Issued:
2008-02-25
Updated:
2008-02-25

RHSA-2008:0161 - Security Advisory

Synopsis

Important: cups security update

Type/Severity

Security Advisory: Important

Topic

Updated cups packages that fix two security issues are now available
for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

A flaw was found in the way CUPS handled the addition and removal of remote
shared printers via IPP. A remote attacker could send malicious UDP IPP
packets causing the CUPS daemon to attempt to dereference already freed
memory and crash. (CVE-2008-0597)

A memory management flaw was found in the way CUPS handled the addition and
removal of remote shared printers via IPP. When shared printer was
removed, allocated memory was not properly freed, leading to a memory leak
possibly causing CUPS daemon crash after exhausting available memory.
(CVE-2008-0596)

These issues were found during the investigation of CVE-2008-0882, which
did not affect Red Hat Enterprise Linux 4.

Note that the default configuration of CUPS on Red Hat Enterprise Linux
4 allow requests of this type only from the local subnet.

All CUPS users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6 ppc

Fixes

  • BZ - 433825 - CVE-2008-0596 cups: memory leak handling IPP browse requests
  • BZ - 433847 - CVE-2008-0597 cups: dereference of free'd memory handling IPP browse requests

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
x86_64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 0f093b7803d93ea4a7129fcf1182c49b46c69975fb9bcf36ba928b707ed96ccf
cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 0f093b7803d93ea4a7129fcf1182c49b46c69975fb9bcf36ba928b707ed96ccf
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 5cf1a4cc9672e72cdbd044741e2fd6f8551750ab4c8f244d14bceff95cd38bab
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 5cf1a4cc9672e72cdbd044741e2fd6f8551750ab4c8f244d14bceff95cd38bab
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: aa5110be5791f3de57cd2292f53ae16da29a4b955a9222eb377513a7ac44b093
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: aa5110be5791f3de57cd2292f53ae16da29a4b955a9222eb377513a7ac44b093
ia64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 831fdd7a749a942c3f47decf9927e93240f56074b69febaf5aabad1bd2cc06d5
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 831fdd7a749a942c3f47decf9927e93240f56074b69febaf5aabad1bd2cc06d5
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 865c38deaf63e6b8ccbd22926156fab4e16e2c484c919993e92c573e99b25839
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 865c38deaf63e6b8ccbd22926156fab4e16e2c484c919993e92c573e99b25839
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 15184734459f09642c17b0d6b62a4d6f3c99e25b3bb50cbbb65395c23f4d0c86
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 15184734459f09642c17b0d6b62a4d6f3c99e25b3bb50cbbb65395c23f4d0c86
i386
cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: baa112158b6a38bbec1d8ea673ab79deb5dc5e6e3166c1c953bd7dc160770fc3
cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: baa112158b6a38bbec1d8ea673ab79deb5dc5e6e3166c1c953bd7dc160770fc3
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 78974270921e065bca002e8120daa57d2b7da009b059ca981ac600b5027f88b3
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 78974270921e065bca002e8120daa57d2b7da009b059ca981ac600b5027f88b3
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38

Red Hat Enterprise Linux Server - Extended Update Support 4.6

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
x86_64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 0f093b7803d93ea4a7129fcf1182c49b46c69975fb9bcf36ba928b707ed96ccf
cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 0f093b7803d93ea4a7129fcf1182c49b46c69975fb9bcf36ba928b707ed96ccf
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 5cf1a4cc9672e72cdbd044741e2fd6f8551750ab4c8f244d14bceff95cd38bab
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 5cf1a4cc9672e72cdbd044741e2fd6f8551750ab4c8f244d14bceff95cd38bab
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: aa5110be5791f3de57cd2292f53ae16da29a4b955a9222eb377513a7ac44b093
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: aa5110be5791f3de57cd2292f53ae16da29a4b955a9222eb377513a7ac44b093
ia64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 831fdd7a749a942c3f47decf9927e93240f56074b69febaf5aabad1bd2cc06d5
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 831fdd7a749a942c3f47decf9927e93240f56074b69febaf5aabad1bd2cc06d5
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 865c38deaf63e6b8ccbd22926156fab4e16e2c484c919993e92c573e99b25839
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 865c38deaf63e6b8ccbd22926156fab4e16e2c484c919993e92c573e99b25839
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 15184734459f09642c17b0d6b62a4d6f3c99e25b3bb50cbbb65395c23f4d0c86
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 15184734459f09642c17b0d6b62a4d6f3c99e25b3bb50cbbb65395c23f4d0c86
i386
cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: baa112158b6a38bbec1d8ea673ab79deb5dc5e6e3166c1c953bd7dc160770fc3
cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: baa112158b6a38bbec1d8ea673ab79deb5dc5e6e3166c1c953bd7dc160770fc3
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 78974270921e065bca002e8120daa57d2b7da009b059ca981ac600b5027f88b3
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 78974270921e065bca002e8120daa57d2b7da009b059ca981ac600b5027f88b3
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38

