Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora 24: 2017-05-19 Moderate Memory Leak in SANE Scanner Access

fedora
Calendar Grey May 19, 2017
Dist Fedora Esm H88
Keep up-to-date on the recent Fedora release for sane-backends that tackles an important vulnerability.
CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server [fedora-all] ---- This update adds the "skip- adf" option to the avi...

Summary

Scanner Access Now Easy (SANE) is a universal scanner interface. The

SANE application programming interface (API) provides standardized

access to any raster image scanner hardware (flatbed scanner,

hand-held scanner, video and still cameras, frame-grabbers, etc.).

CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response packet may contain

memory contents of the server [fedora-all] ---- This update adds the "skip-adf" option to the avision driver. This let users work around problems on HP

ScanJet 82xx/83xx scanners with no automatic document feeder attached.

[ 1 ] Bug #1428886 - CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1428886

[ 2 ] Bug #1288712 - Fix for HP8200 scanners: ADF infinite loop [patch]

https://bugzilla.redhat.com/show_bug.cgi?id=1288712

su -c 'dnf upgrade sane-backends' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Product: Fedora 24
Version: 1.0.25
Release: 7.fc24
Summary: Scanner access software

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here