Skip to content
OpenAdvisories
Unscored RHSA-2009:1083 3 CVEs

Red Hat Security Advisory: cups security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as cups 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::as cups-debuginfo 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::as cups-devel 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::as cups-libs 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::desktop cups 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::desktop cups-debuginfo 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::desktop cups-devel 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::desktop cups-libs 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::es cups 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::es cups-debuginfo 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::es cups-devel 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::es cups-libs 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::ws cups 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::ws cups-debuginfo 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::ws cups-devel 1:1.1.17-13.3.62
Red Hat · RHEL 3 enterprise_linux:3::ws cups-libs 1:1.1.17-13.3.62
Red Hat · RHEL 4 enterprise_linux:4::as cups 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as cups-debuginfo 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as cups-devel 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as cups-libs 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop cups 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop cups-debuginfo 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop cups-devel 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop cups-libs 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es cups 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es cups-debuginfo 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es cups-devel 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es cups-libs 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws cups 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws cups-debuginfo 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws cups-devel 1:1.1.22-0.rc1.9.32.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws cups-libs 1:1.1.22-0.rc1.9.32.el4_8.3

Vulnerabilities 3

  • Unscored —
    CVE-2009-0791

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

    cups Debian
  • Unscored —
    CVE-2009-0949 Public exploit EPSS 20%

    The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request…

    cups Debian
  • Unscored —
    CVE-2009-1196

    The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a deni…

    cups Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=497135
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=500972
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1083.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0791
  • report
    https://access.redhat.com/security/cve/CVE-2009-0949
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0949
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0949
  • report
    https://access.redhat.com/security/cve/CVE-2009-1196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1196