Описание
Security update for cups-filters
This update fixes the following security issue:
CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters (bsc#957531).
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
cups-filters-1.0.58-12.1
cups-filters-cups-browsed-1.0.58-12.1
cups-filters-devel-1.0.58-12.1
cups-filters-foomatic-rip-1.0.58-12.1
cups-filters-ghostscript-1.0.58-12.1
Ссылки
- E-Mail link for openSUSE-SU-2016:0179-1
- SUSE Security Ratings
Описание
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
Затронутые продукты
openSUSE Leap 42.1:cups-filters-1.0.58-12.1
openSUSE Leap 42.1:cups-filters-cups-browsed-1.0.58-12.1
openSUSE Leap 42.1:cups-filters-devel-1.0.58-12.1
openSUSE Leap 42.1:cups-filters-foomatic-rip-1.0.58-12.1
Ссылки
- CVE-2015-8327
- SUSE Bug 1027197
- SUSE Bug 957531