cups security update

2024-07-2300:00:00

linux.oracle.com

cups

security update

license

identifier

fix

cupsd

listener checks

delete

domain socket file

cve-2024-35235

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

Low

JSON

[1:2.3.3op2-27]

Revert the cups-libs license identifier to the ‘legacy’ format
[1:2.3.3op2-26]
RHEL-40388 cups: Cupsd Listen arbitrary chmod 0140777
Delete the domain socket file after stopping the cups.socket service
Fix cupsd Listener checks
[1:2.3.3op2-25]
CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777

OSVersionArchitecturePackageVersionFilename
oracle linux9srccups< 2.3.3op2-27.el9_4cups-2.3.3op2-27.el9_4.src.rpm
oracle linux9srccups< 2.3.3op2-27.el9_4cups-2.3.3op2-27.el9_4.src.rpm
oracle linux9srccups< 2.3.3op2-27.el9_4cups-2.3.3op2-27.el9_4.src.rpm
oracle linux9aarch64cups< 2.3.3op2-27.el9_4cups-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux9aarch64cups-client< 2.3.3op2-27.el9_4cups-client-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux9aarch64cups-devel< 2.3.3op2-27.el9_4cups-devel-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux9noarchcups-filesystem< 2.3.3op2-27.el9_4cups-filesystem-2.3.3op2-27.el9_4.noarch.rpm
oracle linux9aarch64cups-ipptool< 2.3.3op2-27.el9_4cups-ipptool-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux9aarch64cups-libs< 2.3.3op2-27.el9_4cups-libs-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux9aarch64cups-libs< 2.3.3op2-27.el9_4cups-libs-2.3.3op2-27.el9_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	cups	< 2.3.3op2-27.el9_4	cups-2.3.3op2-27.el9_4.src.rpm
oracle linux	9	src	cups	< 2.3.3op2-27.el9_4	cups-2.3.3op2-27.el9_4.src.rpm
oracle linux	9	src	cups	< 2.3.3op2-27.el9_4	cups-2.3.3op2-27.el9_4.src.rpm
oracle linux	9	aarch64	cups	< 2.3.3op2-27.el9_4	cups-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux	9	aarch64	cups-client	< 2.3.3op2-27.el9_4	cups-client-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux	9	aarch64	cups-devel	< 2.3.3op2-27.el9_4	cups-devel-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux	9	noarch	cups-filesystem	< 2.3.3op2-27.el9_4	cups-filesystem-2.3.3op2-27.el9_4.noarch.rpm
oracle linux	9	aarch64	cups-ipptool	< 2.3.3op2-27.el9_4	cups-ipptool-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux	9	aarch64	cups-libs	< 2.3.3op2-27.el9_4	cups-libs-2.3.3op2-27.el9_4.aarch64.rpm
oracle linux	9	aarch64	cups-libs	< 2.3.3op2-27.el9_4	cups-libs-2.3.3op2-27.el9_4.aarch64.rpm