SUSE-SU-2023:3707-1: Security update for cups
This update for cups fixes the following issues: CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/cups-configto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcups2to a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-debugsourceto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcups2-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsimage2to a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsppdc1to a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupscgi1-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-ddk-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-develto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cupsto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsppdc1-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupscgi1to a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsimage2-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsmime1-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-ddkto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-clientto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-client-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsmime1to a version that resolves this vulnerability.Fixed in 2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsppdc1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcups2to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsppdc1to a version that resolves this vulnerability.Fixed in 32bit-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupscgi1to a version that resolves this vulnerability.Fixed in 32bit-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupscgi1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcups2to a version that resolves this vulnerability.Fixed in 32bit-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsmime1to a version that resolves this vulnerability.Fixed in 32bit-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/cups-develto a version that resolves this vulnerability.Fixed in 32bit-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsimage2to a version that resolves this vulnerability.Fixed in 32bit-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsmime1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.2.7-150000.3.51.2 - Upgrade
Upgrade
suse/libcupsimage2to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.2.7-150000.3.51.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3707=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-3707=1