Red Hat Security AdvisoryRHSA-2020:1050
cups security and bug fix update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) cups-1:1.6.3-43.el7, cups-client-1:1.6.3-43.el7, cups-filesystem-1:1.6.3-43.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) cups-devel-1:1.6.3-43.el7, cups-ipptool-1:1.6.3-43.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) cups-1:1.6.3-43.el7, cups-client-1:1.6.3-43.el7, cups-filesystem-1:1.6.3-43.el7 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) cups-devel-1:1.6.3-43.el7, cups-ipptool-1:1.6.3-43.el7
- Red Hat Enterprise Linux Server (v. 7) cups-1:1.6.3-43.el7, cups-client-1:1.6.3-43.el7, cups-devel-1:1.6.3-43.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) cups-ipptool-1:1.6.3-43.el7
- Red Hat Enterprise Linux Workstation (v. 7) cups-1:1.6.3-43.el7, cups-client-1:1.6.3-43.el7, cups-devel-1:1.6.3-43.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) cups-ipptool-1:1.6.3-43.el7
Fixes 3 records
Priority LOW 34
In macOS High Sierra before 10.13.5, an issue existed in CUPS.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00454 · Published 2019-01-11 · Partial fix
Priority LOW 30
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01841 · Published 2019-04-03 · Partial fix CWE-200
Priority LOW 25
In macOS High Sierra before 10.13.5, an issue existed in CUPS.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2019-01-11 · Partial fix