Summary
[1:2.3.3op2-34.2]
- fix use-after-free reported by OSH
[1:2.3.3op2-34.1]
- RHEL-129746 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129738 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | cups | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-client | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-devel | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-filesystem | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-ipptool | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-libs | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-lpd | 1:2.3.3op2-34.el9_7.2 |
| Oracle Linux · 9 | cups-printerapp | 1:2.3.3op2-34.el9_7.2 |
Vulnerabilities 2
-
Medium 6.0
OpenPrinting CUPS vulnerable to stack based out-of-bound write
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which ru…
-
Medium 5.1
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes…