Synopsis

Important: cups security update

Type/Severity

Security Advisory: Important

Topic

Updated cups packages that fix one security issue are now available for Red
Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

Description

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

An invalid free flaw was found in the way the CUPS server parsed Internet
Printing Protocol (IPP) packets. A malicious user able to send IPP requests
to the CUPS server could use this flaw to crash the CUPS server.
(CVE-2010-2941)

Red Hat would like to thank Emmanuel Bouillon of NATO C3 Agency for
reporting this issue.

Users of cups are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing this
update, the cupsd daemon will be restarted automatically.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 624438 - CVE-2010-2941 cups: cupsd memory corruption vulnerability

CVEs

• CVE-2010-2941

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
x86_64
cups-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 25d1c64726333c44bb99df9dfd73a37386afe753c05153f622f5324c6bfbf162
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-devel-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 7c58607e0339d959e9374a8a4163d57eeb8eca177b4033158292164209f511f2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-libs-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 85d1c6ca057bfa109a20b66af801a70b7a5b7b83ffb4baa279300ce6c08a76a4
cups-lpd-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: c939da44b17cf3cd6ed8b7ad83dc939a305d7c1e91e76cd4314254761a630cb5
cups-php-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: e4cd91a0d330b2562375893a0f2ec7e7ea1de88baaf309e736884ddde3f036dd
i386
cups-1.4.2-35.el6_0.1.i686.rpm	SHA-256: fa255536ec3edf5177f45bfd55061582b9400dd303e2e5137b38a2d342806b15
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-lpd-1.4.2-35.el6_0.1.i686.rpm	SHA-256: c46876d56bbee71fa9c5369c9605fddd968ab919bc113d0c9d6a118b1221b52b
cups-php-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 36d8e0dad26b4230eb39327d101da73ff7a1a25103f76f1da579cf43c3162103

Red Hat Enterprise Linux Workstation 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
x86_64
cups-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 25d1c64726333c44bb99df9dfd73a37386afe753c05153f622f5324c6bfbf162
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-devel-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 7c58607e0339d959e9374a8a4163d57eeb8eca177b4033158292164209f511f2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-libs-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 85d1c6ca057bfa109a20b66af801a70b7a5b7b83ffb4baa279300ce6c08a76a4
cups-lpd-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: c939da44b17cf3cd6ed8b7ad83dc939a305d7c1e91e76cd4314254761a630cb5
cups-php-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: e4cd91a0d330b2562375893a0f2ec7e7ea1de88baaf309e736884ddde3f036dd
i386
cups-1.4.2-35.el6_0.1.i686.rpm	SHA-256: fa255536ec3edf5177f45bfd55061582b9400dd303e2e5137b38a2d342806b15
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-lpd-1.4.2-35.el6_0.1.i686.rpm	SHA-256: c46876d56bbee71fa9c5369c9605fddd968ab919bc113d0c9d6a118b1221b52b
cups-php-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 36d8e0dad26b4230eb39327d101da73ff7a1a25103f76f1da579cf43c3162103

Red Hat Enterprise Linux Desktop 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
x86_64
cups-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 25d1c64726333c44bb99df9dfd73a37386afe753c05153f622f5324c6bfbf162
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-devel-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 7c58607e0339d959e9374a8a4163d57eeb8eca177b4033158292164209f511f2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-libs-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 85d1c6ca057bfa109a20b66af801a70b7a5b7b83ffb4baa279300ce6c08a76a4
cups-lpd-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: c939da44b17cf3cd6ed8b7ad83dc939a305d7c1e91e76cd4314254761a630cb5
cups-php-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: e4cd91a0d330b2562375893a0f2ec7e7ea1de88baaf309e736884ddde3f036dd
i386
cups-1.4.2-35.el6_0.1.i686.rpm	SHA-256: fa255536ec3edf5177f45bfd55061582b9400dd303e2e5137b38a2d342806b15
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-lpd-1.4.2-35.el6_0.1.i686.rpm	SHA-256: c46876d56bbee71fa9c5369c9605fddd968ab919bc113d0c9d6a118b1221b52b
cups-php-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 36d8e0dad26b4230eb39327d101da73ff7a1a25103f76f1da579cf43c3162103

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
s390x
cups-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: b15bb15a8a351f9ac541e39848ef23f960c7ab7377ea8ba1b7b4e1674b3a746f
cups-debuginfo-1.4.2-35.el6_0.1.s390.rpm	SHA-256: be5879c3d375e0dc9d2237b9e13c18670733fdbe6f24810433eb76a240a0283e
cups-debuginfo-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: d4ac7ecdc7f2eaf519a16c400b177b35aee3184d46a65adb0e3879079f0f9207
cups-debuginfo-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: d4ac7ecdc7f2eaf519a16c400b177b35aee3184d46a65adb0e3879079f0f9207
cups-devel-1.4.2-35.el6_0.1.s390.rpm	SHA-256: 83079ec6e43285e0905be5307d2307e1ddfaff32d96a788162ba8bb9b6908e16
cups-devel-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: bae7aa4856a7a0528bb7b9fc92611361625528db9373c902af948ea6554f4c43
cups-libs-1.4.2-35.el6_0.1.s390.rpm	SHA-256: 500e501f3e46bb03c77def8131e1ce2a54605909fd003035465e3de25bd18cf0
cups-libs-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: d279695e2bee7125bbd80d80a9b92a5a2c84b274364b73c0606f256a5f02ca9f
cups-lpd-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: 49233d170673441dff9fc9a956d331f102c7f6c11f461c79f6196c2d2104e0ed
cups-php-1.4.2-35.el6_0.1.s390x.rpm	SHA-256: a89a51dceffed70fe6f8210ad7d90141cf4f05268361e0c2a797e8fefbd37221

