[ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:050 http://www.mandriva.com/security/ Package : cups Date : February 26, 2008 Affected: Corporate 3.0 Problem Description: Dave Camp at Critical Path Software discovered a buffer overflow in CUPS 1.1.23 and...

CentOS 4 : cups (CESA-2008:0161)

Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

cups security update

CentOS Errata and Security Advisory CESA-2008:0161 Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provid...

Design/Logic Flaw

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

Memory corruption

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0596

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0597

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

CVE-2008-0596

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0597

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

[SECURITY] Fedora 7 Update: cups-1.2.12-9.fc7

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

[SECURITY] Fedora 8 Update: cups-1.3.6-2.fc8

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

CVE-2008-0596

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0597

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

CVE-2008-0597

CVE-2008-0597 involves a use-after-free in CUPS prior to 1.1.22 exploited by crafted UDP IPP packets, allowing a remote attacker to crash the CUPS daemon (DoS). Related issues CVE-2008-0596 and CVE-2008-0882 describe additional memory-management flaws (double-free/memory leak) that can crash or e...

Fedora 8 : cups-1.3.6-2.fc8 (2008-1901)

This updates CUPS to the latest stable version. Upstream version contains a fix for a security issue that may cause cups daemon to crash via special browse requests CVE-2008-0882, 433758, SA28994, STR2656. Note that Tenable Network Security has extracted the preceding description block directly...

CVE-2008-0596: Undefined Security Weakness

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0597: Undefined Security Weakness

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

CVE-2008-0596

CVE-2008-0596 is a memory-management flaw in CUPS (pre-1.1.22) related to removal of remote shared printers via IPP. A memory leak could lead to CUPS daemon crash or memory exhaustion after processing numerous add/remove requests. Multiple feeds (RHSA-2008:0153/0161, SL/SUSE/Mandriva advisories, ...

Fedora 7 : cups-1.2.12-9.fc7 (2008-1976)

This update contains a back-ported fix for a security issue that may cause cups daemon to crash via special browse requests CVE-2008-0882, 433758, SA28994, STR2656. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

RHEL 3 : cups (RHSA-2008:0153)

Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...