opensuse-su-2024:10075-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
cups-2.1.3-2.3 on GA media
Notes
Title of the patch
cups-2.1.3-2.3 on GA media
Description of the patch
These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10075
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cups-2.1.3-2.3 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10075",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10075-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2009-0163 page",
"url": "https://www.suse.com/security/cve/CVE-2009-0163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2009-2820 page",
"url": "https://www.suse.com/security/cve/CVE-2009-2820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2009-3553 page",
"url": "https://www.suse.com/security/cve/CVE-2009-3553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-0393 page",
"url": "https://www.suse.com/security/cve/CVE-2010-0393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-0540 page",
"url": "https://www.suse.com/security/cve/CVE-2010-0540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-0542 page",
"url": "https://www.suse.com/security/cve/CVE-2010-0542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-1748 page",
"url": "https://www.suse.com/security/cve/CVE-2010-1748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-2941 page",
"url": "https://www.suse.com/security/cve/CVE-2010-2941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5519 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-6094 page",
"url": "https://www.suse.com/security/cve/CVE-2012-6094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2856 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3537 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5029 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5030 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5031 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1158 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1159 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1159/"
}
],
"title": "cups-2.1.3-2.3 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10075-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cups-2.1.3-2.3.aarch64",
"product": {
"name": "cups-2.1.3-2.3.aarch64",
"product_id": "cups-2.1.3-2.3.aarch64"
}
},
{
"category": "product_version",
"name": "cups-client-2.1.3-2.3.aarch64",
"product": {
"name": "cups-client-2.1.3-2.3.aarch64",
"product_id": "cups-client-2.1.3-2.3.aarch64"
}
},
{
"category": "product_version",
"name": "cups-ddk-2.1.3-2.3.aarch64",
"product": {
"name": "cups-ddk-2.1.3-2.3.aarch64",
"product_id": "cups-ddk-2.1.3-2.3.aarch64"
}
},
{
"category": "product_version",
"name": "cups-devel-2.1.3-2.3.aarch64",
"product": {
"name": "cups-devel-2.1.3-2.3.aarch64",
"product_id": "cups-devel-2.1.3-2.3.aarch64"
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-2.1.3-2.3.aarch64",
"product": {
"name": "cups-devel-32bit-2.1.3-2.3.aarch64",
"product_id": "cups-devel-32bit-2.1.3-2.3.aarch64"
}
},
{
"category": "product_version",
"name": "cups-libs-2.1.3-2.3.aarch64",
"product": {
"name": "cups-libs-2.1.3-2.3.aarch64",
"product_id": "cups-libs-2.1.3-2.3.aarch64"
}
},
{
"category": "product_version",
"name": "cups-libs-32bit-2.1.3-2.3.aarch64",
"product": {
"name": "cups-libs-32bit-2.1.3-2.3.aarch64",
"product_id": "cups-libs-32bit-2.1.3-2.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cups-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-2.1.3-2.3.ppc64le",
"product_id": "cups-2.1.3-2.3.ppc64le"
}
},
{
"category": "product_version",
"name": "cups-client-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-client-2.1.3-2.3.ppc64le",
"product_id": "cups-client-2.1.3-2.3.ppc64le"
}
},
{
"category": "product_version",
"name": "cups-ddk-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-ddk-2.1.3-2.3.ppc64le",
"product_id": "cups-ddk-2.1.3-2.3.ppc64le"
}
},
{
"category": "product_version",
"name": "cups-devel-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-devel-2.1.3-2.3.ppc64le",
"product_id": "cups-devel-2.1.3-2.3.ppc64le"
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-devel-32bit-2.1.3-2.3.ppc64le",
"product_id": "cups-devel-32bit-2.1.3-2.3.ppc64le"
}
},
{
"category": "product_version",
"name": "cups-libs-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-libs-2.1.3-2.3.ppc64le",
"product_id": "cups-libs-2.1.3-2.3.ppc64le"
}
},
{
"category": "product_version",
"name": "cups-libs-32bit-2.1.3-2.3.ppc64le",
"product": {
"name": "cups-libs-32bit-2.1.3-2.3.ppc64le",
"product_id": "cups-libs-32bit-2.1.3-2.3.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cups-2.1.3-2.3.s390x",
"product": {
"name": "cups-2.1.3-2.3.s390x",
"product_id": "cups-2.1.3-2.3.s390x"
}
},
{
"category": "product_version",
"name": "cups-client-2.1.3-2.3.s390x",
"product": {
"name": "cups-client-2.1.3-2.3.s390x",
"product_id": "cups-client-2.1.3-2.3.s390x"
}
},
{
"category": "product_version",
