All errata/sisyphus/ALT-PU-2014-1513-1
ALT-PU-2014-1513-1

Package update cups in branch sisyphus

Version1.7.2-alt1
Task#118597
Published2014-04-21
Max severityMEDIUM
Severity:

Closed issues (2)

CVE-2013-6891
LOW1.2

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.

Published: 2014-01-26Modified: 2026-04-29
CVSS 2.0LOW 1.2
CVSS:2.0/AV:L/AC:H/Au:N/C:P/I:N/A:N
References
CVE-2014-2856
MEDIUM4.3

Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.

Published: 2014-04-18Modified: 2025-04-12
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
References

Closed bugs (3)

Bug #29445

удалите поддержку /lib/udev/devices

Bug #29910

Вышла немного починенная версия 1.7.1 просьба собрать