Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cups: privilege escalation for users of the CUPS SystemGroup group

CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface...

cups security update

1:1.4.2-50:.4 - Added BrowseLDAPCACertFile and PrintcapGUI to restricted options list. 1:1.4.2-50:.3 - Fix for CVE-2012-5519 patch: handle blacklisted lines that have no value part gracefully. 1:1.4.2-50:.2 - Added documentation for new CVE-2012-5519 option. 1:1.4.2-50:.1 - Applied patch to fix...

Command injection

Cisco Unified Presence Server CUPS 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service CPU consumption via crafted packets to the SIP TCP port, aka Bug ID CSCua89930...

CVE-2013-1137

CVE-2013-1137 affects Cisco Unified Presence Server (CUPS) versions 8.6, 9.0 and 9.1 before 9.1.1. The vulnerability allows remote, unauthenticated attackers to cause a denial of service via crafted packets sent to the SIP TCP port (TCP 5060), consuming CPU resources. Root cause is a DoS conditio...

hpijs, hplip, libsane security update

CentOS Errata and Security Advisory CESA-2013:0500 Updated hplip packages that fix several security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common...

Cisco Unified Presence Server Denial of Service Vulnerability

Cisco Unified Presence Server CUPS contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. Cisco has released software updates that address this vulnerability. A workaround is available to mitigate this...

hplip security, bug fix and enhancement update

3.12.4-4 - Applied patch to fix CVE-2013-0200, temporary file vulnerability bug 902163. - Fixed hpijs-marker-supply patch. 3.12.4-3 - Make 'hp-check' check for hpaio set-up correctly bug 683007. 3.12.4-2 - Added more fixes from Fedora bug 731900. 3.12.4-1 - Re-based to 3.12.4 with fixes from Fedo...

[SECURITY] Fedora 17 Update: cups-1.5.4-18.fc17

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Fedora 17 : cups-1.5.4-18.fc17 (2012-19606)

This update addresses two security issues : - CVE-2012-5519 privilege escalation for users for the CUPS SystemGroup group or via polkit is fixed by moving certain configuration keywords into a separate file, cups-files.conf, which cannot be modified by cupsd. - CVE-2012-6094 configuration issue...

RHEL 6 : hplip (RHSA-2013:0500)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0500 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers...

Fedora 18 : cups-1.5.4-20.fc18 (2012-19301)

This update addresses CVE-2012-5519 by moving certain configuration keywords into a separate file, cups-files.conf, which cannot be modified by cupsd. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

[SECURITY] Fedora 18 Update: cups-1.5.4-20.fc18

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

RedHat Update for hplip3 RHSA-2013:0133-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

gtk2 security and bug fix update

2.10.4-29 - Improve patch to parse CUPS user lpoptions file to avoid crashes on s390 and ia64 Resolves: 603809 2.10.4-28 - Fix the filechooser not opening selected file when location entry is empty Resolves: 518483 2.10.4-27 - Fix integer overflow in GdkPixbuf's XBM image file format loader...

gtk2 security update

CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...

RHEL 5 : hplip3 (RHSA-2013:0133)

Updated hplip3 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Debian DSA-2600-1 : cups - privilege escalation

Jann Horn discovered that users of the CUPS printing system who are part of the lpadmin group could modify several configuration parameters with security impact. Specifically, this allows an attacker to read or write arbitrary files as root which can be used to elevate privileges. This update...

[SECURITY] [DSA 2600-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2600-1 [email protected] http://www.debian.org/security/ Nico Golde January 06, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2600-1 (cups - privilege escalation)

Jann Horn discovered that users of the CUPS printing system who are part of the lpadmin group could modify several configuration parameters with security impact. Specifically, this allows an attacker to read or write arbitrary files as root which can be used to elevate privileges. This update...