Skip to content
OpenAdvisories
High ELSA-2015-1123 3 CVEs

Important: cups security update (Oracle Linux 7)

Published Jun 17, 2015 · Updated Jun 17, 2015

Ecosystem: Oracle Linux

Summary

[1:1.4.2-67.1]
- CVE-2015-1158, CVE-2015-1159, CVE-2014-9679 (bug #1229982).

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 cups 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-client 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-devel 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-filesystem 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-ipptool 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-libs 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-lpd 1:1.6.3-17.el7_1.1
Oracle Linux · 7 cups-php 1:1.4.2-67.el6_6.1

Vulnerabilities 3

  • Unscored —
    CVE-2014-9679

    Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers …

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2015-1158 Public exploit EPSS 30%

    The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-v…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2015-1159

    Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS …

    cups cups Debian Ubuntu