Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
219
security advisorycriticalbug fixRocky Linux 8 RLSA-2022:5056 Critical: CUPS Security and Bug Fix
Important: cups security and bug fix update. \{'type': 'Security', 'shortCode': 'RL', 'name': 'RLSA-2022:5056', 'synopsis': 'Important: cups security and bug fix update', 'severity': 'Important', 'topic': 'An update for cups is now available for Rocky Linux 8.\nRocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.', 'description': 'The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.', 'solution': None, 'affectedProducts': ['Rocky Linux 8'], 'fixes': ['2084321'], 'cves': ['Red Hat:::https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26691.json:::CVE-2022-26691'], 'references': [], 'publishedAt': '2022-07-07T19:55:39.211323Z', 'rpms': ['cups-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-2.2.6-45.el8_6.2.src.rpm', 'cups-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-client-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-client-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-client-debuginfo-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-client-debuginfo-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-debuginfo-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-debuginfo-2.2.6-45.el8_6.2.i686.rpm', 'cups-debuginfo-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-debugsource-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-debugsource-2.2.6-45.el8_6.2.i686.rpm', 'cups-debugsource-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-devel-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-devel-2.2.6-45.el8_6.2.i686.rpm', 'cups-devel-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-filesystem-2.2.6-45.el8_6.2.noarch.rpm', 'cups-ipptool-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-ipptool-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-ipptool-debuginfo-2.2.6-45.el8_6.2.aarch64.rpm','cups-ipptool-debuginfo-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-libs-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-libs-2.2.6-45.el8_6.2.i686.rpm', 'cups-libs-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-libs-debuginfo-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-libs-debuginfo-2.2.6-45.el8_6.2.i686.rpm', 'cups-libs-debuginfo-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-lpd-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-lpd-2.2.6-45.el8_6.2.x86_64.rpm', 'cups-lpd-debuginfo-2.2.6-45.el8_6.2.aarch64.rpm', 'cups-lpd-debuginfo-2.2.6-45.el8_6.2.x86_64.rpm']}\. CUPS update on Rocky Linux resolves vulnerabilities and bugs. Discover details about the implications and the solutions provided.. Rocky Linux Updates,CUPS Security Fix,Printing System Bug Fix,Open Source Security Advisory. . Severity: Important. LinuxSecurity.com Team
Sep 02, 2022
•Important
Rocky Linux
98
security advisorybug fixRed Hat Enterprise LinuxRedHat: RHSA-2020-1765-01 Low Severity: CUPS Stack Overflow Fix
An update for cups is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: cups security and bug fix update Advisory ID: RHSA-2020:1765-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1765 Issue date: 2020-04-28 CVE Names: CVE-2019-8675 CVE-2019-8696 ==================================================================== 1. Summary: An update for cups is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: stack-buffer-overflow in libcups's asn1_get_type function (CVE-2019-8675) * cups: stack-buffer-overflow in libcups's asn1_get_packed function (CVE-2019-8696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section. 