"name": "cups-ddk-2.1.3-2.3.s390x",
"product": {
"name": "cups-ddk-2.1.3-2.3.s390x",
"product_id": "cups-ddk-2.1.3-2.3.s390x"
}
},
{
"category": "product_version",
"name": "cups-devel-2.1.3-2.3.s390x",
"product": {
"name": "cups-devel-2.1.3-2.3.s390x",
"product_id": "cups-devel-2.1.3-2.3.s390x"
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-2.1.3-2.3.s390x",
"product": {
"name": "cups-devel-32bit-2.1.3-2.3.s390x",
"product_id": "cups-devel-32bit-2.1.3-2.3.s390x"
}
},
{
"category": "product_version",
"name": "cups-libs-2.1.3-2.3.s390x",
"product": {
"name": "cups-libs-2.1.3-2.3.s390x",
"product_id": "cups-libs-2.1.3-2.3.s390x"
}
},
{
"category": "product_version",
"name": "cups-libs-32bit-2.1.3-2.3.s390x",
"product": {
"name": "cups-libs-32bit-2.1.3-2.3.s390x",
"product_id": "cups-libs-32bit-2.1.3-2.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cups-2.1.3-2.3.x86_64",
"product": {
"name": "cups-2.1.3-2.3.x86_64",
"product_id": "cups-2.1.3-2.3.x86_64"
}
},
{
"category": "product_version",
"name": "cups-client-2.1.3-2.3.x86_64",
"product": {
"name": "cups-client-2.1.3-2.3.x86_64",
"product_id": "cups-client-2.1.3-2.3.x86_64"
}
},
{
"category": "product_version",
"name": "cups-ddk-2.1.3-2.3.x86_64",
"product": {
"name": "cups-ddk-2.1.3-2.3.x86_64",
"product_id": "cups-ddk-2.1.3-2.3.x86_64"
}
},
{
"category": "product_version",
"name": "cups-devel-2.1.3-2.3.x86_64",
"product": {
"name": "cups-devel-2.1.3-2.3.x86_64",
"product_id": "cups-devel-2.1.3-2.3.x86_64"
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-2.1.3-2.3.x86_64",
"product": {
"name": "cups-devel-32bit-2.1.3-2.3.x86_64",
"product_id": "cups-devel-32bit-2.1.3-2.3.x86_64"
}
},
{
"category": "product_version",
"name": "cups-libs-2.1.3-2.3.x86_64",
"product": {
"name": "cups-libs-2.1.3-2.3.x86_64",
"product_id": "cups-libs-2.1.3-2.3.x86_64"
}
},
{
"category": "product_version",
"name": "cups-libs-32bit-2.1.3-2.3.x86_64",
"product": {
"name": "cups-libs-32bit-2.1.3-2.3.x86_64",
"product_id": "cups-libs-32bit-2.1.3-2.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64"
},
"product_reference": "cups-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x"
},
"product_reference": "cups-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64"
},
"product_reference": "cups-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64"
},
"product_reference": "cups-client-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-client-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x"
},
"product_reference": "cups-client-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64"
},
"product_reference": "cups-client-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64"
},
"product_reference": "cups-ddk-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-ddk-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x"
},
"product_reference": "cups-ddk-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64"
},
"product_reference": "cups-ddk-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64"
},
"product_reference": "cups-devel-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-devel-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x"
},
"product_reference": "cups-devel-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64"
},
"product_reference": "cups-devel-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64"
},
"product_reference": "cups-devel-32bit-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-devel-32bit-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x"
},
"product_reference": "cups-devel-32bit-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64"
},
"product_reference": "cups-devel-32bit-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64"
},
"product_reference": "cups-libs-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-libs-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x"
},
"product_reference": "cups-libs-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64"
},
"product_reference": "cups-libs-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-32bit-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64"
},
"product_reference": "cups-libs-32bit-2.1.3-2.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-32bit-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le"
},
"product_reference": "cups-libs-32bit-2.1.3-2.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-32bit-2.1.3-2.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x"
},
"product_reference": "cups-libs-32bit-2.1.3-2.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-libs-32bit-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
},
"product_reference": "cups-libs-32bit-2.1.3-2.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2009-0163"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2009-0163",
"url": "https://www.suse.com/security/cve/CVE-2009-0163"
},
{
"category": "external",
"summary": "SUSE Bug 485895 for CVE-2009-0163",
