ELSA-2013-0580

ELSA-2013-0580 - cups security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2013-02-28

Description

[1:1.4.2-50:.4]
- Added BrowseLDAPCACertFile and PrintcapGUI to restricted options
list.

[1:1.4.2-50:.3]
- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
value part gracefully.

[1:1.4.2-50:.2]
- Added documentation for new CVE-2012-5519 option.

[1:1.4.2-50:.1]
- Applied patch to fix CVE-2012-5519 (privilege escalation for users
in SystemGroup or with equivalent polkit permission). This prevents
HTTP PUT requests with paths under /admin/conf/ other than that for
cupsd.conf, and also prevents such requests altering certain
configuration directives such as PageLog and FileDevice (bug #875898).

[1:1.4.2-50]
- Fixed LDAP browsing issues (bug #870386).

[1:1.4.2-49]
- Avoid 'forbidden' error when moving job between queues via web UI
(bug #834445).

Related CVEs

CVE-2012-5519

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	cups-1.3.7-30.el5_9.3.src.rpm	49e2ea46543e8f464549d8760b8db162	ELBA-2015-0064
	cups-1.3.7-30.el5_9.3.i386.rpm	42d3820d083d954b541c04e8f5cc030b	ELBA-2015-0064
	cups-devel-1.3.7-30.el5_9.3.i386.rpm	9f08568b3ee43d5a8d99c024ecec9c1e	ELBA-2015-0064
	cups-libs-1.3.7-30.el5_9.3.i386.rpm	dfdfc2dcec1cb84cb56c8ed28787966a	ELBA-2015-0064
	cups-lpd-1.3.7-30.el5_9.3.i386.rpm	c396b404155e47125e63e8779f1a6075	ELBA-2015-0064
Oracle Linux 5 (ia64)	cups-1.3.7-30.el5_9.3.src.rpm	49e2ea46543e8f464549d8760b8db162	ELBA-2015-0064
	cups-1.3.7-30.el5_9.3.ia64.rpm	5032b885bcacaf373520a7c466a021de	ELBA-2015-0064
	cups-devel-1.3.7-30.el5_9.3.ia64.rpm	35005ab655bc14249fcbb3a07dd9d61c	ELBA-2015-0064
	cups-libs-1.3.7-30.el5_9.3.i386.rpm	dfdfc2dcec1cb84cb56c8ed28787966a	ELBA-2015-0064
	cups-libs-1.3.7-30.el5_9.3.ia64.rpm	9cb16718d6af6e95c83daed380184a69	ELBA-2015-0064
	cups-lpd-1.3.7-30.el5_9.3.ia64.rpm	d7f7824747165140b464f79737488827	ELBA-2015-0064
Oracle Linux 5 (x86_64)	cups-1.3.7-30.el5_9.3.src.rpm	49e2ea46543e8f464549d8760b8db162	ELBA-2015-0064
	cups-1.3.7-30.el5_9.3.x86_64.rpm	ccf84a96d0b44993afb504597db31ed9	ELBA-2015-0064
	cups-devel-1.3.7-30.el5_9.3.i386.rpm	9f08568b3ee43d5a8d99c024ecec9c1e	ELBA-2015-0064
	cups-devel-1.3.7-30.el5_9.3.x86_64.rpm	23025f461d05fe7aca078cfcd3a7cc45	ELBA-2015-0064
	cups-libs-1.3.7-30.el5_9.3.i386.rpm	dfdfc2dcec1cb84cb56c8ed28787966a	ELBA-2015-0064
	cups-libs-1.3.7-30.el5_9.3.x86_64.rpm	0f44c6b44e242596e866377fde6759b6	ELBA-2015-0064
	cups-lpd-1.3.7-30.el5_9.3.x86_64.rpm	a3b726a97acffa3c6f12d98733a0fe29	ELBA-2015-0064
Oracle Linux 6 (i386)	cups-1.4.2-50.el6_4.4.src.rpm	c12ece35502a3a54abe349d42d52afb4	ELBA-2019-0716
	cups-1.4.2-50.el6_4.4.i686.rpm	e26bac8d31d59e66261469f3a45c8768	ELBA-2019-0716
	cups-devel-1.4.2-50.el6_4.4.i686.rpm	7cf03f9c1313337cb37af6a2c9596e71	ELBA-2019-0716
	cups-libs-1.4.2-50.el6_4.4.i686.rpm	1e5fbc9975581acc1139a793938f0291	ELBA-2019-0716
	cups-lpd-1.4.2-50.el6_4.4.i686.rpm	5efae095b081364df5099ecc4138e5a5	ELBA-2019-0716
	cups-php-1.4.2-50.el6_4.4.i686.rpm	21007464907a6134cd167c8482960e26	ELBA-2019-0716
Oracle Linux 6 (x86_64)	cups-1.4.2-50.el6_4.4.src.rpm	c12ece35502a3a54abe349d42d52afb4	ELBA-2019-0716
	cups-1.4.2-50.el6_4.4.x86_64.rpm	f42d4cdf02c0e07f99fb43d965ff7172	ELBA-2019-0716
	cups-devel-1.4.2-50.el6_4.4.i686.rpm	7cf03f9c1313337cb37af6a2c9596e71	ELBA-2019-0716
	cups-devel-1.4.2-50.el6_4.4.x86_64.rpm	5480b34eda21900b131f9f75f3f4a840	ELBA-2019-0716
	cups-libs-1.4.2-50.el6_4.4.i686.rpm	1e5fbc9975581acc1139a793938f0291	ELBA-2019-0716
	cups-libs-1.4.2-50.el6_4.4.x86_64.rpm	a8c97ccc9f77742740ebb8cc2afee13e	ELBA-2019-0716
	cups-lpd-1.4.2-50.el6_4.4.x86_64.rpm	f2be33813266144026a612e7096ac1b3	ELBA-2019-0716
	cups-php-1.4.2-50.el6_4.4.x86_64.rpm	35baa3b435fd7c7ecd045f228f60f943	ELBA-2019-0716

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team