Red Hat Security AdvisoryRHSA-2020:3864
cups security and bug fix update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) cups-1:1.6.3-51.el7, cups-client-1:1.6.3-51.el7, cups-filesystem-1:1.6.3-51.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) cups-devel-1:1.6.3-51.el7, cups-ipptool-1:1.6.3-51.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) cups-1:1.6.3-51.el7, cups-client-1:1.6.3-51.el7, cups-filesystem-1:1.6.3-51.el7 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) cups-devel-1:1.6.3-51.el7, cups-ipptool-1:1.6.3-51.el7
- Red Hat Enterprise Linux Server (v. 7) cups-1:1.6.3-51.el7, cups-client-1:1.6.3-51.el7, cups-devel-1:1.6.3-51.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) cups-ipptool-1:1.6.3-51.el7
- Red Hat Enterprise Linux Workstation (v. 7) cups-1:1.6.3-51.el7, cups-client-1:1.6.3-51.el7, cups-devel-1:1.6.3-51.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) cups-ipptool-1:1.6.3-51.el7
Fixes 3 records
Priority MEDIUM 42
A buffer overflow issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02182 · Published 2020-10-27 · Partial fix · 10.14 CWE-120
Priority MEDIUM 42
A buffer overflow issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02119 · Published 2020-10-27 · Partial fix · 10.14 CWE-120
Priority LOW 38
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02923 · Published 2018-02-16 · Partial fix CWE-290