(RHSA-2008:0818) Moderate: hplip security update

2008-08-1200:00:00

access.redhat.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.6%

JSON

The hplip (Hewlett-Packard Linux Imaging and Printing) packages provide
drivers for Hewlett-Packard printers and multifunction peripherals.

A flaw was discovered in the hplip alert-mailing functionality. A local
attacker could elevate their privileges by using specially-crafted packets
to trigger alert mails, which are sent by the root account. (CVE-2008-2940)

A flaw was discovered in the hpssd message parser. By sending
specially-crafted packets, a local attacker could cause a denial of
service, stopping the hpssd process. (CVE-2008-2941)

Users of hplip should upgrade to these updated packages, which contain
backported patches to correct these issues.

OSVersionArchitecturePackageVersionFilename
RedHat5i386hpijs< 1.6.7-4.1.el5_2.4hpijs-1.6.7-4.1.el5_2.4.i386.rpm
RedHat5x86_64hplip< 1.6.7-4.1.el5_2.4hplip-1.6.7-4.1.el5_2.4.x86_64.rpm
RedHat5i386hplip< 1.6.7-4.1.el5_2.4hplip-1.6.7-4.1.el5_2.4.i386.rpm
RedHat5ppchplip< 1.6.7-4.1.el5_2.4hplip-1.6.7-4.1.el5_2.4.ppc.rpm
RedHat5ppchpijs< 1.6.7-4.1.el5_2.4hpijs-1.6.7-4.1.el5_2.4.ppc.rpm
RedHat5x86_64hpijs< 1.6.7-4.1.el5_2.4hpijs-1.6.7-4.1.el5_2.4.x86_64.rpm
RedHat5x86_64libsane-hpaio< 1.6.7-4.1.el5_2.4libsane-hpaio-1.6.7-4.1.el5_2.4.x86_64.rpm
RedHat5ppclibsane-hpaio< 1.6.7-4.1.el5_2.4libsane-hpaio-1.6.7-4.1.el5_2.4.ppc.rpm
RedHat5ia64libsane-hpaio< 1.6.7-4.1.el5_2.4libsane-hpaio-1.6.7-4.1.el5_2.4.ia64.rpm
RedHat5i386libsane-hpaio< 1.6.7-4.1.el5_2.4libsane-hpaio-1.6.7-4.1.el5_2.4.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	hpijs	< 1.6.7-4.1.el5_2.4	hpijs-1.6.7-4.1.el5_2.4.i386.rpm
RedHat	5	x86_64	hplip	< 1.6.7-4.1.el5_2.4	hplip-1.6.7-4.1.el5_2.4.x86_64.rpm
RedHat	5	i386	hplip	< 1.6.7-4.1.el5_2.4	hplip-1.6.7-4.1.el5_2.4.i386.rpm
RedHat	5	ppc	hplip	< 1.6.7-4.1.el5_2.4	hplip-1.6.7-4.1.el5_2.4.ppc.rpm
RedHat	5	ppc	hpijs	< 1.6.7-4.1.el5_2.4	hpijs-1.6.7-4.1.el5_2.4.ppc.rpm
RedHat	5	x86_64	hpijs	< 1.6.7-4.1.el5_2.4	hpijs-1.6.7-4.1.el5_2.4.x86_64.rpm
RedHat	5	x86_64	libsane-hpaio	< 1.6.7-4.1.el5_2.4	libsane-hpaio-1.6.7-4.1.el5_2.4.x86_64.rpm
RedHat	5	ppc	libsane-hpaio	< 1.6.7-4.1.el5_2.4	libsane-hpaio-1.6.7-4.1.el5_2.4.ppc.rpm
RedHat	5	ia64	libsane-hpaio	< 1.6.7-4.1.el5_2.4	libsane-hpaio-1.6.7-4.1.el5_2.4.ia64.rpm
RedHat	5	i386	libsane-hpaio	< 1.6.7-4.1.el5_2.4	libsane-hpaio-1.6.7-4.1.el5_2.4.i386.rpm