Skip to content
OpenAdvisories
High ALAS2023-2023-223 1 CVE

Important: cups-filters security update (Amazon Linux 2023)

Published Jun 21, 2023 · Updated Jun 27, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-24805: A vulnerability was found in cups-filters. This security flaw occurs if you use beh to create an accessible network printer, possibly resulting in remote code execution.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2023 cups-filters 0:1.28.16-3.amzn2023.0.1
Amazon Linux · 2023 cups-filters-debuginfo 0:1.28.16-3.amzn2023.0.1
Amazon Linux · 2023 cups-filters-debugsource 0:1.28.16-3.amzn2023.0.1
Amazon Linux · 2023 cups-filters-devel 0:1.28.16-3.amzn2023.0.1
Amazon Linux · 2023 cups-filters-libs 0:1.28.16-3.amzn2023.0.1
Amazon Linux · 2023 cups-filters-libs-debuginfo 0:1.28.16-3.amzn2023.0.1

Vulnerabilities 1

  • High 8.8
    CVE-2023-24805

    Command injection in cups-filters

    cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vulnerabilit…

    OpenPrinting cups-filters cups-filters cups-filters Debian Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-24805.html