Summary
[ - 1:2.2.6-60]
- RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
- Delete the domain socket file after stopping the cups.socket service
- Fix cupsd Listener checks
[1:2.2.6-59]
- RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
- Require cups.socket in cupsd service file
[1:2.2.6-58]
- CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cups | 1:2.2.6-60.el8_10 |
| Oracle Linux · 8 | cups-client | 1:2.2.6-60.el8_10 |
| Oracle Linux · 8 | cups-devel | 1:2.2.6-60.el8_10 |
| Oracle Linux · 8 | cups-filesystem | 1:2.2.6-60.el8_10 |
| Oracle Linux · 8 | cups-ipptool | 1:2.2.6-60.el8_10 |
| Oracle Linux · 8 | cups-libs | 1:2.2.6-60.el8_10 |
| Oracle Linux · 8 | cups-lpd | 1:2.2.6-60.el8_10 |
Vulnerabilities 1
-
Medium 4.4
Cupsd Listen arbitrary chmod 0140777
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to…