SciLinux: CVE-2010-2941 Important CUPS Security Update for SL6.x

Date: Thu, 3 Mar 2011 15:46:45 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Important: cups on SL6.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Important: cups security update
Issue date:	2010-11-10
CVE Names:	CVE-2010-2941

An invalid free flaw was found in the way the CUPS server parsed
Internet Printing Protocol (IPP) packets. A malicious user able to send
IPP requests to the CUPS server could use this flaw to crash the CUPS
server. (CVE-2010-2941)

After installing this update, the cupsd daemon will be restarted
automatically.

SL 6.x

 SRPMS:
cups-1.4.2-35.el6_0.1.src.rpm
 i386:
cups-1.4.2-35.el6_0.1.i686.rpm
cups-devel-1.4.2-35.el6_0.1.i686.rpm
cups-libs-1.4.2-35.el6_0.1.i686.rpm
cups-lpd-1.4.2-35.el6_0.1.i686.rpm
cups-php-1.4.2-35.el6_0.1.i686.rpm
 x86_64:
cups-1.4.2-35.el6_0.1.x86_64.rpm
cups-devel-1.4.2-35.el6_0.1.i686.rpm
cups-devel-1.4.2-35.el6_0.1.x86_64.rpm
cups-libs-1.4.2-35.el6_0.1.i686.rpm
cups-libs-1.4.2-35.el6_0.1.x86_64.rpm
cups-lpd-1.4.2-35.el6_0.1.x86_64.rpm
cups-php-1.4.2-35.el6_0.1.x86_64.rpm

-Connie Sieh
-Troy Dawson