Lucene search

K
suseSuseOPENSUSE-SU-2018:2239-1
HistoryAug 07, 2018 - 9:08 p.m.

Security update for cups (moderate)

2018-08-0721:08:24
lists.opensuse.org
49

0.011 Low

EPSS

Percentile

83.0%

This update for cups fixes the following issues:

The following security vulnerabilities were fixed:

  • CVE-2017-18248: Handle invalid characters properly in printing jobs.
    This fixes a problem that was causing the DBUS library to abort the
    calling process. (bsc#1061066 bsc#1087018)
  • Fixed a local privilege escalation to root and sandbox bypasses in the
    scheduler
  • CVE-2018-4180: Fixed a local privilege escalation to root in dnssd
    backend (bsc#1096405)
  • CVE-2018-4181: Limited local file reads as root via cupsd.conf include
    directive (bsc#1096406)
  • CVE-2018-4182: Fixed a sandbox bypass due to insecure error handling
    (bsc#1096407)
  • CVE-2018-4183: Fixed a sandbox bypass due to profile misconfiguration
    (bsc#1096408)

The following other issue was fixed:

  • Fixed authorization check for clients (like samba) connected through the
    local socket when Kerberos authentication is enabled (bsc#1050082)

This update was imported from the SUSE:SLE-12:Update update project.