foomatic-3.0.2-47.3AX

エラータID: AXSA:2011-294:01

Release date: 
Wednesday, September 7, 2011 - 15:52
Subject: 
foomatic-3.0.2-47.3AX
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. It contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database. There is also the possibility to read the PJL options out of PJL-capable laser printers and take them into account at the driver description file generation.
There are spooler-independent command line interfaces to manipulate queues (foomatic-configure) and to print files/manipulate jobs (foomatic printjob).
The site http://www.linuxprinting.org/ is based on this database.
Security issues fixed with this release:
CVE-2011-2697
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.

Solution: 

Update packages.

CVEs: 
CVE-2011-2697
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.


Additional Info: 

N/A

Download: 

Asianux Server 3 for x86
  1. foomatic-3.0.2-47.3AX.i386.rpm
    MD5: 571c876e9c266fc98a134fbcc4530ef4
    SHA-256: c3affcc49a66b00f99488b538bc61c4c359451a0390e87df00daa9aa1396d8b2
    Size: 15.41 MB

Asianux Server 3 for x86_64
  1. foomatic-3.0.2-47.3AX.x86_64.rpm
    MD5: 1a8fb9709eca1f65852c6248f8b0244f
    SHA-256: 9d8471aacaefd6b3ab89eb1a85ae25ea1b61de048bc8f526937866cf08da474b
    Size: 15.41 MB