœ ืคึผืจืึทื“ื–ืฉืขืงืก. ืึทื–ืึท ื•ื•ื™ ืกื•ื•ื™ืคื˜, ื•ื•ืขื‘ืงื™ื˜ ืื•ืŸ mDNSResponder. ื“ื™ Apache 2.0 ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืื•ื™ืš ื‘ืคื™ืจื•ืฉ ื“ื™ืคื™ื™ื ื– ื“ื™ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคื•ืŸ ืจืขื›ื˜ ืฆื• ืคึผืจืึทืคึผืจื™ื™ืึทื˜ืขืจื™ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืฆื•ื–ืืžืขืŸ ืžื™ื˜ ื“ื™ ืงืึธื“. ื ื ืขื’ืึทื˜ื™ื•ื• ืงืึทื ืกืึทืงื•ื•ืึทื ืก ืคื•ืŸ ื˜ืฉืึทื ื’ื™ื ื’ ื“ื™ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืคื•ืŸ GPL ืฆื• Apache ืื™ื– ื“ื™ ืึธื ื•ื•ืขืจ ืคื•ืŸ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ ืคึผืจืึทื“ื–ืฉืขืงืก ืกืึทืคึผืœื™ื™ื“ ื‘ืœื•ื™ื– ืื•ื ื˜ืขืจ ื“ื™ GPLv2 ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ (ื“ื™ Apache 2.0 ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืื™ื– ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืžื™ื˜ GPLv3, ืึธื‘ืขืจ ื™ื ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืžื™ื˜ GPLv2). ืฆื• ืกืึธืœื•ื•ืข ื“ืขื ืึทืจื•ื™ืกื’ืขื‘ืŸ, ืึท ืกืคึผืขืฆื™ืขืœ ื•ื™ืกื ืขื ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ื”ืขืกืงืขื ืคึฟืึทืจ ืงืึธื“ ืœื™ื™ืกืึทื ืกื˜ ืื•ื ื˜ืขืจ GPLv2/LGPLv2.

ื”ื•ื™ืคึผื˜ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ CUPS 2.3:

  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคึผืจืขืกืขืฅ ืื•ืŸ ื“ื™ "ืคื™ื ื™ืฉื™ื ื’ยป ืื™ืŸ ื“ืจื•ืง ืึทืจื‘ืขื˜ ื˜ืขืžืคึผืœืึทื˜ืขืก ืคึฟืึทืจ ื“ืขื ืคึผืจืึธื˜ืึธืงืึธืœ IPP ืื•ืžืขื˜ื•ื, ื•ื•ืึธืก ื’ื™ื˜ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ื“ื™ื ืึทืžื™ืง ืกืึทืœืขืงื˜ื™ื ื’ ืึท ื‘ื ื™ืžืฆื ื“ืจื•ืงืขืจ ืื•ื™ืฃ ืึท ื ืขืฅ, ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ืึทื•ื•ื™ื™ืœืึทื‘ื™ืœืึทื˜ื™ ืคื•ืŸ ืคึผืจื™ื ื˜ืขืจืก, ืฉื™ืงืŸ ืจื™ืงื•ื•ืขืก ืื•ืŸ ื“ื•ืจื›ืคื™ืจืŸ ื“ืจื•ืง ืึทืคึผืขืจื™ื™ืฉืึทื ื–, ื‘ื™ื™ื“ืข ื’ืœื™ื™ึทืš ืื•ืŸ ื“ื•ืจืš ื™ื ื˜ืขืจืžื™ื“ื™ื™ื˜ ืžื—ื ื•ืช;
  • ื ื ื™ื™ึทืข ื ื•ืฆืŸ ืื™ื– ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ippeveprinter ืžื™ื˜ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืึท ืคึผืฉื•ื˜ IPP ืื•ืžืขื˜ื•ื ืกืขืจื•ื•ืขืจ ื•ื•ืึธืก ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ืคึผืจื•ื‘ื™ืจืŸ ืงืœื™ืขื ื˜ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืึธื“ืขืจ ืœื•ื™ืคืŸ ืงืึทืžืึทื ื“ื– ืคึฟืึทืจ ื™ืขื“ืขืจ ื“ืจื•ืง ืึทืจื‘ืขื˜;
  • ื“ื™ lpstat ื‘ืึทืคึฟืขืœ ืื™ืฆื˜ ื“ื™ืกืคึผืœื™ื™ื– ื“ื™ ืคึผื•ื™ื–ืข ืกื˜ืึทื˜ื•ืก ืคื•ืŸ ื ื™ื™ึทืข ื“ืจื•ืง ื“ื–ืฉืึธื‘ืก;
