SUSE-SU-2024:3570-1
Security update for cups-filters
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for cups-filters fixes the following issues: - CVE-2024-47176: cups-browsed binds on UDP port 631 and trusts packets that try to trigger a Get-Printer-Attributes IPP request. (bsc#1230939) - CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets (bsc#1231294) The fix is disabling the CUPS protocol in cups-browsed.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.5 | cups-filters, cups-filters-cups-browsed, cups-filters-foomatic-rip y 10 más | 1.0.58-19.26.1 y 1 más |
Mostrar las 13 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.5 | cups-filters | 1.0.58-19.26.1 |
| SUSE Linux Enterprise 12.5 | cups-filters-cups-browsed | 1.0.58-19.26.1 |
| SUSE Linux Enterprise 12.5 | cups-filters-foomatic-rip | 1.0.58-19.26.1 |
| SUSE Linux Enterprise 12.5 | cups-filters-ghostscript | 1.0.58-19.26.1 |
| SUSE Linux Enterprise 12.5 | libpoppler-cpp0 | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | libpoppler-devel | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | libpoppler-glib-devel | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | libpoppler-glib8 | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | libpoppler-qt4-4 | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | libpoppler-qt4-devel | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | libpoppler60 | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | poppler-tools | 0.43.0-16.49.1 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-Poppler-0_18 | 0.43.0-16.49.1 |
Referencias
- https://bugzilla.suse.com/1230939
- https://bugzilla.suse.com/1231294
- https://lists.suse.com/pipermail/sle-security-updates/2024-October/019581.html
- https://www.suse.com/security/cve/CVE-2024-47176/
- https://www.suse.com/security/cve/CVE-2024-47850/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2024/suse-su-20243570-1/