Bug 38790 - cups-filters: Security issue (4.0)
cups-filters: Security issue (4.0)
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 4.0
Other Linux
: P5 normal (vote)
: UCS 4.0-3-errata
Assigned To: Daniel Tröder
Felix Botner
Depends on:
  Show dependency treegraph
Reported: 2015-06-29 18:35 CEST by Janek Walkenhorst
Modified: 2015-09-09 12:51 CEST (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Security
Max CVSS v3 score:
requate: Patch_Available+


Note You need to log in before you can comment on or make changes to this bug.
Description Janek Walkenhorst univentionstaff 2015-06-29 18:35:45 CEST
CVE-2015-3258 cups-filters: texttopdf heap-based buffer overflow
Comment 1 Arvid Requate univentionstaff 2015-07-08 11:20:46 CEST
CVE-2015-3279: integer overflow leading to a heap-based buffer overflow

Fixed for both issues available upstream in Debian package v. 1.0.18-2.1+deb7u2
Comment 2 Daniel Tröder univentionstaff 2015-09-02 13:10:39 CEST
* cups-filters 1.0.18-2.1+deb7u2 was imported and build to scope errata4.0-3.
* YAML (r63405): 2015-09-02-cups-filters.yaml
Comment 3 Felix Botner univentionstaff 2015-09-07 11:47:33 CEST
OK - cups-filters 1.0.18-2.1
OK - ucs-test-udm-printers
Comment 4 Janek Walkenhorst univentionstaff 2015-09-09 12:51:48 CEST