CentOS ProjectCESA-2007:0960hpijs, hplip, libsane security update
0.223 Low
EPSS
Percentile
96.5%
CentOS Errata and Security Advisory CESA-2007:0960
The hplip (Hewlett-Packard Linux Imaging and Printing Project) package
provides drivers for HP printers and multi-function peripherals.
Kees Cook discovered a flaw in the way the hplip hpssd daemon handled user
input. A local attacker could send a specially crafted request to the hpssd
daemon, possibly allowing them to run arbitrary commands as the root user.
(CVE-2007-5208). On Red Hat Enterprise Linux 5, the SELinux targeted
policy for hpssd which is enabled by default, blocks the ability to exploit
this issue to run arbitrary code.
Users of hplip are advised to upgrade to this updated package, which
contains backported patches to resolve this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-October/076458.html
https://lists.centos.org/pipermail/centos-announce/2007-October/076459.html
Affected packages:
hpijs
hplip
libsane-hpaio
Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0960
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 5 | i386 | hpijs | <Â 1.6.7-4.1.el5.3 | hpijs-1.6.7-4.1.el5.3.i386.rpm |
| CentOS | 5 | i386 | hplip | <Â 1.6.7-4.1.el5.3 | hplip-1.6.7-4.1.el5.3.i386.rpm |
| CentOS | 5 | i386 | libsane-hpaio | <Â 1.6.7-4.1.el5.3 | libsane-hpaio-1.6.7-4.1.el5.3.i386.rpm |
| CentOS | 5 | x86_64 | hpijs | <Â 1.6.7-4.1.el5.3 | hpijs-1.6.7-4.1.el5.3.x86_64.rpm |
| CentOS | 5 | x86_64 | hplip | <Â 1.6.7-4.1.el5.3 | hplip-1.6.7-4.1.el5.3.x86_64.rpm |
| CentOS | 5 | x86_64 | libsane-hpaio | <Â 1.6.7-4.1.el5.3 | libsane-hpaio-1.6.7-4.1.el5.3.x86_64.rpm |
Related
