(RHSA-2010:0129) Moderate: cups security update

2010-03-0300:00:00

access.redhat.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.06 Low

EPSS

Percentile

92.7%

JSON

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

It was discovered that the Red Hat Security Advisory RHSA-2009:1595 did not
fully correct the use-after-free flaw in the way CUPS handled references in
its file descriptors-handling interface. A remote attacker could send
specially-crafted queries to the CUPS server, causing it to crash.
(CVE-2010-0302)

Users of cups are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the cupsd daemon will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat5ia64cups< 1.3.7-11.el5_4.6cups-1.3.7-11.el5_4.6.ia64.rpm
RedHat5s390cups-devel< 1.3.7-11.el5_4.6cups-devel-1.3.7-11.el5_4.6.s390.rpm
RedHat5ia64cups-devel< 1.3.7-11.el5_4.6cups-devel-1.3.7-11.el5_4.6.ia64.rpm
RedHat5x86_64cups-devel< 1.3.7-11.el5_4.6cups-devel-1.3.7-11.el5_4.6.x86_64.rpm
RedHat5s390xcups-lpd< 1.3.7-11.el5_4.6cups-lpd-1.3.7-11.el5_4.6.s390x.rpm
RedHat5s390xcups< 1.3.7-11.el5_4.6cups-1.3.7-11.el5_4.6.s390x.rpm
RedHat5ppccups< 1.3.7-11.el5_4.6cups-1.3.7-11.el5_4.6.ppc.rpm
RedHat5x86_64cups-lpd< 1.3.7-11.el5_4.6cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm
RedHat5ppc64cups-devel< 1.3.7-11.el5_4.6cups-devel-1.3.7-11.el5_4.6.ppc64.rpm
RedHat5s390xcups-libs< 1.3.7-11.el5_4.6cups-libs-1.3.7-11.el5_4.6.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	ia64	cups	< 1.3.7-11.el5_4.6	cups-1.3.7-11.el5_4.6.ia64.rpm
RedHat	5	s390	cups-devel	< 1.3.7-11.el5_4.6	cups-devel-1.3.7-11.el5_4.6.s390.rpm
RedHat	5	ia64	cups-devel	< 1.3.7-11.el5_4.6	cups-devel-1.3.7-11.el5_4.6.ia64.rpm
RedHat	5	x86_64	cups-devel	< 1.3.7-11.el5_4.6	cups-devel-1.3.7-11.el5_4.6.x86_64.rpm
RedHat	5	s390x	cups-lpd	< 1.3.7-11.el5_4.6	cups-lpd-1.3.7-11.el5_4.6.s390x.rpm
RedHat	5	s390x	cups	< 1.3.7-11.el5_4.6	cups-1.3.7-11.el5_4.6.s390x.rpm
RedHat	5	ppc	cups	< 1.3.7-11.el5_4.6	cups-1.3.7-11.el5_4.6.ppc.rpm
RedHat	5	x86_64	cups-lpd	< 1.3.7-11.el5_4.6	cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm
RedHat	5	ppc64	cups-devel	< 1.3.7-11.el5_4.6	cups-devel-1.3.7-11.el5_4.6.ppc64.rpm
RedHat	5	s390x	cups-libs	< 1.3.7-11.el5_4.6	cups-libs-1.3.7-11.el5_4.6.s390x.rpm