ELBA-2015-0064

ELBA-2015-0064 - cups bug fix update

Type:	BUG
Severity:	NA
Release Date:	2015-01-20

Description

[1:1.3.7-32]
- New SSLOptions directive to enable SSL3 and/or RC4, which are now
disabled by default (bug #1161218).

[1:1.3.7-31]
- Applied patch to fix CVE-2012-5519 (privilege escalation for users
in SystemGroup or with equivalent polkit permission). This prevents
HTTP PUT requests with paths under /admin/conf/ other than that for
cupsd.conf, and also prevents such requests altering certain
configuration directives such as PageLog and FileDevice (bug #875898).

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team