cups security and bug fix update

1:2.2.6-38 - 1775590 - rastertoepson filter crashes with paper size A6 1:2.2.6-37 - forgot to enable optimization - 1833516 1:2.2.6-36 - 1838449 - ipp/socket backends connect to turned off device for eternity contimeout is not applied - 1689207 - Add failover backend - 1833516 - DirtyCleanInterva...

EulerOS Virtualization 3.0.6.6 : cups (EulerOS-SA-2020-2464)

According to the version of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - heap based buffer overflow in libcups's ppdFindOption in ppd-mark.cCVE-2020-3898 Note that Tenable Network Security has extracted the...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2020-2464)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2020-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : cups (RHSA-2020:4469)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4469 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: heap...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2020-2306)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2020-2241)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3898

CVE-2020-3898 affects the CUPS printing system. Technical detail from connected advisories: a heap-based buffer overflow in libcups' ppdFindOption() (ppd-mark.c) can occur when handling certain UI constraints/resolution strings, leading to memory corruption. Debian/AlmaLinux/Fedora advisories ind...

CVE-2020-3898

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges...

CentOS 7 : cloud-init (RHSA-2020:3898)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3898 advisory. - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included sshdeletekeys: 0, disabling cloud-init's deletion of ssh host keys. In...

EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2020-1974)

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - There is a buffer error vulnerability in Apple cups. The vulnerability is due to the improper verification of data boundarie...

FreeBSD : CUPS -- memory corruption (ce0c8590-b628-11ea-9d28-3c970ee9157c)

Apple reports : - CVE-2019-8842: The ippReadIO function may under-read an extension. - CVE-2020-3898: The ppdOpen function did not handle invalid UI constraint. ppdcSource::getresolution function did not handle invalid resolution strings. An application may be able to gain elevated privileges. C...

Updated cups packages fix security vulnerability

Updated cups packages fix security vulnerabilities: It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive information CVE-2019-2228. Stephan...

Debian: Security Advisory (DLA-2237-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2237-1 : cups security update

The following CVEs were reported against src:cups. CVE-2019-8842 The ippReadIO function may under-read an extension field. CVE-2020-3898 There was a heap based buffer overflow in libcups's ppdFindOption in ppd-mark.c. The ppdOpen function did not handle invalid UI constraint...

Fedora 30 : 1:cups (2020-5a4da65166)

Security fix for CVE-2020-3898 ---- 1822154 - cups.service doesn't execute automatically on request Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora: Security Advisory for cups (FEDORA-2020-5a4da65166)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : 1:cups (2020-67c84f3f49)

Security fix for CVE-2020-3898 ---- 1822154 - cups.service doesn't execute automatically on request Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora: Security Advisory for cups (FEDORA-2020-ebd2ffb92c)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-4340-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...