Summary
[1.0.35-15:.1]
- Applied upstream patch to fix BrowseAllow parsing issue
(CVE-2014-4338, bug #1091568).
- Applied upstream patch for cups-browsed DoS via
process_browse_data() out-of-bounds read (CVE-2014-4337,
bug #1111510).
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | cups-filters | 0:1.0.35-15.el7_0.1 |
| Oracle Linux · 7 | cups-filters-devel | 0:1.0.35-15.el7_0.1 |
| Oracle Linux · 7 | cups-filters-libs | 0:1.0.35-15.el7_0.1 |
Vulnerabilities 2
-
Unscored —
The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote at…
-
Unscored —
cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunis…