Synopsis

Moderate: cups security update

Type/Severity

Security Advisory: Moderate

Topic

Updated cups packages that fix one security issue are now available for Red
Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

It was discovered that the Red Hat Security Advisory RHSA-2009:1595 did not
fully correct the use-after-free flaw in the way CUPS handled references in
its file descriptors-handling interface. A remote attacker could send
specially-crafted queries to the CUPS server, causing it to crash.
(CVE-2010-0302)

Users of cups are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the cupsd daemon will be restarted automatically.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 5.4 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 5.4 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 5.4 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.4 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.4 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 557775 - CVE-2010-0302 cups Incomplete fix for CVE-2009-3553

CVEs

• CVE-2010-0302

References

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 5

SRPM
cups-1.3.7-11.el5_4.6.src.rpm	SHA-256: 28a97520c75ca8e46f72b15cf15c5d3c21916ffd3ef5243bc4696649bf020e50
x86_64
cups-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 42a7e801918c78834f0c1eedd5b69ff9001bf652738feabd47f7b5a2f465ace4
cups-devel-1.3.7-11.el5_4.6.i386.rpm	SHA-256: de722dc8f51aacf0de6ab13da0ed25158dac3e1abb9161ce25f7685b9166624d
cups-devel-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: ca6acc0dcb4c9611e60b788864120fb1785ecc49271a0b46c2f64d2c4ccd23ee
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-libs-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 6e5fc83495c6778c00dae0cf09bec61f0a845beb2b76bd9898587762b14cdf30
cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 49c0b94fc11feadbf31714bca9f836b27a34d94e6510a96d74790c16df0a40b1
ia64
cups-1.3.7-11.el5_4.6.ia64.rpm	SHA-256: 37489875b77c9dd824dcefc6660acd0c188031594239fa0e1941dfd982977c53
cups-devel-1.3.7-11.el5_4.6.ia64.rpm	SHA-256: 48506e6490c11a43bf67dbc6d468e5eac13fbf0846c923f3a25db1fd327f6f94
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-libs-1.3.7-11.el5_4.6.ia64.rpm	SHA-256: 06dbda7a63ea290569c4964c8ecff0c3b8854cca5244a6439cf64322de60b7d8
cups-lpd-1.3.7-11.el5_4.6.ia64.rpm	SHA-256: 0af364a5ae6371f1c1a8111414b245036f4c9c868cfc9f5811e6f0658885634c
i386
cups-1.3.7-11.el5_4.6.i386.rpm	SHA-256: 5b64ac6fc074c2a0a45afc18465ce2de535bdbf231d39d5e2c0278b77894f460
cups-devel-1.3.7-11.el5_4.6.i386.rpm	SHA-256: de722dc8f51aacf0de6ab13da0ed25158dac3e1abb9161ce25f7685b9166624d
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-lpd-1.3.7-11.el5_4.6.i386.rpm	SHA-256: c8fe00cdfd292a3d692c7e9ef7458de1a493b414274e427a64802356b78494cc

Red Hat Enterprise Linux Workstation 5

SRPM
cups-1.3.7-11.el5_4.6.src.rpm	SHA-256: 28a97520c75ca8e46f72b15cf15c5d3c21916ffd3ef5243bc4696649bf020e50
x86_64
cups-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 42a7e801918c78834f0c1eedd5b69ff9001bf652738feabd47f7b5a2f465ace4
cups-devel-1.3.7-11.el5_4.6.i386.rpm	SHA-256: de722dc8f51aacf0de6ab13da0ed25158dac3e1abb9161ce25f7685b9166624d
cups-devel-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: ca6acc0dcb4c9611e60b788864120fb1785ecc49271a0b46c2f64d2c4ccd23ee
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-libs-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 6e5fc83495c6778c00dae0cf09bec61f0a845beb2b76bd9898587762b14cdf30
cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 49c0b94fc11feadbf31714bca9f836b27a34d94e6510a96d74790c16df0a40b1
i386
cups-1.3.7-11.el5_4.6.i386.rpm	SHA-256: 5b64ac6fc074c2a0a45afc18465ce2de535bdbf231d39d5e2c0278b77894f460
cups-devel-1.3.7-11.el5_4.6.i386.rpm	SHA-256: de722dc8f51aacf0de6ab13da0ed25158dac3e1abb9161ce25f7685b9166624d
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-lpd-1.3.7-11.el5_4.6.i386.rpm	SHA-256: c8fe00cdfd292a3d692c7e9ef7458de1a493b414274e427a64802356b78494cc

Red Hat Enterprise Linux Desktop 5

SRPM
cups-1.3.7-11.el5_4.6.src.rpm	SHA-256: 28a97520c75ca8e46f72b15cf15c5d3c21916ffd3ef5243bc4696649bf020e50
x86_64
cups-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 42a7e801918c78834f0c1eedd5b69ff9001bf652738feabd47f7b5a2f465ace4
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-libs-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 6e5fc83495c6778c00dae0cf09bec61f0a845beb2b76bd9898587762b14cdf30
cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 49c0b94fc11feadbf31714bca9f836b27a34d94e6510a96d74790c16df0a40b1
i386
cups-1.3.7-11.el5_4.6.i386.rpm	SHA-256: 5b64ac6fc074c2a0a45afc18465ce2de535bdbf231d39d5e2c0278b77894f460
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-lpd-1.3.7-11.el5_4.6.i386.rpm	SHA-256: c8fe00cdfd292a3d692c7e9ef7458de1a493b414274e427a64802356b78494cc

