As of now, default cupsd.conf specifies the option 'Port 631', which listens to all open interfaces. This should be replaced by 'Listen 127.0.0.1:631', which listens on the local interface only.
Yes, I agree, its an unsafe default value.
it used to, i wonder when that change was lost
Printing any news on this one?
looks like cups-1.2.x already does this by default ive updated 1.1.23-r7 to also do this by defeault now i dont think this needs a revbump ?
Closing. I don't think a revbump is needed here either as long as all new installs and upgrades are fine. Thx Mike