Nom du paquet
cups
Date
2012-12-12
Advisory ID
MDVSA-2012:179
Affected versions
MES5 i586 , 2011 i586 , MES5 x86_64 , 2011 x86_64

Problem description

A vulnerability was discovered and corrected in cups:

CUPS 1.4.4, when running in certain Linux distributions such as
Debian GNU/Linux, stores the web interface administrator key in
/var/run/cups/certs/0 using certain permissions, which allows local
users in the lpadmin group to read or write arbitrary files as root
by leveraging the web interface (CVE-2012-5519).

The updated packages have been patched to correct this issue.

Updated packages

MES5 i586

 7a7947b4348b46d88771c86d71bf93a8  mes5/i586/cups-1.3.10-0.6mdvmes5.2.i586.rpm
 6be2cef2bb36f325fd2f39c382c691b5  mes5/i586/cups-common-1.3.10-0.6mdvmes5.2.i586.rpm
 7797b6be2eda38cbe9b02aafdcf4382d  mes5/i586/cups-serial-1.3.10-0.6mdvmes5.2.i586.rpm
 341ec5bea5633ff702737e0bc41e866a  mes5/i586/libcups2-1.3.10-0.6mdvmes5.2.i586.rpm
 73c5dedc648f96b4cc596aae5a91d888  mes5/i586/libcups2-devel-1.3.10-0.6mdvmes5.2.i586.rpm
 f4f93fb5602887b9d89d6f9824170d96  mes5/i586/php-cups-1.3.10-0.6mdvmes5.2.i586.rpm 
 25d5330e8744ddd498da35eb63d9c423  mes5/SRPMS/cups-1.3.10-0.6mdvmes5.2.src.rpm

2011 i586

 621faa1bcabbfe6c820f34d323b15ed6  2011/i586/cups-1.4.8-2.2-mdv2011.0.i586.rpm
 67c994f6deab1ec43abfc03bc469fde3  2011/i586/cups-common-1.4.8-2.2-mdv2011.0.i586.rpm
 0eb1e071e924b8fbcba7782c861d0faa  2011/i586/cups-serial-1.4.8-2.2-mdv2011.0.i586.rpm
 d82bafdbffa2843e8c87f44ff38f09bd  2011/i586/libcups2-1.4.8-2.2-mdv2011.0.i586.rpm
 b91e9da16dc9d1dbc69ad8a32c591609  2011/i586/libcups2-devel-1.4.8-2.2-mdv2011.0.i586.rpm
 76d0886860017257283b49f07948c8a2  2011/i586/php-cups-1.4.8-2.2-mdv2011.0.i586.rpm 
 15055e0d0e17ea5189cf29590e535c95  2011/SRPMS/cups-1.4.8-2.2.src.rpm

MES5 x86_64

 4245234df94e9a8b3b2b5cea86c84b9f  mes5/x86_64/cups-1.3.10-0.6mdvmes5.2.x86_64.rpm
 ba51ee8a0d66e4241da0728aaabd9ec2  mes5/x86_64/cups-common-1.3.10-0.6mdvmes5.2.x86_64.rpm
 5e0b48292098166e884cd4e39b68211e  mes5/x86_64/cups-serial-1.3.10-0.6mdvmes5.2.x86_64.rpm
 b6259d9d194e3f2944ccb691d331109e  mes5/x86_64/lib64cups2-1.3.10-0.6mdvmes5.2.x86_64.rpm
 9a631b030200ffad1f6765d07b63faad  mes5/x86_64/lib64cups2-devel-1.3.10-0.6mdvmes5.2.x86_64.rpm
 b575b13ff39b05c14922702bec3acfcc  mes5/x86_64/php-cups-1.3.10-0.6mdvmes5.2.x86_64.rpm 
 25d5330e8744ddd498da35eb63d9c423  mes5/SRPMS/cups-1.3.10-0.6mdvmes5.2.src.rpm

2011 x86_64

 63a3439642483ba8b58964b050440eb7  2011/x86_64/cups-1.4.8-2.2-mdv2011.0.x86_64.rpm
 667e8c1b429aa470a25cce5bcaa58a81  2011/x86_64/cups-common-1.4.8-2.2-mdv2011.0.x86_64.rpm
 2acfd14c74298e32bca2c2d63f50078b  2011/x86_64/cups-serial-1.4.8-2.2-mdv2011.0.x86_64.rpm
 124d5cba345b9f712b123a9e426629a2  2011/x86_64/lib64cups2-1.4.8-2.2-mdv2011.0.x86_64.rpm
 4c427f6d8051690096192651701d63cc  2011/x86_64/lib64cups2-devel-1.4.8-2.2-mdv2011.0.x86_64.rpm
 cf9ef4e6d1e4c5902915e51ab6443778  2011/x86_64/php-cups-1.4.8-2.2-mdv2011.0.x86_64.rpm 
 15055e0d0e17ea5189cf29590e535c95  2011/SRPMS/cups-1.4.8-2.2.src.rpm

References