"url": "https://bugzilla.suse.com/485895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2009-0163"
},
{
"cve": "CVE-2009-2820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2009-2820"
}
],
"notes": [
{
"category": "general",
"text": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2009-2820",
"url": "https://www.suse.com/security/cve/CVE-2009-2820"
},
{
"category": "external",
"summary": "SUSE Bug 548317 for CVE-2009-2820",
"url": "https://bugzilla.suse.com/548317"
},
{
"category": "external",
"summary": "SUSE Bug 551563 for CVE-2009-2820",
"url": "https://bugzilla.suse.com/551563"
},
{
"category": "external",
"summary": "SUSE Bug 574336 for CVE-2009-2820",
"url": "https://bugzilla.suse.com/574336"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2009-2820"
},
{
"cve": "CVE-2009-3553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2009-3553"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2009-3553",
"url": "https://www.suse.com/security/cve/CVE-2009-3553"
},
{
"category": "external",
"summary": "SUSE Bug 554861 for CVE-2009-3553",
"url": "https://bugzilla.suse.com/554861"
},
{
"category": "external",
"summary": "SUSE Bug 574336 for CVE-2009-3553",
"url": "https://bugzilla.suse.com/574336"
},
{
"category": "external",
"summary": "SUSE Bug 578215 for CVE-2009-3553",
"url": "https://bugzilla.suse.com/578215"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2009-3553"
},
{
"cve": "CVE-2010-0393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-0393"
}
],
"notes": [
{
"category": "general",
"text": "The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-0393",
"url": "https://www.suse.com/security/cve/CVE-2010-0393"
},
{
"category": "external",
"summary": "SUSE Bug 574336 for CVE-2010-0393",
"url": "https://bugzilla.suse.com/574336"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-0393"
},
{
"cve": "CVE-2010-0540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-0540"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-0540",
"url": "https://www.suse.com/security/cve/CVE-2010-0540"
},
{
"category": "external",
"summary": "SUSE Bug 601830 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/601830"
},
{
"category": "external",
"summary": "SUSE Bug 671735 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/671735"
},
{
"category": "external",
"summary": "SUSE Bug 680210 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/680210"
},
{
"category": "external",
"summary": "SUSE Bug 680212 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/680212"
},
{
"category": "external",
"summary": "SUSE Bug 700987 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/700987"
},
{
"category": "external",
"summary": "SUSE Bug 711490 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/711490"
},
{
"category": "external",
"summary": "SUSE Bug 715643 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/715643"
},
{
"category": "external",
"summary": "SUSE Bug 748422 for CVE-2010-0540",
"url": "https://bugzilla.suse.com/748422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-0540"
},
{
"cve": "CVE-2010-0542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-0542"
}
],
"notes": [
{
"category": "general",
"text": "The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-0542",
"url": "https://www.suse.com/security/cve/CVE-2010-0542"
},
{
"category": "external",
"summary": "SUSE Bug 601352 for CVE-2010-0542",
"url": "https://bugzilla.suse.com/601352"
},
{
"category": "external",
"summary": "SUSE Bug 644521 for CVE-2010-0542",
"url": "https://bugzilla.suse.com/644521"
},
{
"category": "external",
"summary": "SUSE Bug 657780 for CVE-2010-0542",
"url": "https://bugzilla.suse.com/657780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-0542"
},
{
"cve": "CVE-2010-1748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-1748"
}
],
"notes": [
{
"category": "general",
"text": "The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-1748",
"url": "https://www.suse.com/security/cve/CVE-2010-1748"
},
{
"category": "external",
"summary": "SUSE Bug 601352 for CVE-2010-1748",
"url": "https://bugzilla.suse.com/601352"
},
{
"category": "external",
"summary": "SUSE Bug 604271 for CVE-2010-1748",
"url": "https://bugzilla.suse.com/604271"
},
{
"category": "external",
"summary": "SUSE Bug 644521 for CVE-2010-1748",
"url": "https://bugzilla.suse.com/644521"
},
{
"category": "external",
"summary": "SUSE Bug 649256 for CVE-2010-1748",
"url": "https://bugzilla.suse.com/649256"
},
{
"category": "external",
"summary": "SUSE Bug 657780 for CVE-2010-1748",
"url": "https://bugzilla.suse.com/657780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-1748"
},
{
"cve": "CVE-2010-2941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-2941"
}
],
"notes": [
{
"category": "general",
"text": "ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-2941",
"url": "https://www.suse.com/security/cve/CVE-2010-2941"
},
{
"category": "external",
"summary": "SUSE Bug 649256 for CVE-2010-2941",
