Skip to content
OpenAdvisories
Unscored RHSA-2014:1388 5 CVEs

Red Hat Security Advisory: cups security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client cups 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::client cups-debuginfo 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::client cups-devel 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::client cups-libs 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::client cups-lpd 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::client cups-php 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode cups 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode cups-debuginfo 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode cups-devel 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode cups-libs 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode cups-lpd 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode cups-php 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::server cups 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::server cups-debuginfo 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::server cups-devel 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::server cups-libs 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::server cups-lpd 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::server cups-php 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation cups 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation cups-debuginfo 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation cups-devel 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation cups-libs 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation cups-lpd 1:1.4.2-67.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation cups-php 1:1.4.2-67.el6

Vulnerabilities 5

  • Unscored —
    CVE-2014-2856

    Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allow…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-3537

    The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack …

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5029

    The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a fi…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5030

    CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3)…

    cups cups Debian Ubuntu
  • Unscored —
    CVE-2014-5031

    The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote att…

    cups cups Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/cups.html#RHSA-2014-1388
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=978387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1012482
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087122
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1115576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1122600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128764
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128767
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1388.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-2856
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2856
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2856
  • report
    https://access.redhat.com/security/cve/CVE-2014-3537
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3537
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3537
  • report
    https://access.redhat.com/security/cve/CVE-2014-5029
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5029
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5029
  • report
    https://access.redhat.com/security/cve/CVE-2014-5030
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5030
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5030
  • report
    https://access.redhat.com/security/cve/CVE-2014-5031
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5031
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5031