Just FYI, system-config-printer is no longer the tool installed by
default, the gnome printer applet is the preferred tool for configuring
printers now.
> After the CVE fix, CUPS requires
root peer credentials to rewrite cupsd.conf through the local CUPS
socket. Therefore, ServerSetSettings fails and server-setting changes
requested by system-config-printer are not applied.
Ah yes, the server settings in system-config-printer. I can confirm
those don't work anymore after the CUPS security update.
> After the CVE fix, CUPS requires
root peer credentials to rewrite cupsd.conf through the local CUPS
socket.
Yes, the whole point of the security update was to prevent someone in
the lpadmin group from doing PUTs, including rewriting the cupsd.conf
file.
Since this likely affects the Ubuntu dev release, and probably also
Debian, and the changes required to restore this functionality are
substantial, I will let the desktop team handle review of this, as they
take care of the printing stack. Once they think this is appropriate and
have uploaded it to the the Ubuntu development release, I will prepare
fixes for the stable Ubuntu releases.
Thanks!
** Changed in: cups-pk-helper (Ubuntu)
Status: New => Confirmed
** Also affects: system-config-printer (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2167414
Title:
ServerSetSettings fails after CVE-2025-61915: non-root cups-pk-helper
cannot PUT cupsd.conf
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-pk-helper/+bug/2167414/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
