Skip to navigation

Security Advisory cups security update

Advisory: RHSA-2005:772-8
Type: Security Advisory
Severity: Moderate
Issued on: 2005-09-27
Last updated on: 2005-09-27
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
CVEs (cve.mitre.org): CVE-2005-2874

Details

Updated CUPS packages that fix a security issue are now available for Red
Hat Enterprise Linux.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

A bug was found in the way CUPS processes malformed HTTP requests. It is
possible for a remote user capable of connecting to the CUPS daemon to
issue a malformed HTTP GET request that causes CUPS to enter an
infinite loop. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-2874 to this issue.

Two small bugs have also been fixed in this update. A signal handling
problem has been fixed that could occasionally cause the scheduler to stop
when told to reload. A problem with tracking open file descriptors under
certain specific circumstances has also been fixed.

All users of CUPS should upgrade to these erratum packages, which contain a
patch to correct this issue.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Updated packages

Red Hat Desktop (v. 4)

SRPMS:
cups-1.1.22-0.rc1.9.8.src.rpm
File outdated by:  RHSA-2010:0755
    MD5: 3d3b43d382f9bc219c019e288a14a1ac
 
IA-32:
cups-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 652b9075cea217d7e745c5f6cec0a1d9
cups-devel-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 7d646622a93e6007e11b255397c26731
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
 
x86_64:
cups-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 0b7bb29ad9fa8cc9ebda7e137ecb907f
cups-devel-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: e31bd71eed98ea96c1edf43cbd2a4a37
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: c85420148ee0e3f5795b7560104bd181
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
cups-1.1.22-0.rc1.9.8.src.rpm
File outdated by:  RHSA-2010:0755
    MD5: 3d3b43d382f9bc219c019e288a14a1ac
 
IA-32:
cups-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 652b9075cea217d7e745c5f6cec0a1d9
cups-devel-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 7d646622a93e6007e11b255397c26731
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
 
IA-64:
cups-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 09c6943b6f4258e4f079e876a45bed89
cups-devel-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: b2e6ef0a1cd30ba9222efc817bfc6fe6
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 9f972e3d14de63a514b29911c076a105
 
PPC:
cups-1.1.22-0.rc1.9.8.ppc.rpm
File outdated by:  RHSA-2010:0755
    MD5: bccc62127d4c1e33142834b51ac6e7c6
cups-devel-1.1.22-0.rc1.9.8.ppc.rpm
File outdated by:  RHSA-2010:0755
    MD5: 1079373b5ea215089fccf36ba70d0433
cups-libs-1.1.22-0.rc1.9.8.ppc.rpm
File outdated by:  RHSA-2010:0755
    MD5: f24f8fd0f1fa276473e35c671e512ce5
cups-libs-1.1.22-0.rc1.9.8.ppc64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 41fa84f19c29ee41d63595ea52e7b3ce
 
s390:
cups-1.1.22-0.rc1.9.8.s390.rpm
File outdated by:  RHSA-2010:0755
    MD5: cecdea0d446b77dbc11d5c5e43945d0c
cups-devel-1.1.22-0.rc1.9.8.s390.rpm
File outdated by:  RHSA-2010:0755
    MD5: 5e6980d33d608a40648492834305ded3
cups-libs-1.1.22-0.rc1.9.8.s390.rpm
File outdated by:  RHSA-2010:0755
    MD5: aa0f6a45ca2189d303f7068c6355b852
 
s390x:
cups-1.1.22-0.rc1.9.8.s390x.rpm
File outdated by:  RHSA-2010:0755
    MD5: f777882e9778218c1b9871dfa82d978e
cups-devel-1.1.22-0.rc1.9.8.s390x.rpm
File outdated by:  RHSA-2010:0755
    MD5: 0e49a4f5ae14f11a9cffc08740bbcf5d
cups-libs-1.1.22-0.rc1.9.8.s390.rpm
File outdated by:  RHSA-2010:0755
    MD5: aa0f6a45ca2189d303f7068c6355b852
cups-libs-1.1.22-0.rc1.9.8.s390x.rpm
File outdated by:  RHSA-2010:0755
    MD5: f33f28d85e1578716669a57416dfaf32
 
x86_64:
cups-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 0b7bb29ad9fa8cc9ebda7e137ecb907f
cups-devel-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: e31bd71eed98ea96c1edf43cbd2a4a37
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: c85420148ee0e3f5795b7560104bd181
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
cups-1.1.22-0.rc1.9.8.src.rpm
File outdated by:  RHSA-2010:0755
    MD5: 3d3b43d382f9bc219c019e288a14a1ac
 
IA-32:
cups-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 652b9075cea217d7e745c5f6cec0a1d9
cups-devel-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 7d646622a93e6007e11b255397c26731
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
 
IA-64:
cups-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 09c6943b6f4258e4f079e876a45bed89
cups-devel-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: b2e6ef0a1cd30ba9222efc817bfc6fe6
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 9f972e3d14de63a514b29911c076a105
 
x86_64:
cups-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 0b7bb29ad9fa8cc9ebda7e137ecb907f
cups-devel-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: e31bd71eed98ea96c1edf43cbd2a4a37
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: c85420148ee0e3f5795b7560104bd181
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
cups-1.1.22-0.rc1.9.8.src.rpm
File outdated by:  RHSA-2010:0755
    MD5: 3d3b43d382f9bc219c019e288a14a1ac
 
IA-32:
cups-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 652b9075cea217d7e745c5f6cec0a1d9
cups-devel-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 7d646622a93e6007e11b255397c26731
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
 
IA-64:
cups-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 09c6943b6f4258e4f079e876a45bed89
cups-devel-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: b2e6ef0a1cd30ba9222efc817bfc6fe6
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.ia64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 9f972e3d14de63a514b29911c076a105
 
x86_64:
cups-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: 0b7bb29ad9fa8cc9ebda7e137ecb907f
cups-devel-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: e31bd71eed98ea96c1edf43cbd2a4a37
cups-libs-1.1.22-0.rc1.9.8.i386.rpm
File outdated by:  RHSA-2010:0755
    MD5: 03eb88625ad7a9582fd65e1fdf85545c
cups-libs-1.1.22-0.rc1.9.8.x86_64.rpm
File outdated by:  RHSA-2010:0755
    MD5: c85420148ee0e3f5795b7560104bd181
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

164641 - [PATCH] cupsd segfault when SIGCHLD received
164642 - Cupsd hangs on reading pipe with recycled file descriptor.
168072 - CAN-2005-2874 Malformed HTTP Request URL denial of service


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/