Red Hat Enterprise Linux for Power, big endian 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
ppc64
cups-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: e8b6523aca17d31aeda24c56345cb36ae22a799a73415ef56be0393c5aef25b7
cups-debuginfo-1.4.2-35.el6_0.1.ppc.rpm	SHA-256: aad49e826114f4d857c75e197fdb0a7296f7c253e72b239a6c30fd4b995a03e6
cups-debuginfo-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: 11f0c3225862b91621249ffc2860ce900fbe33ff8fd27d1b3e6201ac9a2cf9ca
cups-debuginfo-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: 11f0c3225862b91621249ffc2860ce900fbe33ff8fd27d1b3e6201ac9a2cf9ca
cups-devel-1.4.2-35.el6_0.1.ppc.rpm	SHA-256: c563aa6134da67a3c85fcc1575cb9ae0ac46a152ecc11076675c0a1226a25fd6
cups-devel-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: c37cccb68e18c7f239578bf696088233bdb49713cb90ea05dc87d0ccbfffe218
cups-libs-1.4.2-35.el6_0.1.ppc.rpm	SHA-256: 59b524799c18d783772a8a8df55e535376155b8fadc1037be1a9af4da0e40475
cups-libs-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: ee9a0634888535063edfb6160006e534d8dddc0dbb60a6485be9224aced044f3
cups-lpd-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: 62919a26a754bb203f10ecb58a3c70434c791551baa3517801b0da127881d26d
cups-php-1.4.2-35.el6_0.1.ppc64.rpm	SHA-256: 249e6331a41f3b0e4777523f4d43ab3eafa35fe861e7a85c14d1e181f1627280

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
x86_64
cups-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 25d1c64726333c44bb99df9dfd73a37386afe753c05153f622f5324c6bfbf162
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-devel-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 7c58607e0339d959e9374a8a4163d57eeb8eca177b4033158292164209f511f2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-libs-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 85d1c6ca057bfa109a20b66af801a70b7a5b7b83ffb4baa279300ce6c08a76a4
cups-lpd-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: c939da44b17cf3cd6ed8b7ad83dc939a305d7c1e91e76cd4314254761a630cb5
cups-php-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: e4cd91a0d330b2562375893a0f2ec7e7ea1de88baaf309e736884ddde3f036dd

Red Hat Enterprise Linux Server from RHUI 6

SRPM
cups-1.4.2-35.el6_0.1.src.rpm	SHA-256: 5958cdb3c82b9b53663f094b3840652cf3b5e1aedbe7b35763a863c9121b139e
x86_64
cups-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 25d1c64726333c44bb99df9dfd73a37386afe753c05153f622f5324c6bfbf162
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-debuginfo-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 0886e57062bbd8a0f97f37800af3c209e7c7b2cfb06e65375300f83a293560ea
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-devel-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 7c58607e0339d959e9374a8a4163d57eeb8eca177b4033158292164209f511f2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-libs-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: 85d1c6ca057bfa109a20b66af801a70b7a5b7b83ffb4baa279300ce6c08a76a4
cups-lpd-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: c939da44b17cf3cd6ed8b7ad83dc939a305d7c1e91e76cd4314254761a630cb5
cups-php-1.4.2-35.el6_0.1.x86_64.rpm	SHA-256: e4cd91a0d330b2562375893a0f2ec7e7ea1de88baaf309e736884ddde3f036dd
i386
cups-1.4.2-35.el6_0.1.i686.rpm	SHA-256: fa255536ec3edf5177f45bfd55061582b9400dd303e2e5137b38a2d342806b15
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-debuginfo-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 3e3fe8825aaefe0aa88e732438407c7fca67fc81891adf5f62604bcab23e419f
cups-devel-1.4.2-35.el6_0.1.i686.rpm	SHA-256: ebc6568ad04f6f71f58dcfdf4fe9b850de864483ff502ce923e35a580a2556d2
cups-libs-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 10062059d6b35c05d00d90db7f7fdd625dfd53284500217a4b209885be132183
cups-lpd-1.4.2-35.el6_0.1.i686.rpm	SHA-256: c46876d56bbee71fa9c5369c9605fddd968ab919bc113d0c9d6a118b1221b52b
cups-php-1.4.2-35.el6_0.1.i686.rpm	SHA-256: 36d8e0dad26b4230eb39327d101da73ff7a1a25103f76f1da579cf43c3162103