@Martin: check out the comments on http://www.gnucitizen.org/blog /pwning-ubuntu-via-cups/
someone figured out why ubuntu hardy does NOT require auth to add rss subscriptions (cupsd dies completely when visiting "evil" page), whereas ubuntu intrepid DOES require auth. copied and pasted: " TH responds: Problem solved: Hardy’s version: 1.3.7-1ubuntu3.1 Intrepid’s version: 1.3.9-2 http://packages.ubuntu.com/intrepid/cups http://packages.ubuntu.com/hardy/cupsys >From cups-1.3.8 CHANGES.txt: - The scheduler now ensures that the RSS directory has the correct permissions. " hope that helps. -- Apple CUPS Daemon: unauthenticated SIGSEGV crash via RSS subscriptions https://bugs.launchpad.net/bugs/298241 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
