ALSA-2024:7463

Source
https://errata.almalinux.org/8/ALSA-2024-7463.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:7463.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2024:7463
Related
Published
2024-10-01T00:00:00Z
Modified
2024-10-03T09:11:48Z
Summary
Important: cups-filters security update
Details

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently.

Security Fix(es):

  • cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
  • cups-filters: libcupsfilters: cfGetPrinterAttributes API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
  • cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / cups-filters

Package

Name
cups-filters

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-35.el8_10

AlmaLinux:8 / cups-filters-devel

Package

Name
cups-filters-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-35.el8_10

AlmaLinux:8 / cups-filters-libs

Package

Name
cups-filters-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-35.el8_10