4. Solution: Fordetails on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the cupsd service will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1738455 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function 1738497 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function 6. Package List: Red Hat Enterprise Linux AppStream (v.8): aarch64: cups-2.2.6-33.el8.aarch64.rpm cups-client-2.2.6-33.el8.aarch64.rpm cups-client-debuginfo-2.2.6-33.el8.aarch64.rpm cups-debuginfo-2.2.6-33.el8.aarch64.rpm cups-debugsource-2.2.6-33.el8.aarch64.rpm cups-devel-2.2.6-33.el8.aarch64.rpm cups-ipptool-2.2.6-33.el8.aarch64.rpm cups-ipptool-debuginfo-2.2.6-33.el8.aarch64.rpm cups-libs-debuginfo-2.2.6-33.el8.aarch64.rpm cups-lpd-2.2.6-33.el8.aarch64.rpm cups-lpd-debuginfo-2.2.6-33.el8.aarch64.rpm noarch: cups-filesystem-2.2.6-33.el8.noarch.rpm ppc64le: cups-2.2.6-33.el8.ppc64le.rpm cups-client-2.2.6-33.el8.ppc64le.rpm cups-client-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-debugsource-2.2.6-33.el8.ppc64le.rpm cups-devel-2.2.6-33.el8.ppc64le.rpm cups-ipptool-2.2.6-33.el8.ppc64le.rpm cups-ipptool-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-libs-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-lpd-2.2.6-33.el8.ppc64le.rpm cups-lpd-debuginfo-2.2.6-33.el8.ppc64le.rpm s390x: cups-2.2.6-33.el8.s390x.rpm cups-client-2.2.6-33.el8.s390x.rpm cups-client-debuginfo-2.2.6-33.el8.s390x.rpm cups-debuginfo-2.2.6-33.el8.s390x.rpm cups-debugsource-2.2.6-33.el8.s390x.rpm cups-devel-2.2.6-33.el8.s390x.rpm cups-ipptool-2.2.6-33.el8.s390x.rpm cups-ipptool-debuginfo-2.2.6-33.el8.s390x.rpm cups-libs-debuginfo-2.2.6-33.el8.s390x.rpm cups-lpd-2.2.6-33.el8.s390x.rpm cups-lpd-debuginfo-2.2.6-33.el8.s390x.rpm x86_64: cups-2.2.6-33.el8.x86_64.rpm cups-client-2.2.6-33.el8.x86_64.rpm cups-client-debuginfo-2.2.6-33.el8.i686.rpm cups-client-debuginfo-2.2.6-33.el8.x86_64.rpm cups-debuginfo-2.2.6-33.el8.i686.rpm cups-debuginfo-2.2.6-33.el8.x86_64.rpm cups-debugsource-2.2.6-33.el8.i686.rpm cups-debugsource-2.2.6-33.el8.x86_64.rpm cups-devel-2.2.6-33.el8.i686.rpm cups-devel-2.2.6-33.el8.x86_64.rpm cups-ipptool-2.2.6-33.el8.x86_64.rpm cups-ipptool-debuginfo-2.2.6-33.el8.i686.rpm cups-ipptool-debuginfo-2.2.6-33.el8.x86_64.rpm cups-libs-debuginfo-2.2.6-33.el8.i686.rpm cups-libs-debuginfo-2.2.6-33.el8.x86_64.rpm cups-lpd-2.2.6-33.el8.x86_64.rpm cups-lpd-debuginfo-2.2.6-33.el8.i686.rpm cups-lpd-debuginfo-2.2.6-33.el8.x86_64.rpm Red Hat Enterprise Linux BaseOS (v. 8): Source: cups-2.2.6-33.el8.src.rpm aarch64: cups-client-debuginfo-2.2.6-33.el8.aarch64.rpm cups-debuginfo-2.2.6-33.el8.aarch64.rpm cups-debugsource-2.2.6-33.el8.aarch64.rpm cups-ipptool-debuginfo-2.2.6-33.el8.aarch64.rpm cups-libs-2.2.6-33.el8.aarch64.rpm cups-libs-debuginfo-2.2.6-33.el8.aarch64.rpm cups-lpd-debuginfo-2.2.6-33.el8.aarch64.rpm ppc64le: cups-client-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-debugsource-2.2.6-33.el8.ppc64le.rpm cups-ipptool-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-libs-2.2.6-33.el8.ppc64le.rpm cups-libs-debuginfo-2.2.6-33.el8.ppc64le.rpm cups-lpd-debuginfo-2.2.6-33.el8.ppc64le.rpm s390x: cups-client-debuginfo-2.2.6-33.el8.s390x.rpm cups-debuginfo-2.2.6-33.el8.s390x.rpm cups-debugsource-2.2.6-33.el8.s390x.rpm cups-ipptool-debuginfo-2.2.6-33.el8.s390x.rpm cups-libs-2.2.6-33.el8.s390x.rpm cups-libs-debuginfo-2.2.6-33.el8.s390x.rpm cups-lpd-debuginfo-2.2.6-33.el8.s390x.rpm x86_64: cups-client-debuginfo-2.2.6-33.el8.i686.rpm cups-client-debuginfo-2.2.6-33.el8.x86_64.rpm cups-debuginfo-2.2.6-33.el8.i686.rpm cups-debuginfo-2.2.6-33.el8.x86_64.rpm cups-debugsource-2.2.6-33.el8.i686.rpm cups-debugsource-2.2.6-33.el8.x86_64.rpm cups-ipptool-debuginfo-2.2.6-33.el8.i686.rpm cups-ipptool-debuginfo-2.2.6-33.el8.x86_64.rpm cups-libs-2.2.6-33.el8.i686.rpm cups-libs-2.2.6-33.el8.x86_64.rpm cups-libs-debuginfo-2.2.6-33.el8.i686.rpm cups-libs-debuginfo-2.2.6-33.el8.x86_64.rpm cups-lpd-debuginfo-2.2.6-33.el8.i686.rpm cups-lpd-debuginfo-2.2.6-33.