ELSA-2023-6596

ELSA-2023-6596 - cups security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-11-11

Description

[1:2.3.3op2-21]
- bump the spec because the previous build was made with buildroot 9.2

[1:2.3.3op2-20]
- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

[1:2.3.3op2-19]
- CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
- CVE-2023-32324 cups: heap buffer overflow may lead to DoS

[1:2.3.3op2-19]
- 2217177 - Delays printing to lpd when reserved ports are exhausted
- 2217284 - The command 'cancel -x ' does not remove job files
- 2217954 - Enlarge backlog queue for listen() in cupsd

[1:2.3.3op2-18]
- 2189919 - CGI scripts don't work with local Negotiate authentication

[1:2.3.3op2-17]
- RHEL-314 - Enable fmf tests in centos stream

[1:2.3.3op2-17]
- RHEL-317 - upstream test suite fails due uncorrect number of expected warnings

Related CVEs

CVE-2023-34241

CVE-2023-32324

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	cups-2.3.3op2-21.el9.src.rpm	aa5f7e70ba286944ced2c599b0233dec194450ef23c64694701163d2bb7c2cad	-	ol9_aarch64_appstream
	cups-2.3.3op2-21.el9.src.rpm	aa5f7e70ba286944ced2c599b0233dec194450ef23c64694701163d2bb7c2cad	-	ol9_aarch64_baseos_latest
	cups-2.3.3op2-21.el9.src.rpm	aa5f7e70ba286944ced2c599b0233dec194450ef23c64694701163d2bb7c2cad	-	ol9_aarch64_u3_baseos_base
	cups-2.3.3op2-21.el9.aarch64.rpm	3d468868e6625e937ae51dbd5c736723b3e79c5e2460168a32ae8d433d3e30df	-	ol9_aarch64_appstream
	cups-client-2.3.3op2-21.el9.aarch64.rpm	24a385f75f274a2e3a4575af226f55289b0d4bb49b201c4e9bb2d21ac7e1e1f2	-	ol9_aarch64_appstream
	cups-devel-2.3.3op2-21.el9.aarch64.rpm	1294c84d2d48dce53683e4c82d85359735628f7445052619019b25c16d6c0be0	-	ol9_aarch64_appstream
	cups-filesystem-2.3.3op2-21.el9.noarch.rpm	a738b02a97a0c0abd019186933b30298928953959dea7a974df19e46f6157112	-	ol9_aarch64_appstream
	cups-ipptool-2.3.3op2-21.el9.aarch64.rpm	4839c801f891f0af88be334eb5d7c0e089921019ab23805fe16eae7f0d330295	-	ol9_aarch64_appstream
	cups-libs-2.3.3op2-21.el9.aarch64.rpm	0aa0a562cfd460337c37d552f16be271fce080f8529bb20cc3c23e5cf08b21d9	-	ol9_aarch64_baseos_latest
	cups-libs-2.3.3op2-21.el9.aarch64.rpm	0aa0a562cfd460337c37d552f16be271fce080f8529bb20cc3c23e5cf08b21d9	-	ol9_aarch64_u3_baseos_base
	cups-lpd-2.3.3op2-21.el9.aarch64.rpm	9ff1c901e0478b785d5ead254429ed9d9916e11125ebc3f8ce24218c46a16d05	-	ol9_aarch64_appstream
	cups-printerapp-2.3.3op2-21.el9.aarch64.rpm	5198744d44694abb5c994b5a367fd8a509aca3b474526cbf90590b2b3e0962a9	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	cups-2.3.3op2-21.el9.src.rpm	aa5f7e70ba286944ced2c599b0233dec194450ef23c64694701163d2bb7c2cad	-	ol9_x86_64_appstream
	cups-2.3.3op2-21.el9.src.rpm	aa5f7e70ba286944ced2c599b0233dec194450ef23c64694701163d2bb7c2cad	-	ol9_x86_64_baseos_latest
	cups-2.3.3op2-21.el9.src.rpm	aa5f7e70ba286944ced2c599b0233dec194450ef23c64694701163d2bb7c2cad	-	ol9_x86_64_u3_baseos_base
	cups-2.3.3op2-21.el9.x86_64.rpm	ec3d0a9f42d72a65143ab46b1eec3585285d8aad380e74ad8f471102b7b80ae9	-	ol9_x86_64_appstream
	cups-client-2.3.3op2-21.el9.x86_64.rpm	1bbe940336cdd1351c5e0427ac4f7e776bf562365fb0a4cb84d53b43e2ddcc7c	-	ol9_x86_64_appstream
	cups-devel-2.3.3op2-21.el9.i686.rpm	2742cce45317116712f06c9337722b978196310876fafb3868b59205085847e2	-	ol9_x86_64_appstream
	cups-devel-2.3.3op2-21.el9.x86_64.rpm	6a9e395db6de60c27f5f05d9092800d2e3ab55b7346f0f215426e4dd51519731	-	ol9_x86_64_appstream
	cups-filesystem-2.3.3op2-21.el9.noarch.rpm	a738b02a97a0c0abd019186933b30298928953959dea7a974df19e46f6157112	-	ol9_x86_64_appstream
	cups-ipptool-2.3.3op2-21.el9.x86_64.rpm	18a87d53215c3fdd1de843e985ef4d9674eee0c59b06e84ad3e618e3bcf550c9	-	ol9_x86_64_appstream
	cups-libs-2.3.3op2-21.el9.i686.rpm	01058ff153a8cd02d38757adc983ade23f3ab82b68e2fcc5b204021d42b95f28	-	ol9_x86_64_baseos_latest
	cups-libs-2.3.3op2-21.el9.i686.rpm	01058ff153a8cd02d38757adc983ade23f3ab82b68e2fcc5b204021d42b95f28	-	ol9_x86_64_u3_baseos_base
	cups-libs-2.3.3op2-21.el9.x86_64.rpm	30c72ab9fc5d760ac41a7136e27c0edc1aefcdb4a7604de66d45fd35160552c2	-	ol9_x86_64_baseos_latest
	cups-libs-2.3.3op2-21.el9.x86_64.rpm	30c72ab9fc5d760ac41a7136e27c0edc1aefcdb4a7604de66d45fd35160552c2	-	ol9_x86_64_u3_baseos_base
	cups-lpd-2.3.3op2-21.el9.x86_64.rpm	eb4509436094e6a2bc627ee362ae1dd5de31d91cca5d431839afc796b9ab70b2	-	ol9_x86_64_appstream
	cups-printerapp-2.3.3op2-21.el9.x86_64.rpm	5441b0466bfd57f1324b80a253ed2af54ee6cf69d8ff93f98bf97f6d0a5f475b	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team