Summary
[1:2.3.3op2-21]
- bump the spec because the previous build was made with buildroot 9.2
[1:2.3.3op2-20]
- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation
[1:2.3.3op2-19]
- CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
- CVE-2023-32324 cups: heap buffer overflow may lead to DoS
[1:2.3.3op2-19]
- 2217177 - Delays printing to lpd when reserved ports are exhausted
- 2217284 - The command 'cancel -x <job>' does not remove job files
- 2217954 - Enlarge backlog queue for listen() in cupsd
[1:2.3.3op2-18]
- 2189919 - CGI scripts don't work with local Negotiate authentication
[1:2.3.3op2-17]
- RHEL-314 - Enable fmf tests in centos stream
[1:2.3.3op2-17]
- RHEL-317 - upstream test suite fails due uncorrect number of expected warnings
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | cups | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-client | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-devel | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-filesystem | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-ipptool | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-libs | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-lpd | 1:2.3.3op2-21.el9 |
| Oracle Linux · 9 | cups-printerapp | 1:2.3.3op2-21.el9 |
Vulnerabilities 2
-
High 7.5
OpenPrinting CUPS vulnerable to heap buffer overflow
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` …
-
Medium 5.3
CUPS vulnerable to use-after-free in cupsdAcceptClient()
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been close…