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2019-8675 https://access.redhat.com/security/cve/CVE-2019-8696 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXqhVbtzjgjWX9erEAQhNFQ//T6CDY9Ksy+RJ3Q2WA/DGBpUbK6OQWNX+ L35bDJaupT89KVms+9QTeMvuUHkfHi0yWriyqHzYktYUoADHS61CW3dh4tMLCOZh nsgbgqBJaCg8wKSagAGJ5wb0lHaXdImN18bIzMi7v0VbyxKiSgxw75S1iVtxJ4oQ LstXMLYOjscOqeQp6zNCt5Npx3Uajpy0iWASvstJwWfIMdAmCtt2IoGlqVYTQ8og HgAKWvgi6XoFYJlal2g705TQKwNjn7PL/OQ7pKnnwJ6RL9v91bSkZylERFyj1tF/ juWEQ322G2O1XD112dMmPzYB1DPLjBUDcgTCD9Ag+W4DrqmuW2JYkAqcv+PN68bo wNnB+QyR9qjtiOn4zTm2OlsrITjuwEpgjFftVUurQgJ/yvv9DML4lwLM9vMy+gsU cVYAkwTj9qU2IzIZ2OFN967gP3VXn7HZ0R6qS7ck4uoOnrn49iHnweDEaSN7Qn7U qD8eDO9L69sp/N3vNL3SRtyZvU9C6vqxsIMT5lDMAfS6tzTE193N8GFRQhoXuPu2 fR7+ybRpN3a9FGg9hIo1kwhRKcPvexT7NhGOcFJ3MlgYjm3R25JBcvJDgKfB5H78 RlqY4jzIU8RMVmC0K9TVQpYWJmYEOcyt8zJqG3OSmaXw0U/lnVsmQl35WHZCFUsx vWVT6hpPN+w=G+Zo -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 28, 2020
•Low
Red Hat
98
security advisorysecurity issuecriticalRed Hat Enterprise Linux 4: RHSA-2010:0755-01 Important CUPS Error Fix
Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: cups security update Advisory ID: RHSA-2010:0755-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0755.html Issue date: 2010-10-07 CVE Names: CVE-2009-3609 CVE-2010-3702 ==================================================================== 1. Summary: Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems. The CUPS "pdftops" filter converts Portable Document Format (PDF) files to PostScript. Multiple flaws were discovered in the CUPS "pdftops" filter. An attacker could create a malicious PDF file that, when printed, would cause "pdftops" to crash or, potentially, execute arbitrary code as the "lp" user. (CVE-2010-3702, CVE-2009-3609) Users of cups are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the cupsd daemon will be restarted automatically. 4. Solution: Before applying this update, make sureall previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 526893 - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow 595245 - CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: cups-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm ia64: cups-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm ppc: cups-1.1.22-0.rc1.9.32.el4_8.10.ppc.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.ppc.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.ppc64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.ppc.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.ppc.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.ppc64.rpm s390: cups-1.1.22-0.rc1.9.32.el4_8.10.s390.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.s390.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.s390.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.s390.rpm s390x: cups-1.1.22-0.rc1.9.32.el4_8.10.s390x.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.s390.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.s390x.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.s390x.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.s390.