Skip to content
OpenAdvisories
High RHSA-2023:7165 2 CVEs

Red Hat Security Advisory: cups security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream cups 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-client 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-client-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-debugsource 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-devel 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-filesystem 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-ipptool 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-ipptool-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-libs-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-lpd 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::appstream cups-lpd-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-client-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-debugsource 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-ipptool-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-libs 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-libs-debuginfo 1:2.2.6-54.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos cups-lpd-debuginfo 1:2.2.6-54.el8_9

Vulnerabilities 2

  • High 7.5
    CVE-2023-32324

    OpenPrinting CUPS vulnerable to heap buffer overflow

    OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` …

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-34241

    CUPS vulnerable to use-after-free in cupsdAcceptClient()

    OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been close…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2209603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2214914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2217955
  • article
    https://issues.redhat.com/browse/RHEL-2612
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7165.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-32324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-32324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-32324
  • report
    https://access.redhat.com/security/cve/CVE-2023-34241
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-34241
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-34241