Summary
[1:2.3.3op2-27]
- Revert the cups-libs license identifier to the 'legacy' format
[1:2.3.3op2-26]
- RHEL-40388 cups: Cupsd Listen arbitrary chmod 0140777
- Delete the domain socket file after stopping the cups.socket service
- Fix cupsd Listener checks
[1:2.3.3op2-25]
- CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | cups | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-client | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-devel | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-filesystem | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-ipptool | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-libs | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-lpd | 1:2.3.3op2-27.el9_4 |
| Oracle Linux · 9 | cups-printerapp | 1:2.3.3op2-27.el9_4 |
Vulnerabilities 1
-
Medium 4.4
Cupsd Listen arbitrary chmod 0140777
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to…