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.s390x.rpm x86_64: cups-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm Red Hat EnterpriseLinux Desktop version 4: Source: i386: cups-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm x86_64: cups-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: cups-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm ia64: cups-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm x86_64: cups-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: cups-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm ia64: cups-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.ia64.rpm x86_64: cups-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-debuginfo-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-devel-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.i386.rpm cups-libs-1.1.22-0.rc1.9.32.el4_8.10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2009-3609 https://access.redhat.com/security/cve/CVE-2010-3702 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2010 Red Hat, Inc. . Critical patch release for RHEL 4 focusing on numerous security flaws. Update promptly to maintain protection.. CUPS Security Update, RHEL 4 Advisory, Critical Updates. . Severity: Important. LinuxSecurity.com Team
Oct 07, 2010
•Important
Red Hat
98
security advisorysecurity updateRed Hat Enterprise LinuxRed Hat: RHSA-2009:1513-01 Moderate: CUPS Integer Overflow Threat
Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: cups security update Advisory ID: RHSA-2009:1513-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1513.html Issue date: 2009-10-15 CVE Names: CVE-2009-3608 CVE-2009-3609 ==================================================================== 1. Summary: Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems. The CUPS "pdftops" filter converts Portable Document Format (PDF) files to PostScript. Two integer overflow flaws were found in the CUPS "pdftops" filter. An attacker could create a malicious PDF file that would cause "pdftops" to crash or, potentially, execute arbitrary code as the "lp" user if the file was printed. (CVE-2009-3608, CVE-2009-3609) Red Hat would like to thank Chris Rohlf for reporting the CVE-2009-3608 issue. Users of cups are advised to upgrade to these updated packages, which contain a backported patch to correct these issues. After installing the update, the cupsd daemon will be restarted automatically. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 526637 - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016) 526893 - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: cups-1.3.7-11.el5_4.3.i386.rpm cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-libs-1.3.7-11.el5_4.3.i386.rpm cups-lpd-1.3.7-11.el5_4.3.i386.rpm x86_64: cups-1.3.7-11.el5_4.3.x86_64.rpm cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-debuginfo-1.3.7-11.el5_4.3.x86_64.rpm cups-libs-1.3.7-11.el5_4.3.i386.rpm cups-libs-1.3.7-11.el5_4.3.x86_64.rpm cups-lpd-1.3.7-11.el5_4.3.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-devel-1.3.7-11.el5_4.3.i386.rpm x86_64: cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-debuginfo-1.3.7-11.el5_4.3.x86_64.rpm cups-devel-1.3.7-11.el5_4.3.i386.rpm cups-devel-1.3.7-11.el5_4.3.