cups-1.2.4-11.18.2.1AXS3

エラータID: AXSA:2008-510:05

リリース日: 
2008/12/04 Thursday - 15:42
題名: 
cups-1.2.4-11.18.2.1AXS3
影響のあるチャネル: 
Asianux Server 3 for ppc
Asianux Server 3 for ia64
Severity: 
High
Description: 

The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX(R) operating systems.
This patch fixes the following bugs:
CVE-2008-3639
Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.
CVE-2008-3640
Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
CVE-2008-3641
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

解決策: 

Update packages.

CVE: 
CVE-2008-3639
Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.
CVE-2008-3640
Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
CVE-2008-3641
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.




追加情報: 

From Asianux Server 3 SP1 updated packages.

ダウンロード: 

Asianux Server 3 for x86
  1. cups-1.2.4-11.18.2.1AXS3.i386.rpm
    MD5: 2d191d7cf0109496ca6cbb0a9d79678e
    SHA-256: 7be7d14f39e40376c6da758947dc8d4d658371a763f05f92134fdefac4efb86b
    Size: 3.10 MB
  2. cups-devel-1.2.4-11.18.2.1AXS3.i386.rpm
    MD5: 26da2e22d9fef8e4959b2bc88b3ae89d
    SHA-256: 80fb2da6e1723d8dca1092e5c3e24acc15409abb3c94b23641a9a7912b059716
    Size: 68.80 kB
  3. cups-libs-1.2.4-11.18.2.1AXS3.i386.rpm
    MD5: c58ea6ed3cfa4f5dfc2d9b7de81f25a6
    SHA-256: 3067f7c3988b40578771076bfd540575fdf6e3049e21e56eede88f9549002625
    Size: 181.69 kB

Asianux Server 3 for x86_64
  1. cups-1.2.4-11.18.2.1AXS3.x86_64.rpm
    MD5: 5f41973d8ceed323abe0c8ff080b07a7
    SHA-256: af10498c5931c6c5b10290736cdef386d35750f9a0868df514f87008bfd4bfd2
    Size: 3.14 MB
  2. cups-devel-1.2.4-11.18.2.1AXS3.x86_64.rpm
    MD5: ad70c4287843e7ed63cf2988de0fc896
    SHA-256: a29d819988604d8992d91fd12720e7f01d7286b0cf04f167f5d52475149d0d7b
    Size: 68.69 kB
  3. cups-libs-1.2.4-11.18.2.1AXS3.x86_64.rpm
    MD5: 54ed720d0c701aeb21e3df0527270c81
    SHA-256: 0b9d8eb1892e95ec77afafd1bca71d87190041b985653d3cd4e5bdc356e763ce
    Size: 177.44 kB