ELSA-2020-1765

ELSA-2020-1765 - cups security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2020-05-05

Description

[1:2.2.6-33]
- fix more memory leaks found by coverity in 1775668

[1:2.2.6-32]
- fix covscan issues raised by 1775668

[1:2.2.6-31]
- 1775668 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created

[1:2.2.6-30]
- 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
- 1774463 - CVE-2019-8696

[1:2.2.6-29]
- 1700663 - Stop advertising the HTTP methods that are supported

Related CVEs

CVE-2019-8696

CVE-2019-8675

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	cups-2.2.6-33.el8.src.rpm	03e5d7063f9e510950a67df01b8319efc965fef6c45ac4ee65ba2e29bbaf022f	-	ol8_aarch64_appstream
	cups-2.2.6-33.el8.src.rpm	03e5d7063f9e510950a67df01b8319efc965fef6c45ac4ee65ba2e29bbaf022f	-	ol8_aarch64_baseos_latest
	cups-2.2.6-33.el8.src.rpm	03e5d7063f9e510950a67df01b8319efc965fef6c45ac4ee65ba2e29bbaf022f	-	ol8_aarch64_u2_baseos_base
	cups-2.2.6-33.el8.aarch64.rpm	abf810b069e4346266c2323066a86700ae5855390abdb48c44834f711a4201d9	-	ol8_aarch64_appstream
	cups-client-2.2.6-33.el8.aarch64.rpm	9b4ed911798fa4f8d5515702407bb3b3d5ed8f02e267fb56eeef22f5faedb4c8	-	ol8_aarch64_appstream
	cups-devel-2.2.6-33.el8.aarch64.rpm	d73259c2b87e2bba35bb25fef2d84acd4156412f6a30facdf93789ced67466df	-	ol8_aarch64_appstream
	cups-filesystem-2.2.6-33.el8.noarch.rpm	c17165eeca24cd0c3601f0f292d94f68cd9487807f1ff9a7dfe8999a4cc2f326	-	ol8_aarch64_appstream
	cups-ipptool-2.2.6-33.el8.aarch64.rpm	f08c21f5b372c9877f217e437ad41cf5aa6ac938cc9494f858517c0157c33a37	-	ol8_aarch64_appstream
	cups-libs-2.2.6-33.el8.aarch64.rpm	81ec8c1363544d452b9d023aab6d33ee5fef29456124e08a058fd0e55959489c	-	ol8_aarch64_baseos_latest
	cups-libs-2.2.6-33.el8.aarch64.rpm	81ec8c1363544d452b9d023aab6d33ee5fef29456124e08a058fd0e55959489c	-	ol8_aarch64_u2_baseos_base
	cups-lpd-2.2.6-33.el8.aarch64.rpm	0299f6075700f50056c4cc00412ce2e17c9053f314b3d80f2857ed76b9b02fde	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	cups-2.2.6-33.el8.src.rpm	03e5d7063f9e510950a67df01b8319efc965fef6c45ac4ee65ba2e29bbaf022f	-	ol8_x86_64_appstream
	cups-2.2.6-33.el8.src.rpm	03e5d7063f9e510950a67df01b8319efc965fef6c45ac4ee65ba2e29bbaf022f	-	ol8_x86_64_baseos_latest
	cups-2.2.6-33.el8.src.rpm	03e5d7063f9e510950a67df01b8319efc965fef6c45ac4ee65ba2e29bbaf022f	-	ol8_x86_64_u2_baseos_base
	cups-2.2.6-33.el8.x86_64.rpm	ed1471d3b764dbab4c245021fb3106213076aafd864f051b1bc652b649b118a3	-	ol8_x86_64_appstream
	cups-client-2.2.6-33.el8.x86_64.rpm	70fa1913df824b107371121c8442853f836599570a4dfa4979576ff5bf3eadc8	-	ol8_x86_64_appstream
	cups-devel-2.2.6-33.el8.i686.rpm	fbc915c4d1d29e48eff9d956225c34c43f1886961ec1760ec3fa2536844e38f5	-	ol8_x86_64_appstream
	cups-devel-2.2.6-33.el8.x86_64.rpm	acc80b455e14596617768a6ca73a5c3e7fbc0b615dc89471aa00e03b84d90dfe	-	ol8_x86_64_appstream
	cups-filesystem-2.2.6-33.el8.noarch.rpm	c17165eeca24cd0c3601f0f292d94f68cd9487807f1ff9a7dfe8999a4cc2f326	-	ol8_x86_64_appstream
	cups-ipptool-2.2.6-33.el8.x86_64.rpm	07291e68027e7b80a444274fccabb319362ad03107d72948c6f32f761f551fb9	-	ol8_x86_64_appstream
	cups-libs-2.2.6-33.el8.i686.rpm	78638f40084d1818c4260f14b74a50978f879682063fe377be060cec87d5556e	-	ol8_x86_64_baseos_latest
	cups-libs-2.2.6-33.el8.i686.rpm	78638f40084d1818c4260f14b74a50978f879682063fe377be060cec87d5556e	-	ol8_x86_64_u2_baseos_base
	cups-libs-2.2.6-33.el8.x86_64.rpm	0507ffa1a42d0c95277e9cbf8650bf278e6ed834ba5de1b477a0616e5268f2e6	-	ol8_x86_64_baseos_latest
	cups-libs-2.2.6-33.el8.x86_64.rpm	0507ffa1a42d0c95277e9cbf8650bf278e6ed834ba5de1b477a0616e5268f2e6	-	ol8_x86_64_u2_baseos_base
	cups-lpd-2.2.6-33.el8.x86_64.rpm	638f6ec9b24a78432a8378c120183069b3d7471e8d7dca74ac8f3c04b648f620	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team