hplip-3.12.4-4.AXS4.1
エラータID: AXSA:2013-628:02
リリース日:
2013/09/23 Monday - 19:00
題名:
hplip-3.12.4-4.AXS4.1
影響のあるチャネル:
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Asianux Server 4 for ppc
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- 現時点では CVE-2013-4325 の情報が公開されておりません。
CVE の情報が公開され次第情報をアップデートいたします。
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2013-4325
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
追加情報:
N/A
ダウンロード:
SRPMS
- hplip-3.12.4-4.AXS4.1.src.rpm
MD5: d5a8ebb247cc76159eb843fbc73b6d1d
SHA-256: 65c72fb4c5ed036372f4e9dca021f8d56d9e3328a5725826499a88cfc7877de0
Size: 19.70 MB
Asianux Server 4 for x86
- hpijs-3.12.4-4.AXS4.1.i686.rpm
MD5: cf936a79b3601d690c60b0b3d64435b0
SHA-256: 065bb04128f58a49cd3b584de4a12056ac4a4e6e0c7fc10b5ef3512e04abacba
Size: 4.83 MB - hplip-3.12.4-4.AXS4.1.i686.rpm
MD5: a55e82183cc900aa41eed3006f19b06f
SHA-256: ae861ef829edb39d1509aef5e51f3cb818324b9072f77ba551c6e9a9468315a7
Size: 6.00 MB - hplip-common-3.12.4-4.AXS4.1.i686.rpm
MD5: 17cf3dd7eae5d9daec528e957f73f69a
SHA-256: 348451de8aa97838e42bcae25b035f339e0c37b0c1f994ebdc460e3d201812ca
Size: 73.60 kB - hplip-gui-3.12.4-4.AXS4.1.i686.rpm
MD5: 1c7aa8eabb0edcb3ff13b62db8afc1d4
SHA-256: 0f28c5e9267041f21306b951bd4225b8f2d5d9c323da1587fb01990e5baf1262
Size: 1.45 MB - hplip-libs-3.12.4-4.AXS4.1.i686.rpm
MD5: 307cf605ff5227e1d98a000edb6de64b
SHA-256: 53a8db439e6c8d14900b056200bc3969f804697427e062582ed0a23df55e61cb
Size: 141.13 kB - libsane-hpaio-3.12.4-4.AXS4.1.i686.rpm
MD5: 2637dd80be176f777fc136b4c7c1522d
SHA-256: ad25afaf7392199e83578b5f60accce5dbd256724cfd6e843417cf7078fe18b2
Size: 86.12 kB
Asianux Server 4 for x86_64
- hpijs-3.12.4-4.AXS4.1.x86_64.rpm
MD5: 48bdcc010a801eebc40d744e9859b771
SHA-256: ba2d2521047898964221fa730e3024e4d68e8eb55ea27653b397eeadfbcc0b7f
Size: 4.82 MB - hplip-3.12.4-4.AXS4.1.x86_64.rpm
MD5: cfe77168f65f553742de11487ce689dc
SHA-256: c1a4fb83630dfb3fb78f60651c380fb8e3fe8d019f1bf34bfbbbf7edd13855f9
Size: 6.00 MB - hplip-common-3.12.4-4.AXS4.1.x86_64.rpm
MD5: ca7e8c4c6d460c0a71abf15c8eeaa9ff
SHA-256: 23086bc6b1bc8d1bc8fe8463b8dacb8e3421f551b1ffea0bdc5a9ac5c5e7b1b2
Size: 73.15 kB - hplip-gui-3.12.4-4.AXS4.1.x86_64.rpm
MD5: 81ef0b0ed4ee9828c52a89aac2f2b721
SHA-256: 0c5fe7d1dcb33d060e409764018d16029573313fb57ac91bfa0c99e5faa2d512
Size: 1.45 MB - hplip-libs-3.12.4-4.AXS4.1.x86_64.rpm
MD5: e21cea923a8da8c433abcdad433f5c66
SHA-256: 3535b021ce380dde15d008f48e5aed86624d7dcb382961a8a050886512715f89
Size: 140.48 kB - libsane-hpaio-3.12.4-4.AXS4.1.x86_64.rpm
MD5: 3f05684df377ec12900a22e8ef9f4955
SHA-256: d8725d73816bbed211b73b2ad77c8173c1fb4c3353aa1911a47eea22353103f3
Size: 84.24 kB - hplip-libs-3.12.4-4.AXS4.1.i686.rpm
MD5: 307cf605ff5227e1d98a000edb6de64b
SHA-256: 53a8db439e6c8d14900b056200bc3969f804697427e062582ed0a23df55e61cb
Size: 141.13 kB