cups (1.3.8-1+lenny8) stable-security; urgency=high
* Non-maintainer upload by the Security Team.
* Fix loading of localized message string from arbitrary files
through exporting the LOCALEDIR environment variable when lppasswd
has a setuid bit set (CVE-2010-0393).
-- Nico Golde <nion op debian.org> Tue, 01 Mar 2010 14:06:40 +0000