Summary
[1:1.6.3-51]
- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]
[1:1.6.3-50]
- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var
[1:1.6.3-49]
- more covscan issues raised from the fix 1672212
[1:1.6.3-48]
- fixing covscan issue from 1672212
[1:1.6.3-47]
- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created
[1:1.6.3-46]
- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue
[1:1.6.3-45]
- fixing covscan issue from 1774460
[1:1.6.3-44]
- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcupss asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcupss asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf arent used
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | cups | 1:1.6.3-51.el7 |
| Oracle Linux · 7 | cups-client | 1:1.6.3-51.el7 |
| Oracle Linux · 7 | cups-devel | 1:1.6.3-51.el7 |
| Oracle Linux · 7 | cups-filesystem | 1:1.6.3-51.el7 |
| Oracle Linux · 7 | cups-ipptool | 1:1.6.3-51.el7 |
| Oracle Linux · 7 | cups-libs | 1:1.6.3-51.el7 |
| Oracle Linux · 7 | cups-lpd | 1:1.6.3-51.el7 |
Vulnerabilities 3
-
Unscored —
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attack…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Secur…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Secur…