[MIR] ippusbxd
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ippusbxd (Ubuntu) |
Fix Released
|
High
|
Unassigned |
Bug Description
Principally, this software is already in Ubuntu Main since Utopic, as part of the cups-filters source package, as the binary package cups-filters-
Rationale: ippusbxd is an interface daemon to support the communication with printers, scanners, and other devices using the IPP-over-USB standard. These are devices which are connected via a USB cable but emulate the network protocol IPP (Internet Printing Protocol). With this the devices have advanced functionality which one usually encounters only in native network devices, especially the device can be configured using a web browser instead of proprietary software. Also standards for driverless which are originally defined for network devices can be made use of, especially the IPP Everywhere standard from the Printer Working Group PWG (http://
Many modern, even very cheap printers use this protocol nowadays. It replaces former proprietary protocols for packet-based USB communication and so is an important piece of hardware support, especially in the free software world where standard protocols are needed.
Availability: ippusbxd is already available as DEB package in Debian Unstable and Ubuntu Universe (starting from Wily on). It builds on all supported architectures (see Launchpad page of ippusbxd).
Security: No known security vulnerabilities on
- http://
- http://
- http://
There are no executables with SUID or GUID bits and no privileged ports opened.
The software is a daemon started by the UDEV-triggered /lib/udev/
Quality assurance: The package is supposed to get installed with the standard installation of the system and ippusbxd gets automatically used if an IPP-over-USB printer is connected. There is no action required by the user, the printer will "just work".
The package does not use debconf at all. It is actively maintained upstream and in Debian (there by Debian's printing team where I am also part of). In case of discontinuation of upstream maintenance I will take the package into OpenPrinting.
There are no Debian bug reports concerning ippusbxd:
https:/
There are no Ubuntu bugs concerning ippusbxd:
https:/
There is also nothing concerning the ippusbxd shipped as part of Ubuntu's cups-filters:
https:/
Upstream ippusbxd has no test suite, so we cannot use one for the package build. As it only runs with a supported printer connected it is also not easy to create a test suite to be run on build servers.
An active debian/watch file is included.
UI standards: ippusbxd has no user interface, it is automatically started and stopped in the background.
Dependencies: ippusbxd uses only standard libraries which are all in Main.
Standards compliance: All files are at there expected places and the packaging is done the standard Debian way.
Maintenace: The ippusbxd package is maintained by Debian's printing team (where I am also part of) and is usually synced into Ubuntu. When Debian is in freeze or we are after Feature Freeze I will also do Debian-independent package releases if needed.
Related branches
CVE References
Changed in ippusbxd (Ubuntu): | |
assignee: | nobody → Jamie Strandboge (jdstrand) |
Changed in ippusbxd (Ubuntu): | |
assignee: | Jamie Strandboge (jdstrand) → Ubuntu Security Team (ubuntu-security) |
Changed in ippusbxd (Ubuntu): | |
importance: | Undecided → High |
Changed in ippusbxd (Ubuntu): | |
assignee: | Ubuntu Security Team (ubuntu-security) → Seth Arnold (seth-arnold) |
Till, this binds to in6addr_any and has no access controls to determine who might be able to use the printer; is this intentional?
Thanks