Unscored DLA-239-1 2 CVEs

cups - security update

Published Jun 9, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	cups	1.4.4-7+squeeze8

Vulnerabilities 2

Unscored —

CVE-2015-1158 Public exploit EPSS 30%

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-v…

cups cups Debian Ubuntu

Jun 26, 2015
Unscored —

CVE-2015-1159

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS …

cups cups Debian Ubuntu

Jun 26, 2015