SCIENTIFIC-LINUX-ERRATA Archives

March 2016

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Moderate: foomatic on SL6.x i386/x86_64
From:
Pat Riehecky <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Wed, 23 Mar 2016 16:29:52 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (30 lines) 
Synopsis:          Moderate: foomatic security update
Advisory ID:       SLSA-2016:0491-1
Issue Date:        2016-03-23
CVE Numbers:       CVE-2010-5325
                   CVE-2015-8327
                   CVE-2015-8560
--

It was discovered that the unhtmlify() function of foomatic-rip did not
correctly calculate buffer sizes, possibly leading to a heap-based memory
corruption. A malicious attacker could exploit this flaw to cause
foomatic-rip to crash or, possibly, execute arbitrary code.
(CVE-2010-5325)

It was discovered that foomatic-rip failed to remove all shell special
characters from inputs used to construct command lines for external
programs run by the filter. An attacker could possibly use this flaw to
execute arbitrary commands. (CVE-2015-8327, CVE-2015-8560)
--

SL6
  x86_64
    foomatic-4.0.4-5.el6_7.x86_64.rpm
    foomatic-debuginfo-4.0.4-5.el6_7.x86_64.rpm
  i386
    foomatic-4.0.4-5.el6_7.i686.rpm
    foomatic-debuginfo-4.0.4-5.el6_7.i686.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2