Summary
[1:2.2.6-54]
- RHEL-2612 - cups pulls an unneeded dependency on python3
[1:2.2.6-53]
- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation
[1:2.2.6-52]
- 2217178 - Delays printing to lpd when reserved ports are exhausted
- 2217283 - The command 'cancel -x <job>' does not remove job files
- 2217955 - Enlarge backlog queue for listen() in cupsd
- CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
- CVE-2023-32324 cups: heap buffer overflow may lead to DoS
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cups | 1:2.2.6-54.el8_9 |
| Oracle Linux · 8 | cups-client | 1:2.2.6-54.el8_9 |
| Oracle Linux · 8 | cups-devel | 1:2.2.6-54.el8_9 |
| Oracle Linux · 8 | cups-filesystem | 1:2.2.6-54.el8_9 |
| Oracle Linux · 8 | cups-ipptool | 1:2.2.6-54.el8_9 |
| Oracle Linux · 8 | cups-libs | 1:2.2.6-54.el8_9 |
| Oracle Linux · 8 | cups-lpd | 1:2.2.6-54.el8_9 |
Vulnerabilities 2
-
High 7.5
OpenPrinting CUPS vulnerable to heap buffer overflow
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` …
-
Medium 5.3
CUPS vulnerable to use-after-free in cupsdAcceptClient()
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been close…