Skip to content
OpenAdvisories
Low ELSA-2020-4469 1 CVE

Low: cups security and bug fix update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Summary

[1:2.2.6-38]
- 1775590 - rastertoepson filter crashes with paper size A6

[1:2.2.6-37]
- forgot to enable optimization - 1833516

[1:2.2.6-36]
- 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
- 1689207 - Add failover backend
- 1833516 - DirtyCleanInterval ignored if there are open client connections

[1:2.2.6-35]
- 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcupss ppdFindOption() in ppd-mark.c

[1:2.2.6-34]
- 1809002 - scriptlet issue, /usr/bin/rm: cannot remove '/var/cache/cups/*.data'

[1:2.2.6-34]
- 1784884 - cups.service doesnt execute automatically on request

[1:2.2.6-34]
- 1822135 - _ppdOpen() leaks 'string' variable

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 8 cups 1:2.2.6-38.el8
Oracle Linux · 8 cups-client 1:2.2.6-38.el8
Oracle Linux · 8 cups-devel 1:2.2.6-38.el8
Oracle Linux · 8 cups-filesystem 1:2.2.6-38.el8
Oracle Linux · 8 cups-ipptool 1:2.2.6-38.el8
Oracle Linux · 8 cups-libs 1:2.2.6-38.el8
Oracle Linux · 8 cups-lpd 1:2.2.6-38.el8

Vulnerabilities 1