Branch p7 update bulletin.

Package cups-filters updated to version 1.0.71-alt0.M70P.1 for branch p7 in task 150950.

Published: 2015-07-14

BDU:2015-10867

Уязвимость операционной системы Ubuntu, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

Severity: HIGH (7.5)

References:

Published: 2015-07-14

BDU:2015-10868

Уязвимость операционной системы Debian GNU/Linux, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

Severity: HIGH (7.5)

References:

Published: 2015-07-14

BDU:2015-10869

Severity: HIGH (7.5)

References:

Published: 2015-07-14

BDU:2015-10870

Severity: HIGH (7.5)

References:

Published: 2015-03-24
Modified: 2024-11-21

CVE-2015-2265

The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.

Severity: HIGH (7.5)

References:

Published: 2015-07-14
Modified: 2024-11-21

CVE-2015-3258

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.

Severity: HIGH (7.5)

References:

Published: 2015-07-14
Modified: 2024-11-21

CVE-2015-3279

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.

Severity: HIGH (7.5)

References:

Version: 2.1.0

Branch p7 update on 2015-10-09

ALT-BU-2015-2677-1

ALT-PU-2015-1841-1

Closed vulnerabilities

BDU:2015-10867

BDU:2015-10868

BDU:2015-10869

BDU:2015-10870

CVE-2015-2265

CVE-2015-3258

CVE-2015-3279