hplip-3.12.4-4.AXS4.1
エラータID: AXSA:2013-628:02
Release date:
Monday, September 23, 2013 - 19:00
Subject:
hplip-3.12.4-4.AXS4.1
Affected Channels:
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Asianux Server 4 for ppc
Severity:
High
Description:
The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.
Security issues fixed with this release:
• CVE-2013-4325
No description available at the time of writing, please refer to the CVE link below.
Solution:
Update packages.
CVEs:
CVE-2013-4325
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Additional Info:
N/A
Download:
SRPMS
- hplip-3.12.4-4.AXS4.1.src.rpm
MD5: d5a8ebb247cc76159eb843fbc73b6d1d
SHA-256: 65c72fb4c5ed036372f4e9dca021f8d56d9e3328a5725826499a88cfc7877de0
Size: 19.70 MB
Asianux Server 4 for x86
- hpijs-3.12.4-4.AXS4.1.i686.rpm
MD5: cf936a79b3601d690c60b0b3d64435b0
SHA-256: 065bb04128f58a49cd3b584de4a12056ac4a4e6e0c7fc10b5ef3512e04abacba
Size: 4.83 MB - hplip-3.12.4-4.AXS4.1.i686.rpm
MD5: a55e82183cc900aa41eed3006f19b06f
SHA-256: ae861ef829edb39d1509aef5e51f3cb818324b9072f77ba551c6e9a9468315a7
Size: 6.00 MB - hplip-common-3.12.4-4.AXS4.1.i686.rpm
MD5: 17cf3dd7eae5d9daec528e957f73f69a
SHA-256: 348451de8aa97838e42bcae25b035f339e0c37b0c1f994ebdc460e3d201812ca
Size: 73.60 kB - hplip-gui-3.12.4-4.AXS4.1.i686.rpm
MD5: 1c7aa8eabb0edcb3ff13b62db8afc1d4
SHA-256: 0f28c5e9267041f21306b951bd4225b8f2d5d9c323da1587fb01990e5baf1262
Size: 1.45 MB - hplip-libs-3.12.4-4.AXS4.1.i686.rpm
MD5: 307cf605ff5227e1d98a000edb6de64b
SHA-256: 53a8db439e6c8d14900b056200bc3969f804697427e062582ed0a23df55e61cb
Size: 141.13 kB - libsane-hpaio-3.12.4-4.AXS4.1.i686.rpm
MD5: 2637dd80be176f777fc136b4c7c1522d
SHA-256: ad25afaf7392199e83578b5f60accce5dbd256724cfd6e843417cf7078fe18b2
Size: 86.12 kB
Asianux Server 4 for x86_64
- hpijs-3.12.4-4.AXS4.1.x86_64.rpm
MD5: 48bdcc010a801eebc40d744e9859b771
SHA-256: ba2d2521047898964221fa730e3024e4d68e8eb55ea27653b397eeadfbcc0b7f
Size: 4.82 MB - hplip-3.12.4-4.AXS4.1.x86_64.rpm
MD5: cfe77168f65f553742de11487ce689dc
SHA-256: c1a4fb83630dfb3fb78f60651c380fb8e3fe8d019f1bf34bfbbbf7edd13855f9
Size: 6.00 MB - hplip-common-3.12.4-4.AXS4.1.x86_64.rpm
MD5: ca7e8c4c6d460c0a71abf15c8eeaa9ff
SHA-256: 23086bc6b1bc8d1bc8fe8463b8dacb8e3421f551b1ffea0bdc5a9ac5c5e7b1b2
Size: 73.15 kB - hplip-gui-3.12.4-4.AXS4.1.x86_64.rpm
MD5: 81ef0b0ed4ee9828c52a89aac2f2b721
SHA-256: 0c5fe7d1dcb33d060e409764018d16029573313fb57ac91bfa0c99e5faa2d512
Size: 1.45 MB - hplip-libs-3.12.4-4.AXS4.1.x86_64.rpm
MD5: e21cea923a8da8c433abcdad433f5c66
SHA-256: 3535b021ce380dde15d008f48e5aed86624d7dcb382961a8a050886512715f89
Size: 140.48 kB - libsane-hpaio-3.12.4-4.AXS4.1.x86_64.rpm
MD5: 3f05684df377ec12900a22e8ef9f4955
SHA-256: d8725d73816bbed211b73b2ad77c8173c1fb4c3353aa1911a47eea22353103f3
Size: 84.24 kB - hplip-libs-3.12.4-4.AXS4.1.i686.rpm
MD5: 307cf605ff5227e1d98a000edb6de64b
SHA-256: 53a8db439e6c8d14900b056200bc3969f804697427e062582ed0a23df55e61cb
Size: 141.13 kB