Red Hat Security AdvisoryRHSA-2008:0937
cups security update
Released 2008-10-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 cups-1:1.1.17-13.3.54, cups-1:1.1.17-13.3.54.i386, cups-devel-1:1.1.17-13.3.54 +3
- Red Hat Enterprise Linux (v. 5 server) cups-1:1.2.4-11.18.el5_2.2, cups-1:1.2.4-11.18.el5_2.2.i386, cups-1:1.2.4-11.18.el5_2.2.ia64 +13
- Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.54, cups-1:1.1.17-13.3.54.i386, cups-1:1.1.17-13.3.54.ia64 +9
- Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.27.el4_7.1, cups-1:1.1.22-0.rc1.9.27.el4_7.1.i386, cups-1:1.1.22-0.rc1.9.27.el4_7.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.2.4-11.18.el5_2.2, cups-1:1.2.4-11.18.el5_2.2.i386, cups-libs-1:1.2.4-11.18.el5_2.2 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.2.4-11.18.el5_2.2, cups-devel-1:1.2.4-11.18.el5_2.2, cups-devel-1:1.2.4-11.18.el5_2.2.i386
- Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.27.el4_7.1, cups-1:1.1.22-0.rc1.9.27.el4_7.1.i386, cups-devel-1:1.1.22-0.rc1.9.27.el4_7.1 +3
- Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.54, cups-1:1.1.17-13.3.54.i386, cups-1:1.1.17-13.3.54.ia64 +6
- Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.27.el4_7.1, cups-1:1.1.22-0.rc1.9.27.el4_7.1.i386, cups-1:1.1.22-0.rc1.9.27.el4_7.1.ia64 +6
- Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.54, cups-1:1.1.17-13.3.54.i386, cups-1:1.1.17-13.3.54.ia64 +6
- Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.27.el4_7.1, cups-1:1.1.22-0.rc1.9.27.el4_7.1.i386, cups-1:1.1.22-0.rc1.9.27.el4_7.1.ia64 +6
Fixes 3 records
Priority MEDIUM 64
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.24132 · Published 2008-10-10 · Fixed CWE-399
Priority MEDIUM 40
Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small i…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04403 · Published 2008-10-14 · Fixed CWE-119
Priority LOW 38
Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04647 · Published 2008-10-14 · Fixed CWE-189
THREATIST.IORead the docs