=========================================================================Ubuntu Security Notice USN-2532-1
March 16, 2015

cups-filters vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.10
- Ubuntu 14.04 LTS

Summary:

cups-filters could be made to run programs if it received specially crafted
network traffic.

Software Description:
- cups-filters: OpenPrinting CUPS Filters

Details:

It was discovered that cups-browsed incorrectly filtered remote printer
names and strings. A remote attacker could use this issue to possibly
execute arbitrary commands.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  cups-browsed                    1.0.61-0ubuntu2.1

Ubuntu 14.04 LTS:
  cups-browsed                    1.0.52-0ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-2532-1
  CVE-2015-2265

Package Information:
  https://launchpad.net/ubuntu/+source/cups-filters/1.0.61-0ubuntu2.1
  https://launchpad.net/ubuntu/+source/cups-filters/1.0.52-0ubuntu1.4


Ubuntu 2532-1: cups-filters vulnerability

March 16, 2015
cups-filters could be made to run programs if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 14.10: cups-browsed 1.0.61-0ubuntu2.1 Ubuntu 14.04 LTS: cups-browsed 1.0.52-0ubuntu1.4 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2532-1

CVE-2015-2265

Severity
March 16, 2015

Package Information

https://launchpad.net/ubuntu/+source/cups-filters/1.0.61-0ubuntu2.1 https://launchpad.net/ubuntu/+source/cups-filters/1.0.52-0ubuntu1.4

Related News