Red Hat Security Advisory

RHSA-2016:0491

foomatic security update

Released 2016-03-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) foomatic-4.0.4-5.el6_7
Red Hat Enterprise Linux HPC Node (v. 6) foomatic-4.0.4-5.el6_7
Red Hat Enterprise Linux Server (v. 6) foomatic-4.0.4-5.el6_7
Red Hat Enterprise Linux Workstation (v. 6) foomatic-4.0.4-5.el6_7

Fixes 3 records

TI-2010-05022 CVE-2010-5325 · GHSA-f3f5-3w2j-q3qx

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters…

MEDIUM 50

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05483 Published 2016-04-15 Fixed CWE-119

TI-2015-06854 CVE-2015-8327 · GHSA-cfgh-jg4g-q29h

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42…

MEDIUM 46

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.10575 Published 2015-12-17 Partial fix

TI-2015-07043 CVE-2015-8560 · GHSA-rcfc-82wc-2wjm

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42…

MEDIUM 40

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) charact…

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.05251 Published 2016-04-14 Partial fix