ELSA-2008-0161

ELSA-2008-0161 - Important: cups security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2008-02-25

Description

[1.1.22-0.rc1.9.20.2:.5]
- Prevented invalid memory accesses when a class and its singleton printer
are timed out in the same sweep (CVE-2008-0597, bug #433828).
- Back-ported mimeDeleteType from 1.2.x (CVE-2008-0596, bug #433828).

[1.1.22-0.rc1.9.20.2:.4]
- Prevent double-free when a browsed class has the same name as a printer
or vice versa (bug #433764, STR #2656).
- Reverted previous change as no security impact (bug #418371).

[1.1.22-0.rc1.9.20.2:.3]
- Applied patch to fix CVE-2007-5848 (bug #418371).

Related CVEs

CVE-2008-0596

CVE-2008-0597

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm	b1f22591ed2f81fa7375e2e5f0c12b73d90a438bbe68232e24c26f4aca514220	ELSA-2010-0755	el4_i386_latest
	cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm	b1f22591ed2f81fa7375e2e5f0c12b73d90a438bbe68232e24c26f4aca514220	ELSA-2010-0755	el4_u6_i386_patch
	cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	fcda768966488130934837da106c942919f50f69027296bb15339560614dd3f1	ELSA-2010-0755	el4_i386_latest
	cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	fcda768966488130934837da106c942919f50f69027296bb15339560614dd3f1	ELSA-2010-0755	el4_u6_i386_patch
	cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	4748471fdc8ba94541ffec31caf1b179d7b96d14be9952559021912df7f85d51	ELSA-2010-0755	el4_i386_latest
	cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	4748471fdc8ba94541ffec31caf1b179d7b96d14be9952559021912df7f85d51	ELSA-2010-0755	el4_u6_i386_patch
	cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	399851acff970507569efda15d5a1a598ad44af68e3542d221fd0ed019436295	ELSA-2010-0755	el4_i386_latest
	cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	399851acff970507569efda15d5a1a598ad44af68e3542d221fd0ed019436295	ELSA-2010-0755	el4_u6_i386_patch
Oracle Linux 4 (x86_64)	cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm	b1f22591ed2f81fa7375e2e5f0c12b73d90a438bbe68232e24c26f4aca514220	ELSA-2010-0755	el4_u6_x86_64_patch
	cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm	b1f22591ed2f81fa7375e2e5f0c12b73d90a438bbe68232e24c26f4aca514220	ELSA-2010-0755	el4_x86_64_latest
	cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm	58551c45543ced2437e9f6ca44d6658a04c1cae591fdc41d630f0f221e8ab37e	ELSA-2010-0755	el4_u6_x86_64_patch
	cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm	58551c45543ced2437e9f6ca44d6658a04c1cae591fdc41d630f0f221e8ab37e	ELSA-2010-0755	el4_x86_64_latest
	cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm	9f8232f9a393e669a9616ffb3982c41e026aecf6cc9dae86b4c834eb83872305	ELSA-2010-0755	el4_u6_x86_64_patch
	cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm	9f8232f9a393e669a9616ffb3982c41e026aecf6cc9dae86b4c834eb83872305	ELSA-2010-0755	el4_x86_64_latest
	cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	399851acff970507569efda15d5a1a598ad44af68e3542d221fd0ed019436295	ELSA-2010-0755	el4_u6_x86_64_patch
	cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm	399851acff970507569efda15d5a1a598ad44af68e3542d221fd0ed019436295	ELSA-2010-0755	el4_x86_64_latest
	cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm	ab64bad7cc9dfcc68ac103ee50c432eeb819ed666343d8d3b3e74836d6e4c88f	ELSA-2010-0755	el4_u6_x86_64_patch
	cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm	ab64bad7cc9dfcc68ac103ee50c432eeb819ed666343d8d3b3e74836d6e4c88f	ELSA-2010-0755	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team