| Description: | Description:
The remote host is missing an update to cups
announced via advisory FEDORA-2008-2897.
Three security issues have been fixed in this update:
* A buffer overflow when processing GIF files
* A heap-based overflow in a CUPS helper program, used for searching
documentation
* A buffer overflow when processing HP-GL/2 files
ChangeLog:
* Tue Apr 1 2008 Tim Waugh 1:1.2.12-10
- Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
- Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
- Applied patch to prevent heap-based buffer overflow in CUPS helper
program (bug #436153, CVE-2008-0047, STR #2729).
References:
[ 1 ] Bug #438117 - CVE-2008-0053 cups: buffer overflows in HP-GL/2 filter
https://bugzilla.redhat.com/show_bug.cgi?id=438117
[ 2 ] Bug #436153 - CVE-2008-0047 cups: heap based buffer overflow in cgiCompileSearch()
https://bugzilla.redhat.com/show_bug.cgi?id=436153
[ 3 ] Bug #438303 - CVE-2008-1373 cups: overflow in gif image filter
https://bugzilla.redhat.com/show_bug.cgi?id=438303
Solution: Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update cups' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-2897
Risk factor : Critical
CVSS Score:
10.0
|