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: cups-1.3.7-11.el5_4.3.i386.rpm cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-devel-1.3.7-11.el5_4.3.i386.rpm cups-libs-1.3.7-11.el5_4.3.i386.rpm cups-lpd-1.3.7-11.el5_4.3.i386.rpm ia64: cups-1.3.7-11.el5_4.3.ia64.rpm cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-debuginfo-1.3.7-11.el5_4.3.ia64.rpm cups-devel-1.3.7-11.el5_4.3.ia64.rpm cups-libs-1.3.7-11.el5_4.3.i386.rpm cups-libs-1.3.7-11.el5_4.3.ia64.rpm cups-lpd-1.3.7-11.el5_4.3.ia64.rpm ppc: cups-1.3.7-11.el5_4.3.ppc.rpm cups-debuginfo-1.3.7-11.el5_4.3.ppc.rpm cups-debuginfo-1.3.7-11.el5_4.3.ppc64.rpm cups-devel-1.3.7-11.el5_4.3.ppc.rpm cups-devel-1.3.7-11.el5_4.3.ppc64.rpm cups-libs-1.3.7-11.el5_4.3.ppc.rpm cups-libs-1.3.7-11.el5_4.3.ppc64.rpm cups-lpd-1.3.7-11.el5_4.3.ppc.rpm s390x: cups-1.3.7-11.el5_4.3.s390x.rpm cups-debuginfo-1.3.7-11.el5_4.3.s390.rpm cups-debuginfo-1.3.7-11.el5_4.3.s390x.rpm cups-devel-1.3.7-11.el5_4.3.s390.rpm cups-devel-1.3.7-11.el5_4.3.s390x.rpm cups-libs-1.3.7-11.el5_4.3.s390.rpm cups-libs-1.3.7-11.el5_4.3.s390x.rpm cups-lpd-1.3.7-11.el5_4.3.s390x.rpm x86_64: cups-1.3.7-11.el5_4.3.x86_64.rpm cups-debuginfo-1.3.7-11.el5_4.3.i386.rpm cups-debuginfo-1.3.7-11.el5_4.3.x86_64.rpm cups-devel-1.3.7-11.el5_4.3.i386.rpm cups-devel-1.3.7-11.el5_4.3.x86_64.rpm cups-libs-1.3.7-11.el5_4.3.i386.rpm cups-libs-1.3.7-11.el5_4.3.x86_64.rpm cups-lpd-1.3.7-11.el5_4.3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-3608 https://www.cve.org/CVERecord?id=CVE-2009-3609 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. . Significant patch announcement RHSA-2023:2456-02 addresses memory management vulnerabilities in CentOS Linux.. cups update, red hat advisory,security issues. . LinuxSecurity.com Team
Oct 15, 2009
Red Hat
89
security advisoryFedora Coreprinting systemFedora Core 3: FEDORA-2005-012 Moderate: CUPS Regression Repair
This package fixes a small regression introduced by FEDORA-2004-575.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-012 2005-01-11 ---------------------------------------------------------------------Product : Fedora Core 3 Name : cups Version : 1.1.22 Release : 0.rc1.8.3 Summary : Common Unix Printing System Description : The Common UNIX Printing System provides a portable printing layer for UNIX� operating systems. It has been developed by Easy Software Products to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces. ---------------------------------------------------------------------Update Information: This package fixes a small regression introduced by FEDORA-2004-575. ---------------------------------------------------------------------* Thu Jan 06 2005 Tim Waugh 1:1.1.22-0.rc1.8.3 - Fixed patch from STR #1023. ---------------------------------------------------------------------This update can be downloaded from: 2ea76014d979b0aff8292da1e02adbab SRPMS/cups-1.1.22-0.rc1.8.3.src.rpm b31fa17710b22540c99113fb7217cf26 x86_64/cups-1.1.22-0.rc1.8.3.x86_64.rpm e2cc5ffe364a0dde20305ddd9718cf04 x86_64/cups-devel-1.1.22-0.rc1.8.3.x86_64.rpm 3f0194167615511c76893f2dde0bab06 x86_64/cups-libs-1.1.22-0.rc1.8.3.x86_64.rpm c335c301e3389c7e3ee12de7d2afe3dc x86_64/debug/cups-debuginfo-1.1.22-0.rc1.8.3.x86_64.rpm 1a1a938302a6537df4d5ad956380e1fb x86_64/cups-libs-1.1.22-0.rc1.8.3.i386.rpm ddab41d2b397bcc4b2e11cfa25c0b95b i386/cups-1.1.22-0.rc1.8.3.i386.rpm b5fb7d5b007bc9f9273f08cbe83c083b i386/cups-devel-1.1.22-0.rc1.8.3.i386.rpm 1a1a938302a6537df4d5ad956380e1fb i386/cups-libs-1.1.22-0.rc1.8.3.i386.rpm 44b3ff0b944ce05d53493712c1fc1b80 i386/debug/cups-debuginfo-1.1.22-0.rc1.8.3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date'command. --------------------------------------------------------------------- . This Ubuntu patch enhances a slight bug in Samba, elevating network file sharing functionalities for greater reliability.. Fedora Core 3,CUPS Repair,Software Patch,Update Notification. . LinuxSecurity.com Team
Jan 11, 2005
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!