ELSA-2024-7463

ELSA-2024-7463 - cups-filters security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-10-01

Description

[1.20.0-35.0.1]
- header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com)
- Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com)

[1.20.0-35]
- CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
- CVE-2024-47076 cups-filters: cfGetPrinterAttributes API does not perform sanitization on returned IPP attributes
- CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source

Related CVEs

CVE-2024-47176

CVE-2024-47175

CVE-2024-47076

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	9756c4b13a11366e1b3b37a5da47e8e3f795df54af869deb8dfde0be14f97e8a	-	ol8_aarch64_appstream
	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	9756c4b13a11366e1b3b37a5da47e8e3f795df54af869deb8dfde0be14f97e8a	-	ol8_aarch64_codeready_builder
	cups-filters-1.20.0-35.0.1.el8_10.aarch64.rpm	3da4c07b5d073ae8cbafe3aedcb4400c543b2d2c824daaae038e3abe09ea1474	-	ol8_aarch64_appstream
	cups-filters-devel-1.20.0-35.0.1.el8_10.aarch64.rpm	12c15b26360d2596765cd10fb03aef47efddd31bb391be786def72fe55013347	-	ol8_aarch64_codeready_builder
	cups-filters-libs-1.20.0-35.0.1.el8_10.aarch64.rpm	cedbeebb98bf419b3a008cb93748bdea6b1a12c8730a680a3f2506cd04c8a03d	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	9756c4b13a11366e1b3b37a5da47e8e3f795df54af869deb8dfde0be14f97e8a	-	ol8_x86_64_appstream
	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	9756c4b13a11366e1b3b37a5da47e8e3f795df54af869deb8dfde0be14f97e8a	-	ol8_x86_64_codeready_builder
	cups-filters-1.20.0-35.0.1.el8_10.x86_64.rpm	5c5a8d7b96245b4a7823200a25db3e9318acd7f38e8f329b6a7360cc151e8d94	-	ol8_x86_64_appstream
	cups-filters-devel-1.20.0-35.0.1.el8_10.i686.rpm	7a2fb9a4fa6108a43b46fc3d73c6daa4608ac41047b429758e18bd82de1e4ab8	-	ol8_x86_64_codeready_builder
	cups-filters-devel-1.20.0-35.0.1.el8_10.x86_64.rpm	3f627c925372575bd01254e5f8919efe73045d47cf8937c812346f0ff42a4667	-	ol8_x86_64_codeready_builder
	cups-filters-libs-1.20.0-35.0.1.el8_10.i686.rpm	7c2a36cadaf77c53437c6bad5e232c31388a28ef8eee2495be02364d45e3ba91	-	ol8_x86_64_appstream
	cups-filters-libs-1.20.0-35.0.1.el8_10.x86_64.rpm	613914329613e4dd29008e496014ccb5fee8ad2194839b0474003e849d903f90	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team