Package: okular Version: 4:17.12.2-2 Severity: critical Tags: upstream security
"critical" because a document should always go to where it is sent. Please reduce the severity if I have overestimated the security implications. The CUPS version being used is 2.2.8-5 and cups-browsed is not running. The issue was encountered while taking another look at #911702. brian@test:~$ lpstat -e aaa realq_desktop test aaa and test are local queues set up with lpadmin -p <destination> -v file:/home/brian/capture -E -m drv:///sample.drv/generic.ppd and realq_desktop is a queue on a remote machine. Okular was started from a terminal. Printing to realq_desktop produces an output of request id is aaa-41 (1 file(s)) The job is always sent to a local queue when its destination precedes realq_desktop alphabetically. Removing the aaa queue gets /usr/bin/lp: No such file of directory (which is #911702) I believe printing from LibreOffice to be based on the same principles as printing from Okular. Printing from that application is not an issue. qpdfview is another affected application. Regards, Brian.