Lucene search

K
oraclelinuxOracleLinuxELSA-2020-4469
HistoryNov 10, 2020 - 12:00 a.m.

cups security and bug fix update

2020-11-1000:00:00
linux.oracle.com
13

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

[1:2.2.6-38]

  • 1775590 - rastertoepson filter crashes with paper size A6
    [1:2.2.6-37]
  • forgot to enable optimization - 1833516
    [1:2.2.6-36]
  • 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  • 1689207 - Add failover backend
  • 1833516 - DirtyCleanInterval ignored if there are open client connections
    [1:2.2.6-35]
  • 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcupss ppdFindOption() in ppd-mark.c
    [1:2.2.6-34]
  • 1809002 - scriptlet issue, /usr/bin/rm: cannot remove ‘/var/cache/cups/*.data’
    [1:2.2.6-34]
  • 1784884 - cups.service doesnt execute automatically on request
    [1:2.2.6-34]
  • 1822135 - _ppdOpen() leaks ‘string’ variable

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P