A vulnerability has been found in CUPS filters where remote code execution is possible via the beh filter.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups-filters | * | < 1.28.17-r2 | >= 1.28.17-r2 |
CUPS filters provides backends, filters, and other software that was once part of the core CUPS distribution.
A vulnerability has been discovered in cups-filters. Please review the CVE identifier referenced below for details.
If you use beh to create an accessible network printer, this security vulnerability can cause remote code execution.
There is no known workaround at this time.
All cups-filters users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-filters-1.28.17-r2"
Multiple vulnerabilities have been found in cups-filters, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups-filters | * | < 1.0.71 | >= 1.0.71 |
cups-filters is an OpenPrinting CUPS Filters.
Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted print job using cups-filters, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All cups-filters users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-filters-1.0.71"
Multiple vulnerabilities have been found in cups-filters, worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-print/cups-filters | * | < 1.0.53 | >= 1.0.53 |
cups-filters is an OpenPrinting CUPS Filters.
Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for more details about the vulnerabilities.
A remote attacker(s) could possibly execute arbitrary code utilizing multiple attack vectors, or a local attacker could gain escalated privileges via a specially crafted shared library.
There is no known workaround at this time.
All cups-filters users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/cups-filters-1.0.53"