[El-errata] ELSA-2015-2360 Moderate: Oracle Linux 7 cups-filters security, bug fix, and enhancement update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Mon Nov 23 19:08:07 PST 2015


Oracle Linux Security Advisory ELSA-2015-2360

http://linux.oracle.com/errata/ELSA-2015-2360.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
cups-filters-1.0.35-21.el7.x86_64.rpm
cups-filters-devel-1.0.35-21.el7.i686.rpm
cups-filters-devel-1.0.35-21.el7.x86_64.rpm
cups-filters-libs-1.0.35-21.el7.i686.rpm
cups-filters-libs-1.0.35-21.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/cups-filters-1.0.35-21.el7.src.rpm



Description of changes:

[1.0.35-21]
- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
   CVE-2015-3258, CVE-2015-3279).

[1.0.35-20]
- Improvements to cups-browsed efficiency patch (bug #1191691).

[1.0.35-18]
- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).

[1.0.35-17]
- Build against newer poppler (bug #1217552).

[1.0.35-16]
- Applied upstream patch to fix BrowseAllow parsing issue
   (CVE-2014-4338, bug #1091568).
- Applied upstream patch for cups-browsed DoS via
   process_browse_data() out-of-bounds read (CVE-2014-4337,
   bug #1111510).





More information about the El-errata mailing list