Description
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| foomatic-filters | foomatic-filters | all versions | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | foomatic-filters | No fix yet | — |
| Debian 13 | foomatic-filters | No fix yet | — |
| Debian 12 | foomatic-filters | No fix yet | — |