Уведомление безопасности SUSE-SA:2008:002

Критичная (9.3)

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

SUSE

cups (any) cups-client (any) cups-devel (any) cups-libs (any) cups-libs-32bit (any)

Уведомление безопасности об уязвимостях SUSE LINUX 10.1, openSUSE 10.2, openSUSE 10.3, SUSE SLES 9, Novell Linux Desktop 9, Open Enterprise Server, Novell Linux POS 9, SUSE Linux Enterprise Desktop 10 SP1, SUSE Linux Enterprise Server 10 SP1

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.2:
i586:
cups-libs - 1.2.7-12.9
cups-client - 1.2.7-12.9
cups - 1.2.7-12.9
cups-devel - 1.2.7-12.9
openSUSE 10.3:
i586:
cups - 1.2.12-22.6
cups-libs - 1.2.12-22.6
cups-devel - 1.2.12-22.6
cups-client - 1.2.12-22.6
openSUSE 10.1:
i586:
cups-devel - 1.1.23-40.35
cups-client - 1.1.23-40.35
cups - 1.1.23-40.35
cups-libs - 1.1.23-40.35
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise Desktop 10 SP1:
x86_64:
cups - 1.1.23-40.35
cups-client - 1.1.23-40.35
cups-devel - 1.1.23-40.35
cups-libs - 1.1.23-40.35
cups-libs-32bit - 1.1.23-40.35
SUSE Linux Enterprise Server 9:
s390x:
cups - 1.1.20-108.46
cups-client - 1.1.20-108.46
cups-devel - 1.1.20-108.46
cups-libs - 1.1.20-108.46
cups-libs-32bit - 9-200712111650
SUSE Linux Enterprise Server 10 SP1:
s390x:
cups - 1.1.23-40.35
cups-client - 1.1.23-40.35
cups-devel - 1.1.23-40.35
cups-libs - 1.1.23-40.35
cups-libs-32bit - 1.1.23-40.35
Novell Open Enterprise Server (OES), Novell Linux Desktop 9, SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
cups - 1.1.20-108.46
cups-client - 1.1.20-108.46
cups-devel - 1.1.20-108.46
cups-libs - 1.1.20-108.46
cups-libs-32bit - 9-200712111651

https://www.suse.com/support/security/advisories/suse_security_announce_63.html

Источник: CVE
Наименование: CVE-2007-5849
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5849

Источник: CVE
Наименование: CVE-2007-5848
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5848