Lucene search

DebianDEBIAN:DSA-3419-1:0CF61

HistoryDec 15, 2015 - 5:09 p.m.

[SECURITY] [DSA 3419-1] cups-filters security update

2015-12-1517:09:33

lists.debian.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.2 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.0%

JSON

Debian Security Advisory DSA-3419-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
December 15, 2015 https://www.debian.org/security/faq

Package : cups-filters
CVE ID : CVE-2015-8560
Debian Bug : 807930

Adam Chester discovered that missing input sanitising in the
foomatic-rip print filter might result in the execution of arbitrary
commands.

For the stable distribution (jessie), this problem has been fixed in
version 1.0.61-5+deb8u3.

For the unstable distribution (sid), this problem has been fixed in
version 1.4.0-1.

We recommend that you upgrade your cups-filters packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian8powerpccups-browsed< 1.0.61-5+deb8u3cups-browsed_1.0.61-5+deb8u3_powerpc.deb
Debian8allfoomatic-filters< 4.0.17-5+deb8u1foomatic-filters_4.0.17-5+deb8u1_all.deb
Debian8armelcups-browsed< 1.0.61-5+deb8u3cups-browsed_1.0.61-5+deb8u3_armel.deb
Debian8ppc64ellibfontembed1< 1.0.61-5+deb8u3libfontembed1_1.0.61-5+deb8u3_ppc64el.deb
Debian8mipslibcupsfilters1< 1.0.61-5+deb8u3libcupsfilters1_1.0.61-5+deb8u3_mips.deb
Debian8armhffoomatic-filters< 4.0.17-5+deb8u1foomatic-filters_4.0.17-5+deb8u1_armhf.deb
Debian8s390xlibcupsfilters-dev< 1.0.61-5+deb8u3libcupsfilters-dev_1.0.61-5+deb8u3_s390x.deb
Debian8arm64cups-filters-core-drivers< 1.0.61-5+deb8u3cups-filters-core-drivers_1.0.61-5+deb8u3_arm64.deb
Debian7i386foomatic-filters< 4.0.17-1+deb7u1foomatic-filters_4.0.17-1+deb7u1_i386.deb
Debian8armhfcups-browsed< 1.0.61-5+deb8u3cups-browsed_1.0.61-5+deb8u3_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	powerpc	cups-browsed	< 1.0.61-5+deb8u3	cups-browsed_1.0.61-5+deb8u3_powerpc.deb
Debian	8	all	foomatic-filters	< 4.0.17-5+deb8u1	foomatic-filters_4.0.17-5+deb8u1_all.deb
Debian	8	armel	cups-browsed	< 1.0.61-5+deb8u3	cups-browsed_1.0.61-5+deb8u3_armel.deb
Debian	8	ppc64el	libfontembed1	< 1.0.61-5+deb8u3	libfontembed1_1.0.61-5+deb8u3_ppc64el.deb
Debian	8	mips	libcupsfilters1	< 1.0.61-5+deb8u3	libcupsfilters1_1.0.61-5+deb8u3_mips.deb
Debian	8	armhf	foomatic-filters	< 4.0.17-5+deb8u1	foomatic-filters_4.0.17-5+deb8u1_armhf.deb
Debian	8	s390x	libcupsfilters-dev	< 1.0.61-5+deb8u3	libcupsfilters-dev_1.0.61-5+deb8u3_s390x.deb
Debian	8	arm64	cups-filters-core-drivers	< 1.0.61-5+deb8u3	cups-filters-core-drivers_1.0.61-5+deb8u3_arm64.deb
Debian	7	i386	foomatic-filters	< 4.0.17-1+deb7u1	foomatic-filters_4.0.17-1+deb7u1_i386.deb
Debian	8	armhf	cups-browsed	< 1.0.61-5+deb8u3	cups-browsed_1.0.61-5+deb8u3_armhf.deb