bugtraq - [SECURITY] [DSA 3411-1] cups-filters security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20151202223450.GA4241@pisco.westfalen.local>
Date: Wed, 2 Dec 2015 23:34:50 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3411-1] cups-filters security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3411-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
December 02, 2015                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : cups-filters
CVE ID         : CVE-2015-8327

Michal Kowalczyk discovered that missing input sanitising in the
foomatic-rip print filter might result in the execution of arbitrary
commands.

The oldstable distribution (wheezy) is not affected.

For the stable distribution (jessie), this problem has been fixed in
version 1.0.61-5+deb8u2.

For the unstable distribution (sid), this problem has been fixed in
version 1.2.0-1.

We recommend that you upgrade your cups-filters packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=idqQ
-----END PGP SIGNATURE-----