SUSE-SU-2019:3030-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2019:3030-1

HIGH8.8

Security update for cups

Published Nov 21, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for cups fixes the following issues:

CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).

Affected Packages(11 packages)

cups

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

cups-client

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

cups-config

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

cups-devel

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

libcups2

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

libcups2-32bit

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1SUSE Linux Enterprise Module for Desktop Applications 15

Fixed in:

2.2.7-3.14.1

libcupscgi1

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

libcupsimage2

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.2.7-3.14.1

libcupsmime1

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1