openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-431)

This update for java-170-openjdk fixes the following issues : java-170-openjdk was updated to 2.6.5 - OpenJDK 7u99 boo972468 - Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency - Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX...

cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character

It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external programs run by the filter. An attacker could possibly use this flaw to execute arbitrary commands...

Fedora 22 : cups-filters-1.4.0-1.fc22 (2015-998911cf3f)

Fixes CVE-2015-8560 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Apple CUPS Web Interface URL Handling Cross-Site Scripting - ver 2 (CVE-2014-2856; CVE-2015-1159)

A Cross-Site Scripting vulnerability exists in the Apple CUPS Web Interface. The vulnerability is due to insufficient input validation while handling HTTP requests. A remote attacker can exploit this vulnerability by enticing a user to click on a link containing script code in the URL...

openSUSE Security Update : cups-filters (openSUSE-2016-67)

This update fixes the following security issue : CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters bsc957531. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

The vulnerability of the Foomatic printing filter and the Ubuntu operating system allows a hacker to execute arbitrary commands.

The vulnerability of the foomatic-rip component util.c in the cups-filters package in Foomatic printing and the Ubuntu operating system is related to the use of an incomplete blacklist. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the quotation mark...

SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2016:0092-1)

This update fixes the following security issue : CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters bsc957531. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2016:0092-1 Security update for cups-filters

This update fixes the following security issue: CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters bsc957531...

Fedora Update for cups-filters FEDORA-2015-998911

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: cups-filters-1.4.0-1.fc22

Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...

openSUSE Security Update : cups-filters (openSUSE-2015-954)

This update for cups-filters fixes the following issues : - cups-filters-1.0.58-CVE-2015-8327-etalii.patch adds back tick and semicolon to the list of illegal shell escape characters to fix CVE-2015-8327 and CVE-2015-8560 boo957531. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : cups-filters on SL7.x x86_64 (20151119)

A heap-based buffer overflow flaw and an integer overflow flaw leading to a heap-based buffer overflow were discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use these flaws to crash...

[SECURITY] Fedora 23 Update: cups-filters-1.4.0-1.fc23

Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...

FreeBSD : cups-filters -- code execution (6dbae1a8-a4e6-11e5-b864-14dae9d210b8)

Salvatore Bonaccorso reports : Cups Filters/Foomatic Filters does not consider backtick as an illegal escape character. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

FreeBSD : cups-filters -- code execution (7329938b-a4e6-11e5-b864-14dae9d210b8)

Till Kamppeter reports : Cups Filters/Foomatic Filters does not consider semicolon as an illegal escape character. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacqu...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

EUVD-2015-8211

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

CVE-2015-8327

CVE-2015-8327 is an incomplete blacklist vulnerability in util.c of the foomatic-rip component in cups-filters (and in foomatic-filters/Foomatic). It allows remote attackers to execute arbitrary commands via backtick characters in a print job. Affected are cups-filters 1.0.42 before 1.2.0 and Foo...

Mageia: Security Advisory (MGASA-2015-0476)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...