| Description: | Description:
The remote host is missing updates announced in
advisory RHSA-2005:132.
The Common UNIX Printing System (CUPS) is a print spooler.
During a source code audit, Chris Evans discovered a number of integer
overflow bugs that affect Xpdf. CUPS contained a copy of the Xpdf code
used for parsing PDF files and was therefore affected by these bugs. The
Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the
name CVE-2004-0888 to this issue, and Red Hat released erratum
RHSA-2004:543 with updated packages.
It was found that the patch used to correct this issue was not sufficient
and did not fully protect CUPS running on 64-bit architectures. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CVE-2005-0206 to this issue.
These updated packages also include a fix that prevents the CUPS
initscript from being accidentally replaced.
All users of CUPS on 64-bit architectures should upgrade to these updated
packages, which contain a corrected patch and are not vulnerable to these
issues.
Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date
http://rhn.redhat.com/errata/RHSA-2005-132.html
Risk factor : Critical
CVSS Score:
10.0
|
