cups security update

[1:1.1.17-13.3.70]

• Reinstated fix for CVE-2010-3702 (bug #595245).
  [1:1.1.17-13.3.69]
• Temporarily removed fix for CVE-2010-3702.
  [1:1.1.17-13.3.68]
• Added bounds checking to Type1CFontFile::getWord() in order to
  verify fix for CVE-2010-3702.
• Applied small fix to CVE-2009-0791 change: allow objSize=0 in
  gmallocCn() if C > 0. As well as being correct, this aids with
  testing the fix for CVE-2010-3702.
  [1:1.1.17-13.3.67]
• Applied upstream patch to fix uninitialized Gfx::parser pointer
  dereference (bug #595245).