For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The cups-filters package contains back ends, filters, and other software
that was once part of the core Common UNIX Printing System (CUPS)
distribution but is now maintained independently.
Security Fix(es):
* cups-filters: remote code execution in cups-filters, beh CUPS backend
(CVE-2023-24805)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
https://access.redhat.com/security/cve/CVE-2023-24805 https://access.redhat.com/security/updates/classification#important
Red Hat Enterprise Linux AppStream EUS (v.8.6):
Source:
cups-filters-1.20.0-27.el8_6.1.src.rpm
aarch64:
cups-filters-1.20.0-27.el8_6.1.aarch64.rpm
cups-filters-debuginfo-1.20.0-27.el8_6.1.aarch64.rpm
cups-filters-debugsource-1.20.0-27.el8_6.1.aarch64.rpm
cups-filters-libs-1.20.0-27.el8_6.1.aarch64.rpm
cups-filters-libs-debuginfo-1.20.0-27.el8_6.1.aarch64.rpm
ppc64le:
cups-filters-1.20.0-27.el8_6.1.ppc64le.rpm
cups-filters-debuginfo-1.20.0-27.el8_6.1.ppc64le.rpm
cups-filters-debugsource-1.20.0-27.el8_6.1.ppc64le.rpm
cups-filters-libs-1.20.0-27.el8_6.1.ppc64le.rpm
cups-filters-libs-debuginfo-1.20.0-27.el8_6.1.ppc64le.rpm
s390x:
cups-filters-1.20.0-27.el8_6.1.s390x.rpm
cups-filters-debuginfo-1.20.0-27.el8_6.1.s390x.rpm
cups-filters-debugsource-1.20.0-27.el8_6.1.s390x.rpm
cups-filters-libs-1.20.0-27.el8_6.1.s390x.rpm
cups-filters-libs-debuginfo-1.20.0-27.el8_6.1.s390x.rpm
x86_64:
cups-filters-1.20.0-27.el8_6.1.x86_64.rpm
cups-filters-debuginfo-1.20.0-27.el8_6.1.i686.rpm
cups-filters-debuginfo-1.20.0-27.el8_6.1.x86_64.rpm
cups-filters-debugsource-1.20.0-27.el8_6.1.i686.rpm
cups-filters-debugsource-1.20.0-27.el8_6.1.x86_64.rpm
cups-filters-libs-1.20.0-27.el8_6.1.i686.rpm
cups-filters-libs-1.20.0-27.el8_6.1.x86_64.rpm
Read the Full Advisory
An update for cups-filters is now available for Red Hat Enterprise Linux8.6 Extended Update Support.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.
Red Hat CodeReady Linux Builder EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux AppStream EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64
2203051 - CVE-2023-24805 cups-filters: remote code execution in cups-filters, beh CUPS backend
Get the latest Linux and open source security news straight to your inbox.