[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

DESA-2004-016 - cupsys: denial of service



- --------------------------------------------------------------------------
Debian-Edu/Skolelinux Security Advisory DESA 2004-016
http://www.skolelinux.no/security/                      Morten Werner Olsen
September 16, 2004              debian-edu-security@lists.alioth.debian.org
- --------------------------------------------------------------------------

Package             : cupsys
Vulnerability       : denial of service
Problem-Type        : remote
Need reboot         : no
Debian-Edu-specific : no
CVE ID              : CAN-2004-0558
DSA ID              : DSA-545-1

Alvaro Martinez Echevarria discovered a problem in CUPS, the Common
UNIX Printing System.  An attacker can easily disable browsing in CUPS
by sending a specially crafted UDP datagram to port 631 where cupsd is
running.

We recommend that you update your cupsys packages.


Upgrade Instructions
- --------------------

Make sure the line

  deb http://security.debian.org/ stable/updates main contrib non-free

is present in your /etc/apt/sources.list and run 'apt-get update' to
update your package lists. Then run

  'apt-get install cupsys cupsys-bsd cupsys-client cupsys-pstoraster \
   libcupsys2'

to upgrade your python2.2 package.

- --------------------------------------------------------------------------
Mailing list: bruker@skolelinux.no, debian-edu@lists.debian.org,
              linuxiskolen@skolelinux.no, user@skolelinux.de
Package info: `apt-cache show <pkg>'

Attachment: signature.asc
Description: Digital signature


Reply to: