RHSA-2007:1022: Important: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layerfor UNIX(R) operating systems.Alin Rad Pop discovered several flaws in the handling of PDF files. Anattacker could create a malicious PDF file that would cause CUPS to crashor potentially execute arbitrary code when printed.(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)Alin Rad Pop discovered a flaw in in the way CUPS handles certain IPP tags.A remote attacker who is able to connect to the IPP TCP port could send amalicious request causing the CUPS daemon to crash. (CVE-2007-4351)A flaw was found in the way CUPS handled SSL negotiation. A remote attackercapable of connecting to the CUPS daemon could cause CUPS to crash.(CVE-2007-4045)All CUPS users are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:1022?
The severity of RHSA-2007:1022 is classified as critical due to potential crashes or execution of arbitrary code from malicious PDF files.
How do I fix RHSA-2007:1022?
To fix RHSA-2007:1022, upgrade to the patched version 1.1.22-0.rc1.9.20.2.el4_5.2 of the CUPS package.
What systems are affected by RHSA-2007:1022?
RHSA-2007:1022 affects various CUPS packages including cups, cups-devel, and cups-libs on Red Hat Enterprise Linux 4.
What vulnerabilities are addressed in RHSA-2007:1022?
RHSA-2007:1022 addresses several flaws in PDF file handling that may lead to application crashes or remote code execution.
Can unpatched systems still operate normally after RHSA-2007:1022?
Unpatched systems may continue to operate, but they remain vulnerable to PDF file exploits that could compromise system integrity.