openSUSE-SU-2019:2573-1

Details

This update for cups fixes the following issues:

CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358).
CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).

This update was imported from the SUSE:SLE-15:Update update project.

Affected Packages(16 packages)

cups

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

cups-client

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

cups-config

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

cups-ddk

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

cups-devel

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

cups-devel-32bit

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

libcups2

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

libcups2-32bit

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

libcupscgi1

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

libcupscgi1-32bit

openSUSE Leap 15.0

Fixed in:

2.2.7-lp150.2.13.1

References

REPORT

https://bugzilla.suse.com/1146358

REPORT

https://bugzilla.suse.com/1146359

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2U7ZFFNECZWE2BZ2HMLFUOQGBZYQKIS5/#2U7ZFFNECZWE2BZ2HMLFUOQGBZYQKIS5

WEB

https://www.suse.com/security/cve/CVE-2019-8675

WEB

https://www.suse.com/security/cve/CVE-2019-8696