cups security update

2007-04-1612:43:40

CentOS Project

lists.centos.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.036 Low

EPSS

Percentile

91.6%

JSON

CentOS Errata and Security Advisory CESA-2007:0123

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX® operating systems.

A bug was found in the way CUPS handled SSL negotiation. A remote user
capable of connecting to the CUPS daemon could cause a denial of service to
other CUPS users. (CVE-2007-0720)

All users of CUPS should upgrade to these updated packages, which contain
a backported patch introducing a timeout, which prevents connections being
kept open for an arbitrarily long time.

Affected packages:
cups
cups-devel
cups-libs
cups-lpd

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0123

OSVersionArchitecturePackageVersionFilename
CentOS3i386cups< 1.1.17-13.3.42cups-1.1.17-13.3.42.i386.rpm
CentOS3i386cups-devel< 1.1.17-13.3.42cups-devel-1.1.17-13.3.42.i386.rpm
CentOS3i386cups-libs< 1.1.17-13.3.42cups-libs-1.1.17-13.3.42.i386.rpm
CentOS3x86_64cups< 1.1.17-13.3.42cups-1.1.17-13.3.42.x86_64.rpm
CentOS3x86_64cups-devel< 1.1.17-13.3.42cups-devel-1.1.17-13.3.42.x86_64.rpm
CentOS3i386cups-libs< 1.1.17-13.3.42cups-libs-1.1.17-13.3.42.i386.rpm
CentOS3x86_64cups-libs< 1.1.17-13.3.42cups-libs-1.1.17-13.3.42.x86_64.rpm
CentOS3ia64cups< 1.1.17-13.3.42cups-1.1.17-13.3.42.ia64.rpm
CentOS3ia64cups-devel< 1.1.17-13.3.42cups-devel-1.1.17-13.3.42.ia64.rpm
CentOS3ia64cups-libs< 1.1.17-13.3.42cups-libs-1.1.17-13.3.42.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	cups	< 1.1.17-13.3.42	cups-1.1.17-13.3.42.i386.rpm
CentOS	3	i386	cups-devel	< 1.1.17-13.3.42	cups-devel-1.1.17-13.3.42.i386.rpm
CentOS	3	i386	cups-libs	< 1.1.17-13.3.42	cups-libs-1.1.17-13.3.42.i386.rpm
CentOS	3	x86_64	cups	< 1.1.17-13.3.42	cups-1.1.17-13.3.42.x86_64.rpm
CentOS	3	x86_64	cups-devel	< 1.1.17-13.3.42	cups-devel-1.1.17-13.3.42.x86_64.rpm
CentOS	3	i386	cups-libs	< 1.1.17-13.3.42	cups-libs-1.1.17-13.3.42.i386.rpm
CentOS	3	x86_64	cups-libs	< 1.1.17-13.3.42	cups-libs-1.1.17-13.3.42.x86_64.rpm
CentOS	3	ia64	cups	< 1.1.17-13.3.42	cups-1.1.17-13.3.42.ia64.rpm
CentOS	3	ia64	cups-devel	< 1.1.17-13.3.42	cups-devel-1.1.17-13.3.42.ia64.rpm
CentOS	3	ia64	cups-libs	< 1.1.17-13.3.42	cups-libs-1.1.17-13.3.42.ia64.rpm