Download
| Alert*
|
oval:org.secpod.oval:def:89045171
This update fixes the following security issues: CVE-2015-8327: adds backtick and semicolon to the list of illegal shell escape characters . CVE-2015-8560: fixed code execution via improper escaping of ; . oval:org.secpod.oval:def:702884 cups-filters: OpenPrinting CUPS Filters cups-filters could be made to run programs as the lp user if it processed a specially crafted print job. oval:org.secpod.oval:def:702875 foomatic-filters: OpenPrinting printer support - filters foomatic-filters could be made to run programs as the lp user if it processed a specially crafted print job. oval:org.secpod.oval:def:203886 Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. It was discovered that the unhtmlify function of f ... oval:org.secpod.oval:def:1501411 Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. It was discovered that the unhtmlify function of f ... oval:org.secpod.oval:def:109850 Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting. oval:org.secpod.oval:def:1600355 It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external programs run by the filter. An attacker could possibly use this flaw to execute arbitrary commands. It was discovered that the unhtmlify function of foomatic-rip ... oval:org.secpod.oval:def:602313 Adam Chester discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands. oval:org.secpod.oval:def:602319 Michal Kowalczyk and Adam Chester discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands. oval:org.secpod.oval:def:109903 Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting. oval:org.secpod.oval:def:501792 Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. It was discovered that the unhtmlify function of f ... oval:org.secpod.oval:def:52652 cups-filters: OpenPrinting CUPS Filters cups-filters could be made to run programs as the lp user if it processed a specially crafted print job. |
