Skip to content
OpenAdvisories
Unscored RHBA-2015:0386 5 CVEs

Red Hat Bug Fix Advisory: cups bug fix and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client cups 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-client 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-debuginfo 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-devel 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-filesystem 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-ipptool 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-libs 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::client cups-lpd 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-client 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-debuginfo 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-devel 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-filesystem 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-ipptool 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-libs 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode cups-lpd 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-client 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-debuginfo 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-devel 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-filesystem 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-ipptool 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-libs 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::server cups-lpd 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-client 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-debuginfo 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-devel 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-filesystem 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-ipptool 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-libs 1:1.6.3-17.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation cups-lpd 1:1.6.3-17.el7

Vulnerabilities 5

  • Unscored —
    CVE-2014-2856

    Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allow…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-3537

    The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack …

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5029

    The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a fi…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5030

    CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3)…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5031

    The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote att…

    cups cups Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087323
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1113045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1144780
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1149245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1153708
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0386.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-2856
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087122
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2856
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2856
  • report
    https://access.redhat.com/security/cve/CVE-2014-3537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1115576
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3537
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3537
  • report
    https://access.redhat.com/security/cve/CVE-2014-5029
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1122600
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5029
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5029
  • report
    https://access.redhat.com/security/cve/CVE-2014-5030
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5030
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5030
  • report
    https://access.redhat.com/security/cve/CVE-2014-5031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128767
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5031
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5031