cups security update

Advisory:	RHSA-2004:449-17
Type:	Security Advisory
Severity:	Moderate
Issued on:	2004-09-15
Last updated on:	2004-09-15
Affected Products:	Red Hat Desktop (v. 3) Red Hat Enterprise Linux AS (v. 3) Red Hat Enterprise Linux ES (v. 3) Red Hat Enterprise Linux WS (v. 3)
CVEs (cve.mitre.org):	CVE-2004-0558

Details

Updated cups packages that fix a denial of service vulnerability are now
available.

The Common UNIX Printing System (CUPS) is a print spooler.

Alvaro Martinez Echevarria reported a bug in the CUPS Internet Printing
Protocol (IPP) implementation in versions of CUPS prior to 1.1.21. An
attacker could send a carefully crafted UDP packet to the IPP port which
could cause CUPS to stop listening to the port and result in a denial of
service. In order to exploit this bug, an attacker would need to have the
ability to send a UDP packet to the IPP port (by default 631). The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-0558 to this issue.

All users of cups should upgrade to these updated packages, which contain a
backported patch as well as a fix for a non-exploitable off-by-one bug.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Updated packages

Red Hat Desktop (v. 3)

SRPMS:
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`

IA-32:
cups-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 419ce850064ec7a68a37e244cac682b2`
cups-devel-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 414bce4e73e9228729077adf7930f0ae`
cups-libs-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: b2e3b1632f6f334bf6ade32a6c4fc7b3`

x86_64:
cups-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: b11c94a17939d262b76721fee9714c50`
cups-devel-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 48b22c34e077212a6c1721bcadd01ca4`
cups-libs-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 07ed1e9a684182ffbaa63144cd230e1a`

Red Hat Enterprise Linux AS (v. 3)

SRPMS:
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`

IA-32:
cups-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 419ce850064ec7a68a37e244cac682b2`
cups-devel-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 414bce4e73e9228729077adf7930f0ae`
cups-libs-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: b2e3b1632f6f334bf6ade32a6c4fc7b3`

IA-64:
cups-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: 6e99a473c522a8c0a55dd73ee2e65b3a`
cups-devel-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: a552ed6d24c3976fcd9bba81d5752310`
cups-libs-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: ae45026d23525d73f25a047a118164fd`

PPC:
cups-1.1.17-13.3.13.ppc.rpm File outdated by: RHSA-2010:0754	`MD5: d007ad080ce2d4016db742799cb7e7a5`
ftp://updates.redhat.com/rhn/repository/NULL/cups/1.1.17-13.3.13/ppc64/cups-1.1.17-13.3.13.ppc64.rpm Missing file	`MD5: 8550fc9d8d1cf53da14707ecb5188a75`
cups-devel-1.1.17-13.3.13.ppc.rpm File outdated by: RHSA-2010:0754	`MD5: e9ff080a397800ca9793342a4aee8046`
ftp://updates.redhat.com/rhn/repository/NULL/cups-devel/1.1.17-13.3.13/ppc64/cups-devel-1.1.17-13.3.13.ppc64.rpm Missing file	`MD5: d664204e2dd7c589d9f4dd10b8f32416`
cups-libs-1.1.17-13.3.13.ppc.rpm File outdated by: RHSA-2010:0754	`MD5: 99a113852d6089d14ea6fd679ba7a1a7`
cups-libs-1.1.17-13.3.13.ppc64.rpm File outdated by: RHSA-2010:0754	`MD5: 72cc935233689e4c04737c68e36d3b29`

s390:
cups-1.1.17-13.3.13.s390.rpm File outdated by: RHSA-2010:0754	`MD5: ae6fc52460a480b8ede3826ce9cd19e2`
cups-devel-1.1.17-13.3.13.s390.rpm File outdated by: RHSA-2010:0754	`MD5: 15ce65330b66ee7f66512ef0d549ca94`
cups-libs-1.1.17-13.3.13.s390.rpm File outdated by: RHSA-2010:0754	`MD5: d1f0c816f04bb0960586261e34ae8098`

s390x:
cups-1.1.17-13.3.13.s390x.rpm File outdated by: RHSA-2010:0754	`MD5: 2372e49ffedcb132058e7b4c9452a741`
cups-devel-1.1.17-13.3.13.s390x.rpm File outdated by: RHSA-2010:0754	`MD5: d435369ed54389c1c22151ee18f0e9a7`
cups-libs-1.1.17-13.3.13.s390x.rpm File outdated by: RHSA-2010:0754	`MD5: 32f55417cc798fbb612921d192c29436`

x86_64:
cups-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: b11c94a17939d262b76721fee9714c50`
cups-devel-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 48b22c34e077212a6c1721bcadd01ca4`
cups-libs-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 07ed1e9a684182ffbaa63144cd230e1a`

Red Hat Enterprise Linux ES (v. 3)

SRPMS:
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`

IA-32:
cups-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 419ce850064ec7a68a37e244cac682b2`
cups-devel-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 414bce4e73e9228729077adf7930f0ae`
cups-libs-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: b2e3b1632f6f334bf6ade32a6c4fc7b3`

IA-64:
cups-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: 6e99a473c522a8c0a55dd73ee2e65b3a`
cups-devel-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: a552ed6d24c3976fcd9bba81d5752310`
cups-libs-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: ae45026d23525d73f25a047a118164fd`

x86_64:
cups-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: b11c94a17939d262b76721fee9714c50`
cups-devel-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 48b22c34e077212a6c1721bcadd01ca4`
cups-libs-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 07ed1e9a684182ffbaa63144cd230e1a`

Red Hat Enterprise Linux WS (v. 3)

SRPMS:
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`
cups-1.1.17-13.3.13.src.rpm File outdated by: RHSA-2010:0754	`MD5: 60dc089f4fdb7afe47386fcdc94b0d01`

IA-32:
cups-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 419ce850064ec7a68a37e244cac682b2`
cups-devel-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: 414bce4e73e9228729077adf7930f0ae`
cups-libs-1.1.17-13.3.13.i386.rpm File outdated by: RHSA-2010:0754	`MD5: b2e3b1632f6f334bf6ade32a6c4fc7b3`

IA-64:
cups-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: 6e99a473c522a8c0a55dd73ee2e65b3a`
cups-devel-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: a552ed6d24c3976fcd9bba81d5752310`
cups-libs-1.1.17-13.3.13.ia64.rpm File outdated by: RHSA-2010:0754	`MD5: ae45026d23525d73f25a047a118164fd`

x86_64:
cups-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: b11c94a17939d262b76721fee9714c50`
cups-devel-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 48b22c34e077212a6c1721bcadd01ca4`
cups-libs-1.1.17-13.3.13.x86_64.rpm File outdated by: RHSA-2010:0754	`MD5: 07ed1e9a684182ffbaa63144cd230e1a`

References

https://www.redhat.com/security/data/cve/CVE-2004-0558.html
http://www.cups.org/str.php?L863

Keywords

DoS

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/