diff --git a/cups-lspp.patch b/cups-lspp.patch index 6e83006..2d7edba 100644 --- a/cups-lspp.patch +++ b/cups-lspp.patch @@ -1160,7 +1160,7 @@ + cupsdSetStringf(&audit_message, "[Config] Classification=%s", Classification); + audit_log_user_message(AuditLog, AUDIT_LABEL_LEVEL_CHANGE, audit_message, + ServerName, NULL, NULL, 1); -+ free(audit_message); ++ cupsdClearString(&audit_message); + } +#endif /* WITH_LSPP */ + } @@ -1660,7 +1660,7 @@ + con->username, con->scon, printer->name); + audit_log_user_message(AuditLog, AUDIT_USER_LABELED_EXPORT, audit_message, + ServerName, NULL, NULL, 0); -+ free(audit_message); ++ cupsdClearString(&audit_message); + } + + send_ipp_status(con, IPP_NOT_AUTHORIZED, _("SELinux prohibits access to the printer")); @@ -1805,7 +1805,7 @@ + audit_log_user_message(AuditLog, AUDIT_LABEL_OVERRIDE, audit_message, + ServerName, NULL, NULL, 0); + } -+ free(audit_message); ++ cupsdClearString(&audit_message); } } @@ -2350,7 +2350,7 @@ + job->auid, (job->username)?job->username:"?", job->scon, printer->name); + audit_log_user_message(AuditLog, AUDIT_USER_LABELED_EXPORT, audit_message, + ServerName, NULL, NULL, 0); -+ free(audit_message); ++ cupsdClearString(&audit_message); + } + + cupsdCancelJob(job, 0, IPP_JOB_ABORTED); @@ -2399,7 +2399,7 @@ + job->id, job->auid, job->username, printer->name, title); + audit_log_user_message(AuditLog, AUDIT_USER_UNLABELED_EXPORT, audit_message, + ServerName, NULL, NULL, 1); -+ free(audit_message); ++ cupsdClearString(&audit_message); + } + } + else @@ -2437,7 +2437,7 @@ + printer->name, title, job->scon, mls_label?mls_label:"none"); + audit_log_user_message(AuditLog, AUDIT_USER_LABELED_EXPORT, audit_message, + ServerName, NULL, NULL, 1); -+ free(audit_message); ++ cupsdClearString(&audit_message); + } + context_free(jobcon); + free(label_template); @@ -2526,7 +2526,7 @@ + if (printercon) + context_free(printercon); + free(rangestr); -+ free(audit_message); ++ cupsdClearString(&audit_message); + } +#endif /* WITH_LSPP */ } diff --git a/cups.spec b/cups.spec index b8fa635..81c227b 100644 --- a/cups.spec +++ b/cups.spec @@ -449,6 +449,9 @@ rm -rf $RPM_BUILD_ROOT %{cups_serverbin}/daemon/cups-lpd %changelog +* Mon Nov 12 2007 Tim Waugh +- LSPP cupsdSetString/ClearString fixes (bug #378451). + * Wed Nov 7 2007 Tim Waugh 1:1.3.4-2 - Applied patch to fix CVE-2007-4045 (bug #250161). - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and