Unknown directive SystemGroup
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cups (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Ubuntu 12.04 Precise, /var/log/
E [10/Dec/
The file contains:
# Administrator user group...
SystemGroup lpadmin
I can find no reference to "SystemGroup" in man 5 cupsd.conf.
$ apt-cache policy cups
cups:
Installed: 1.5.3-0ubuntu5.1
Candidate: 1.5.3-0ubuntu5.1
Version table:
*** 1.5.3-0ubuntu5.1 0
500 http://
500 http://
100 /var/lib/
1.5.2-9ubuntu1 0
500 http://
Looking at the patches for CVE-2012-5519 committed 3rd December 2012 it seems that the SystemGroup variable was removed from cupsd.conf configuration but existing entries in cupds.conf were not migrated in the post-inst scripts.
cups (1.5.3-0ubuntu5.1) precise-security; urgency=low
* SECURITY UPDATE: privilege escalation via config file editing patches/ CVE-2012- 5519.patch: split configuration file into cups.install: also install cups-files.conf patches/ removecvstag. patch: updated to remove tag from files.conf.
- debian/
two, to isolate options that have a security impact.
- debian/
- debian/
cups-
- CVE-2012-5519