Ubuntu 13.10: USN-2082-1 Moderate: CUPS Information Exposure

ubuntu

January 15, 2014

CUPS could be made to expose sensitive information.

Summary

CUPS could be made to expose sensitive information.

Software Description:

- cups: Common UNIX Printing System(tm)

Details:

Jann Horn discovered that the CUPS lppasswd tool incorrectly read a user

configuration file in certain configurations. A local attacker could use

this to read sensitive information from certain files, bypassing access

restrictions.

Topics Covered

security advisory CUPS information exposure ubuntu sensitive data local attack prevention

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  cups-client                     1.7.0~rc1-0ubuntu5.2

Ubuntu 13.04:
  cups-client                     1.6.2-1ubuntu8

Ubuntu 12.10:
  cups-client                     1.6.1-0ubuntu11.5

In general, a standard system update will make all the necessary changes.