RHSA-2023:3426: Important: cups-filters security update
The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/cups-filtersto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1 - Upgrade
Upgrade
redhat/cups-filters-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1 - Upgrade
Upgrade
redhat/cups-filters-debugsourceto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1 - Upgrade
Upgrade
redhat/cups-filters-libsto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1 - Upgrade
Upgrade
redhat/cups-filters-libs-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1 - Upgrade
Upgrade
redhat/cups-filtersto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1.aa - Upgrade
Upgrade
redhat/cups-filters-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1.aa - Upgrade
Upgrade
redhat/cups-filters-debugsourceto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1.aa - Upgrade
Upgrade
redhat/cups-filters-libsto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1.aa - Upgrade
Upgrade
redhat/cups-filters-libs-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1.aa - Upgrade
Upgrade
redhat/cups-filters-develto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1 - Upgrade
Upgrade
redhat/cups-filters-develto a version that resolves this vulnerability.Fixed in 1.20.0-27.el8_6.1.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:3426?
RHSA-2023:3426 addresses a remote code execution vulnerability categorized as critical.
How do I fix RHSA-2023:3426?
To fix RHSA-2023:3426, update the cups-filters package to version 1.20.0-27.el8_6.1 or later.
Can RHSA-2023:3426 affect my system security?
Yes, if unpatched, RHSA-2023:3426 can potentially allow attackers to execute arbitrary code on affected systems.
Which systems are affected by RHSA-2023:3426?
RHSA-2023:3426 affects systems using the cups-filters package, specifically those older than version 1.20.0-27.el8_6.1.
Is there any specific package needed for the fix in RHSA-2023:3426?
Yes, the fix requires the cups-filters package, along with its associated debuginfo and libs packages.