High-class talks around the clock in the Forum, non-commercial projects presenting their work, new developments at the largest IT fair in the world, CeBIT Open Source 2010 in Hanover, Germany.
The new 1.3.7 is the CUPS developers have closed down several vulnerabilities in the popular print server.
On networks that ran CUPS as a print server, potential attackers could provoke a heap-based buffer overflow via the "cgiCompileSearch()" search function implemented by the CGI interface if the printer was shared. A carefully crafted search request was required to do this. The exploit gave attackers the ability to assumed the privileges of the user accounts running the service and to execute code. Security researchers iDefence discovered the vulnerability, which is classified as CVE ID CVE-2008-0047, in CUPS version 1.3.5, although older versions may also be affected.
This also applies to bug CVE-2008-1373 which was provoked by GIF image files. If image files had an invalid value in the "code_size" field, a buffer overflow could be provoked. The new release also removes a couple of minor errrors in CUPS. Check out the release notes for more details.
The new 1.3.7 version is now available for downloading. Distributors will be providing updated packages shortly.
Get 3 Issues + 3 DVDs for the price of a single issue!
Let Linux Magazine's hands-on, technical articles guide you in your daily Linux use. Check out bonus DVDs like Ubuntu, SUSE, or Fedora and save the download.
Only available for a limited time. Don't miss out!
Comments