Advisory ROSA-SA-2024-2377

software: cups 2.3.3op2
OS: ROSA-CHROME

package_evr_string: cups-2.3.3.3op2-7.src.rpm

CVE-ID: CVE-2022-26691
BDU-ID: 2022-04718
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the CUPS print server is related to flaws in the authorization procedure. Exploitation of the vulnerability could allow an attacker to escalate their privileges
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cups

CVE-ID: CVE-2023-34241
BDU-ID: 2023-03719
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the httpClose(con->http) function of the CUPS print server is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cups