ELSA-2024-7463

ELSA-2024-7463 - cups-filters security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-10-01

Description

[1.20.0-35.0.1]
- header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com)
- Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com)

[1.20.0-35]
- CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
- CVE-2024-47076 cups-filters: cfGetPrinterAttributes API does not perform sanitization on returned IPP attributes
- CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source

Related CVEs

CVE-2024-47176

CVE-2024-47175

CVE-2024-47076

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	2b3d0fcca96581ea55c8454643696a93	-	ol8_aarch64_appstream
	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	2b3d0fcca96581ea55c8454643696a93	-	ol8_aarch64_codeready_builder
	cups-filters-1.20.0-35.0.1.el8_10.aarch64.rpm	b1c6ed168f0700e4bff6cc067ce47e8f	-	ol8_aarch64_appstream
	cups-filters-devel-1.20.0-35.0.1.el8_10.aarch64.rpm	76d269f48f0730247817d458fff8852c	-	ol8_aarch64_codeready_builder
	cups-filters-libs-1.20.0-35.0.1.el8_10.aarch64.rpm	ca3605e273fdfb9596728653419a7139	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	2b3d0fcca96581ea55c8454643696a93	-	ol8_x86_64_appstream
	cups-filters-1.20.0-35.0.1.el8_10.src.rpm	2b3d0fcca96581ea55c8454643696a93	-	ol8_x86_64_codeready_builder
	cups-filters-1.20.0-35.0.1.el8_10.x86_64.rpm	76c5d2d35dcf3fba049eae2854003b9b	-	ol8_x86_64_appstream
	cups-filters-devel-1.20.0-35.0.1.el8_10.i686.rpm	d1e3e662a0e4a0351ed86e3fe0bf5d71	-	ol8_x86_64_codeready_builder
	cups-filters-devel-1.20.0-35.0.1.el8_10.x86_64.rpm	577aaaba170890ff0ff30d4de7c9a045	-	ol8_x86_64_codeready_builder
	cups-filters-libs-1.20.0-35.0.1.el8_10.i686.rpm	5202935e9439b87aef070fadd94fad63	-	ol8_x86_64_appstream
	cups-filters-libs-1.20.0-35.0.1.el8_10.x86_64.rpm	95685c3343462d1375bc1154e9e0a0eb	-	ol8_x86_64_appstream