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
cups-1.3.7-11.el5_4.6.src.rpm	SHA-256: 28a97520c75ca8e46f72b15cf15c5d3c21916ffd3ef5243bc4696649bf020e50
s390x
cups-1.3.7-11.el5_4.6.s390x.rpm	SHA-256: af7c45cedb004f91ae90bc3a8f158cb9d9243e151a7ba74738aba0f22bdf3778
cups-devel-1.3.7-11.el5_4.6.s390.rpm	SHA-256: 0c44628cbc9e2df027664c36ed4b37305f3a098e2cb5bb790fedaeeaca12a6cf
cups-devel-1.3.7-11.el5_4.6.s390x.rpm	SHA-256: e519602a2b18392e2d55463c2fb1f93b7e62ed3574b856cd8ce257aecce1be70
cups-libs-1.3.7-11.el5_4.6.s390.rpm	SHA-256: ba1b4efb9c702eb9285896369c3d50fbcd2869b6947bb5e49b75cbc59a65415f
cups-libs-1.3.7-11.el5_4.6.s390x.rpm	SHA-256: ea44d4b6cfcccecde498123632c60ce952156bda58b027ff17fe697564c0f336
cups-lpd-1.3.7-11.el5_4.6.s390x.rpm	SHA-256: 76cf70f7b6ec1b1852c0e61f005b6f2ad6ee4cedd435f86a9ddaab19b73b5aba

Red Hat Enterprise Linux for Power, big endian 5

SRPM
cups-1.3.7-11.el5_4.6.src.rpm	SHA-256: 28a97520c75ca8e46f72b15cf15c5d3c21916ffd3ef5243bc4696649bf020e50
ppc
cups-1.3.7-11.el5_4.6.ppc.rpm	SHA-256: 8155a5ad31d617177f78661a0f253d2f3d6871e1c7f731aff39c193b9fd8cd89
cups-devel-1.3.7-11.el5_4.6.ppc.rpm	SHA-256: fb5a11a95fabc0ef916d4153b87f26e4961bd0cd56315158441d1811d2c2b4f3
cups-devel-1.3.7-11.el5_4.6.ppc64.rpm	SHA-256: 6828ac0bea210d6d04b1091e3e9f66c17f04f548b78caa2d444adb90dbe5c2f7
cups-libs-1.3.7-11.el5_4.6.ppc.rpm	SHA-256: 13bfc8e36b688c81f81fc234b2067fdef43f06c60ffac2d439f9f47f45db6f15
cups-libs-1.3.7-11.el5_4.6.ppc64.rpm	SHA-256: bf02a6581203c5dae1197e09ad733b7d1c193f62118bf84917dc045d2d38f7ba
cups-lpd-1.3.7-11.el5_4.6.ppc.rpm	SHA-256: 8078851e473b5c55b3bfa77e9546ad4d89cdfc9f475ceff093aaafcfecf9112e

Red Hat Enterprise Linux Server from RHUI 5

SRPM
cups-1.3.7-11.el5_4.6.src.rpm	SHA-256: 28a97520c75ca8e46f72b15cf15c5d3c21916ffd3ef5243bc4696649bf020e50
x86_64
cups-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 42a7e801918c78834f0c1eedd5b69ff9001bf652738feabd47f7b5a2f465ace4
cups-devel-1.3.7-11.el5_4.6.i386.rpm	SHA-256: de722dc8f51aacf0de6ab13da0ed25158dac3e1abb9161ce25f7685b9166624d
cups-devel-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: ca6acc0dcb4c9611e60b788864120fb1785ecc49271a0b46c2f64d2c4ccd23ee
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-libs-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 6e5fc83495c6778c00dae0cf09bec61f0a845beb2b76bd9898587762b14cdf30
cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm	SHA-256: 49c0b94fc11feadbf31714bca9f836b27a34d94e6510a96d74790c16df0a40b1
i386
cups-1.3.7-11.el5_4.6.i386.rpm	SHA-256: 5b64ac6fc074c2a0a45afc18465ce2de535bdbf231d39d5e2c0278b77894f460
cups-devel-1.3.7-11.el5_4.6.i386.rpm	SHA-256: de722dc8f51aacf0de6ab13da0ed25158dac3e1abb9161ce25f7685b9166624d
cups-libs-1.3.7-11.el5_4.6.i386.rpm	SHA-256: fdd50465a1ffba104178c76e609a9342f58e62041a77c4c2e90ff037aad17d37
cups-lpd-1.3.7-11.el5_4.6.i386.rpm	SHA-256: c8fe00cdfd292a3d692c7e9ef7458de1a493b414274e427a64802356b78494cc