Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 8 LTS DLA-1936-1 Critical: CUPS Session Cookie Issue

debian lts
Calendar Grey September 28, 2019
Dist Debian Esm H88
An issue in cups allows unauthorized access via session cookies. Upgrade recommended for Debian 8 LTS users.
An issue has been found in cups, the Common UNIX Printing System(tm)
Topics%20covered

Topics Covered

security advisory security update unauthorized access debian cups session cookie

Summary

While generating a session cookie for the CUPS web interface, a
predictable random number seed was used. This could lead to unauthorized
scripted access to the enabled web interface.


For Debian 8 "Jessie",
this problem has been fixed in version 1.7.5-11+deb8u6.

We recommend that you upgrade your cups packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: cups
Version: 1.7.5-11+deb8u6
CVE ID: CVE-2018-4300

Topics%20covered

Topics Covered

security advisory security update unauthorized access debian cups session cookie

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here