Red Hat Bugzilla – Bug 134601
CAN-2004-0923 Log file information disclosure
Last modified: 2007-11-30 17:10:50 EST
When set up to print to a shared printer via Samba, CUPS will
authenticate with that shared printer using a user name and password.
By default, the user name and password used to connect to the Samba
share will be stored in the log file.
See the cups BTS entry for more information.
I've uploaded the upsteam patch as attachment 104751 [details]
Ready to push once I have confirmation that this issue is public.
now public, via http://secunia.com/advisories/12690/
This issue was fixed in FEDORA-2004-337