"url": "https://bugzilla.suse.com/649256"
},
{
"category": "external",
"summary": "SUSE Bug 654627 for CVE-2010-2941",
"url": "https://bugzilla.suse.com/654627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2010-2941"
},
{
"cve": "CVE-2012-5519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5519"
}
],
"notes": [
{
"category": "general",
"text": "CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5519",
"url": "https://www.suse.com/security/cve/CVE-2012-5519"
},
{
"category": "external",
"summary": "SUSE Bug 1180148 for CVE-2012-5519",
"url": "https://bugzilla.suse.com/1180148"
},
{
"category": "external",
"summary": "SUSE Bug 789566 for CVE-2012-5519",
"url": "https://bugzilla.suse.com/789566"
},
{
"category": "external",
"summary": "SUSE Bug 882905 for CVE-2012-5519",
"url": "https://bugzilla.suse.com/882905"
},
{
"category": "external",
"summary": "SUSE Bug 924208 for CVE-2012-5519",
"url": "https://bugzilla.suse.com/924208"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5519"
},
{
"cve": "CVE-2012-6094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-6094"
}
],
"notes": [
{
"category": "general",
"text": "cups (Common Unix Printing System) \u0027Listen localhost:631\u0027 option not honored correctly which could provide unauthorized access to the system",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-6094",
"url": "https://www.suse.com/security/cve/CVE-2012-6094"
},
{
"category": "external",
"summary": "SUSE Bug 795624 for CVE-2012-6094",
"url": "https://bugzilla.suse.com/795624"
},
{
"category": "external",
"summary": "SUSE Bug 857372 for CVE-2012-6094",
"url": "https://bugzilla.suse.com/857372"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-6094"
},
{
"cve": "CVE-2014-2856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2856"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2856",
"url": "https://www.suse.com/security/cve/CVE-2014-2856"
},
{
"category": "external",
"summary": "SUSE Bug 873899 for CVE-2014-2856",
"url": "https://bugzilla.suse.com/873899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2856"
},
{
"cve": "CVE-2014-3537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3537"
}
],
"notes": [
{
"category": "general",
"text": "The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3537",
"url": "https://www.suse.com/security/cve/CVE-2014-3537"
},
{
"category": "external",
"summary": "SUSE Bug 887240 for CVE-2014-3537",
"url": "https://bugzilla.suse.com/887240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3537"
},
{
"cve": "CVE-2014-5029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5029"
}
],
"notes": [
{
"category": "general",
"text": "The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5029",
"url": "https://www.suse.com/security/cve/CVE-2014-5029"
},
{
"category": "external",
"summary": "SUSE Bug 887240 for CVE-2014-5029",
"url": "https://bugzilla.suse.com/887240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-5029"
},
{
"cve": "CVE-2014-5030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5030"
}
],
"notes": [
{
"category": "general",
"text": "CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5030",
"url": "https://www.suse.com/security/cve/CVE-2014-5030"
},
{
"category": "external",
"summary": "SUSE Bug 887240 for CVE-2014-5030",
"url": "https://bugzilla.suse.com/887240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-5030"
},
{
"cve": "CVE-2014-5031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5031"
}
],
"notes": [
{
"category": "general",
"text": "The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5031",
"url": "https://www.suse.com/security/cve/CVE-2014-5031"
},
{
"category": "external",
"summary": "SUSE Bug 887240 for CVE-2014-5031",
"url": "https://bugzilla.suse.com/887240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-5031"
},
{
"cve": "CVE-2015-1158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1158"
}
],
"notes": [
{
"category": "general",
"text": "The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1158",
"url": "https://www.suse.com/security/cve/CVE-2015-1158"
},
{
"category": "external",
"summary": "SUSE Bug 924208 for CVE-2015-1158",
"url": "https://bugzilla.suse.com/924208"
},
{
"category": "external",
"summary": "SUSE Bug 976653 for CVE-2015-1158",
"url": "https://bugzilla.suse.com/976653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1158"
},
{
"cve": "CVE-2015-1159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1159"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1159",
"url": "https://www.suse.com/security/cve/CVE-2015-1159"
},
{
"category": "external",
"summary": "SUSE Bug 924208 for CVE-2015-1159",
"url": "https://bugzilla.suse.com/924208"
},
{
"category": "external",
"summary": "SUSE Bug 976653 for CVE-2015-1159",
"url": "https://bugzilla.suse.com/976653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x",
"openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1159"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…