Red Hat Enterprise Linux Workstation 4

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
x86_64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 0f093b7803d93ea4a7129fcf1182c49b46c69975fb9bcf36ba928b707ed96ccf
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 5cf1a4cc9672e72cdbd044741e2fd6f8551750ab4c8f244d14bceff95cd38bab
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: aa5110be5791f3de57cd2292f53ae16da29a4b955a9222eb377513a7ac44b093
ia64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 831fdd7a749a942c3f47decf9927e93240f56074b69febaf5aabad1bd2cc06d5
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 865c38deaf63e6b8ccbd22926156fab4e16e2c484c919993e92c573e99b25839
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ia64.rpm SHA-256: 15184734459f09642c17b0d6b62a4d6f3c99e25b3bb50cbbb65395c23f4d0c86
i386
cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: baa112158b6a38bbec1d8ea673ab79deb5dc5e6e3166c1c953bd7dc160770fc3
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 78974270921e065bca002e8120daa57d2b7da009b059ca981ac600b5027f88b3
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38

Red Hat Enterprise Linux Desktop 4

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
x86_64
cups-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 0f093b7803d93ea4a7129fcf1182c49b46c69975fb9bcf36ba928b707ed96ccf
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: 5cf1a4cc9672e72cdbd044741e2fd6f8551750ab4c8f244d14bceff95cd38bab
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.x86_64.rpm SHA-256: aa5110be5791f3de57cd2292f53ae16da29a4b955a9222eb377513a7ac44b093
i386
cups-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: baa112158b6a38bbec1d8ea673ab79deb5dc5e6e3166c1c953bd7dc160770fc3
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 78974270921e065bca002e8120daa57d2b7da009b059ca981ac600b5027f88b3
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.i386.rpm SHA-256: 9983638a818c1087c1a3f25e4422a57a491999c0966c63a505d816dbfad49d38

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
s390x
cups-1.1.22-0.rc1.9.20.2.el4_6.5.s390x.rpm SHA-256: dfcf3832c5c1d097bc61c1fa2a4c699b6193a0cc31903ab2563f3b2534cf889f
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.s390x.rpm SHA-256: 7204525dfd86be2186e75bf72f4b23616290b1091feefc0bc1cb92a3432b58b0
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 259e4dd03a8769967f7e9b8948687d3c7e89b442523b4db9227154561760a53f
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.s390x.rpm SHA-256: 1680c973590f7e363803127010de6a857396acfc916ca84e241657c23f2c837a
s390
cups-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 6d939928e629282729bc8be86ba6040497a7fd316babc248fd8e9e8e2c508de7
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 06fab35527f33059c6f1d607b9d9a091b3264e2f09bc960938ed5f2eb5cea9af
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 259e4dd03a8769967f7e9b8948687d3c7e89b442523b4db9227154561760a53f

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
s390x
cups-1.1.22-0.rc1.9.20.2.el4_6.5.s390x.rpm SHA-256: dfcf3832c5c1d097bc61c1fa2a4c699b6193a0cc31903ab2563f3b2534cf889f
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.s390x.rpm SHA-256: 7204525dfd86be2186e75bf72f4b23616290b1091feefc0bc1cb92a3432b58b0
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 259e4dd03a8769967f7e9b8948687d3c7e89b442523b4db9227154561760a53f
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.s390x.rpm SHA-256: 1680c973590f7e363803127010de6a857396acfc916ca84e241657c23f2c837a
s390
cups-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 6d939928e629282729bc8be86ba6040497a7fd316babc248fd8e9e8e2c508de7
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 06fab35527f33059c6f1d607b9d9a091b3264e2f09bc960938ed5f2eb5cea9af
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.s390.rpm SHA-256: 259e4dd03a8769967f7e9b8948687d3c7e89b442523b4db9227154561760a53f

Red Hat Enterprise Linux for Power, big endian 4

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
ppc
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ppc.rpm SHA-256: bdee674988910b542910a60b3fe24f68df63e2f5155f44739de8eac25324ae6a
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ppc.rpm SHA-256: 6a154419c9d4ca36e37031e357e7bc2a06b27eb28cf51d180ebcc7ce125ccbb2
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ppc.rpm SHA-256: dae3f594ca7f8c645b2e64c2d9ff9961fadf1c83c74716f1496e859744372ec5
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ppc64.rpm SHA-256: 97c34550d6a2a1a59af5312c136dc95d6b56b3b21fb37b7387685c85532e22c5

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6

SRPM
cups-1.1.22-0.rc1.9.20.2.el4_6.5.src.rpm SHA-256: 952c15138e5a70455fa2338d467b443ce8a3789dc4b8b6aed4c2e902785dd5ef
ppc
cups-1.1.22-0.rc1.9.20.2.el4_6.5.ppc.rpm SHA-256: bdee674988910b542910a60b3fe24f68df63e2f5155f44739de8eac25324ae6a
cups-devel-1.1.22-0.rc1.9.20.2.el4_6.5.ppc.rpm SHA-256: 6a154419c9d4ca36e37031e357e7bc2a06b27eb28cf51d180ebcc7ce125ccbb2
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ppc.rpm SHA-256: dae3f594ca7f8c645b2e64c2d9ff9961fadf1c83c74716f1496e859744372ec5
cups-libs-1.1.22-0.rc1.9.20.2.el4_6.5.ppc64.rpm SHA-256: 97c34550d6a2a1a59af5312c136dc95d6b56b3b21fb37b7387685c85532e22c5

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.