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื”ื˜ื˜ืคึผ ื“ื™ื’ืขืกื˜ ืื•ืŸ SHA-256 ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ืœื™ื‘ืงื•ืคึผืก ื‘ื™ื‘ืœื™ืึธื˜ืขืง;
  • ืื™ืŸ ื™ืžืคึผืœืึทืžืขื ื™ื ื’ ื“ื™ ื“ืจื•ืงืขืจ ื™ื™ึทื ื˜ื™ื™ืœื•ื ื’ ืคึผืจืึธื˜ืึธืงืึธืœ ื‘ืึทื ื–ืฉื•ืจ ื™ื ืฉื•ืจื“ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื ืก-ืกื“ ื ืขืžืขืŸ ื•ื•ืขืŸ ืจืขื“ื–ืฉื™ืกื˜ืขืจื™ื ื’ ืึท ื“ืจื•ืงืขืจ ืื•ื™ืฃ ื“ื™ ื ืขืฅ;
  • ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉืจื™ื™ึทื‘ืŸ ื™ืคึผืคึผืกืขืจื•ื•ืขืจ ืึทื˜ืจื™ื‘ื™ื•ื˜ ื˜ืขืงืขืก ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ื™ืคึผืคึผื˜ืึธืึธืœ ื ื•ืฆืŸ;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ MinTLS ืื•ืŸ MaxTLS ืึธืคึผืฆื™ืขืก ืฆื• ื“ื™ SSLOptions ื“ื™ืจืขืงื˜ื™ื•ื• ืคึฟืึทืจ ืกืขืœื™ื ื’ ื“ื™ TLS ื•ื•ืขืจืกื™ืขืก ืฆื• ื ื•ืฆืŸ;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ UserAgentTokens ื“ื™ืจืขืงื˜ื™ื•ื• ืฆื• "client.conf";
  • ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืกื™ืกื˜ืขื ื“ื™ื ืกื˜ ืฆื• ืœื•ื™ืคืŸ cupsd;
  • ื“ื™ lpoptions ื‘ืึทืคึฟืขืœ ืื™ืฆื˜ ื”ืื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึทืจื‘ืขื˜ืŸ ืžื™ื˜ IPP ืื•ืžืขื˜ื•ื ืคึผืจื™ื ื˜ืขืจืก ื•ื•ืึธืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื”ื™ื’ืข ื“ืจื•ืง ืงื™ื•ื–;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืจื™ื›ื˜ื™ืง ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคึผืจื™ื ื˜ืขืจืก ืžื™ื˜ ืคืจืึธื ื˜-ื–ื™ื™ึทื˜ ื“ืจื•ืงืŸ ืžืึธื“ืข ืฆื• ื“ื™ IPP ืื•ืžืขื˜ื•ื ืฉืึธืคืขืจ;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื›ึผืœืœื™ื ืฆื• ื ืขืžืขืŸ ืื™ืŸ ื—ืฉื‘ื•ืŸ ื“ื™ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ ื•ืกื‘ ืคึผืจื™ื ื˜ืขืจืก Lexmark E120n, Lexmark Optra E310, Zebra, DYMO 450 Turbo, Canon MP280, Xerox ืื•ืŸ HP LaserJet P1102;
  • ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜ CVE-2019-8696 ะธ CVE-2019-8675, ืœื™ื“ื™ื ื’ ืฆื• ืึท ืึธื•ื•ื•ืขืจืคืœืึธื• ืคื•ืŸ ื“ื™ ื‘ืึทืคืขืจ ืึทืœืึทืงื™ื™ื˜ื™ื“ ืคึฟืึทืจ ื“ื™ ืึธื ืœื™ื™ื’ืŸ ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืคืึทืœืฉ ื“ืึทื˜ืŸ ืื™ืŸ ื“ื™ ืคืึทื ื’ืงืฉืึทื ื– asn1_get_packed ืื•ืŸ asn1_get_type ื’ืขื ื™ืฆื˜ ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ SNMP ืจื™ืงื•ื•ืขืก;
  • ื“ื™ cupsaddsmb ืื•ืŸ cupstestdsc ื™ื•ื˜ื™ืœืึทื˜ื™ื– ื–ืขื ืขืŸ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’