RHSA-2007:1023: Important: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layerfor UNIX(R) operating systems.Alin Rad Pop discovered a flaw in the handling of PDF files. An attackercould create a malicious PDF file that would cause CUPS to crash orpotentially execute arbitrary code when printed. (CVE-2007-5393)Alin Rad Pop discovered a flaw in in the way CUPS handles certain IPP tags.A remote attacker who is able to connect to the IPP TCP port could send amalicious request causing the CUPS daemon to crash. (CVE-2007-4351)A flaw was found in the way CUPS handled SSL negotiation. A remote attackercapable of connecting to the CUPS daemon could cause CUPS to crash.(CVE-2007-4045)All CUPS users are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:1023?
The severity of RHSA-2007:1023 is considered to be high due to the potential for denial of service and arbitrary code execution.
How do I fix RHSA-2007:1023?
To fix RHSA-2007:1023, you should update the Common UNIX Printing System (CUPS) to the latest version provided by your distribution.
What systems are affected by RHSA-2007:1023?
RHSA-2007:1023 affects systems running the Common UNIX Printing System (CUPS) with vulnerabilities in handling PDF files.
Is there a workaround for RHSA-2007:1023?
If an update is not immediately available, a potential workaround for RHSA-2007:1023 is to disable PDF printing in CUPS.
What kind of attacks can RHSA-2007:1023 enable?
RHSA-2007:1023 can enable attackers to crash the CUPS service or execute arbitrary code through a specially crafted malicious PDF file.