[SECURITY] [DLA 3826-1] cups security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3826-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 13, 2024 https://wiki.debian.org/LTS -...

cups:fuzz_ipp: Use-of-uninitialized-value in cups_fill

Detailed Report: https://oss-fuzz.com/testcase?key=5131356341338112 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cupsfill cupsFileRead ippReadIO Sanitizer: memory MSAN...

SUSE: Security Advisory (SUSE-SU-2024:2002-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3826-1 cups - security update

Bulletin has no description...

SUSE SLES12: cups / cups-client / cups-ddk / cups-devel / cups-libs / etc (SUSE-SU-2024:2002-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2002-1 advisory. - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. bsc1225365 Tenab...

Debian dla-3826 : cups - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3826-1 [email protected] https://www.debian.org/lts/security/...

SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / etc (SUSE-SU-2024:2003-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2003-1 advisory. - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other...

CVE-2022-26691 affecting package cups for versions less than 2.3.3op2-8

CVE-2022-26691 affecting package cups for versions less than 2.3.3op2-8. A patched version of the package is available...

cups:fuzz_ipp: Use-of-uninitialized-value in _cupsStrAlloc

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=4514808652169216 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

SUSE-SU-2024:2003-1 Security update for cups

This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. bsc1225365 - Handle local 'Negotiate' authentication response for cli clients bsc1223179...

SUSE-SU-2024:2003-2 Security update for cups

This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. bsc1225365 - Handle local 'Negotiate' authentication response for cli clients bsc1223179...

SUSE-SU-2024:2002-1 Security update for cups

This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. bsc1225365...

Slackware: Security Advisory (SSA:2024-163-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] cups

New cups packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.9-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: When starting the cupsd server with a Listen...

cups:fuzz_ipp: Use-of-uninitialized-value in cups_array_find

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=6378705441062912 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

AZL-42592 CVE-2024-35235 affecting package cups for versions less than 2.3.3op2-9

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

AZL-42579 CVE-2024-35235 affecting package cups for versions less than 2.4.10-1

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

DEBIAN-CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...