Red Hat Security AdvisoryRHSA-2015:1123
cups security update
Released 2015-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) cups-1:1.6.3-17.el7_1.1, cups-client-1:1.6.3-17.el7_1.1, cups-filesystem-1:1.6.3-17.el7_1.1 +2
- Red Hat Enterprise Linux Client Optional (v. 7) cups-devel-1:1.6.3-17.el7_1.1, cups-ipptool-1:1.6.3-17.el7_1.1
- Red Hat Enterprise Linux ComputeNode (v. 7) cups-1:1.6.3-17.el7_1.1, cups-client-1:1.6.3-17.el7_1.1, cups-filesystem-1:1.6.3-17.el7_1.1 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) cups-devel-1:1.6.3-17.el7_1.1, cups-ipptool-1:1.6.3-17.el7_1.1
- Red Hat Enterprise Linux Desktop (v. 6) cups-1:1.4.2-67.el6_6.1, cups-libs-1:1.4.2-67.el6_6.1, cups-lpd-1:1.4.2-67.el6_6.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) cups-devel-1:1.4.2-67.el6_6.1, cups-php-1:1.4.2-67.el6_6.1
- Red Hat Enterprise Linux HPC Node (v. 6) cups-1:1.4.2-67.el6_6.1, cups-libs-1:1.4.2-67.el6_6.1, cups-lpd-1:1.4.2-67.el6_6.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) cups-devel-1:1.4.2-67.el6_6.1, cups-php-1:1.4.2-67.el6_6.1
- Red Hat Enterprise Linux Server (v. 6) cups-1:1.4.2-67.el6_6.1, cups-devel-1:1.4.2-67.el6_6.1, cups-devel-1:1.4.2-67.el6_6.1.ppc +3
- Red Hat Enterprise Linux Server (v. 7) cups-1:1.6.3-17.ael7b_1.1, cups-1:1.6.3-17.el7_1.1, cups-client-1:1.6.3-17.ael7b_1.1 +11
- Red Hat Enterprise Linux Server Optional (v. 6) cups-php-1:1.4.2-67.el6_6.1
- Red Hat Enterprise Linux Server Optional (v. 7) cups-ipptool-1:1.6.3-17.ael7b_1.1, cups-ipptool-1:1.6.3-17.el7_1.1
- Red Hat Enterprise Linux Workstation (v. 6) cups-1:1.4.2-67.el6_6.1, cups-devel-1:1.4.2-67.el6_6.1, cups-libs-1:1.4.2-67.el6_6.1 +1
- Red Hat Enterprise Linux Workstation (v. 7) cups-1:1.6.3-17.el7_1.1, cups-client-1:1.6.3-17.el7_1.1, cups-devel-1:1.6.3-17.el7_1.1 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) cups-php-1:1.4.2-67.el6_6.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) cups-ipptool-1:1.6.3-17.el7_1.1
Fixes 3 records
Priority HIGH 66
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption f…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.29726 · Published 2015-06-26 · Partial fix CWE-254
Priority LOW 38
Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04633 · Published 2015-02-19 · Partial fix CWE-119
Priority LOW 30
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter t…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07246 · Published 2015-06-26 · Partial fix CWE-79
THREATIST.IORead the docs