cups security update

2024-07-0200:00:00

linux.oracle.com

cups

security update

chmod vulnerability

rhel-40386

domain socket

cupsd listener

cve-2024-35235

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

Low

JSON

[ - 1:2.2.6-60]

RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
Delete the domain socket file after stopping the cups.socket service
Fix cupsd Listener checks
[1:2.2.6-59]
RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
Require cups.socket in cupsd service file
[1:2.2.6-58]
CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777

OSVersionArchitecturePackageVersionFilename
oracle linux8srccups< 2.2.6-60.el8_10cups-2.2.6-60.el8_10.src.rpm
oracle linux8srccups< 2.2.6-60.el8_10cups-2.2.6-60.el8_10.src.rpm
oracle linux8srccups< 2.2.6-60.el8_10cups-2.2.6-60.el8_10.src.rpm
oracle linux8aarch64cups< 2.2.6-60.el8_10cups-2.2.6-60.el8_10.aarch64.rpm
oracle linux8aarch64cups-client< 2.2.6-60.el8_10cups-client-2.2.6-60.el8_10.aarch64.rpm
oracle linux8aarch64cups-devel< 2.2.6-60.el8_10cups-devel-2.2.6-60.el8_10.aarch64.rpm
oracle linux8noarchcups-filesystem< 2.2.6-60.el8_10cups-filesystem-2.2.6-60.el8_10.noarch.rpm
oracle linux8aarch64cups-ipptool< 2.2.6-60.el8_10cups-ipptool-2.2.6-60.el8_10.aarch64.rpm
oracle linux8aarch64cups-libs< 2.2.6-60.el8_10cups-libs-2.2.6-60.el8_10.aarch64.rpm
oracle linux8aarch64cups-libs< 2.2.6-60.el8_10cups-libs-2.2.6-60.el8_10.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	cups	< 2.2.6-60.el8_10	cups-2.2.6-60.el8_10.src.rpm
oracle linux	8	src	cups	< 2.2.6-60.el8_10	cups-2.2.6-60.el8_10.src.rpm
oracle linux	8	src	cups	< 2.2.6-60.el8_10	cups-2.2.6-60.el8_10.src.rpm
oracle linux	8	aarch64	cups	< 2.2.6-60.el8_10	cups-2.2.6-60.el8_10.aarch64.rpm
oracle linux	8	aarch64	cups-client	< 2.2.6-60.el8_10	cups-client-2.2.6-60.el8_10.aarch64.rpm
oracle linux	8	aarch64	cups-devel	< 2.2.6-60.el8_10	cups-devel-2.2.6-60.el8_10.aarch64.rpm
oracle linux	8	noarch	cups-filesystem	< 2.2.6-60.el8_10	cups-filesystem-2.2.6-60.el8_10.noarch.rpm
oracle linux	8	aarch64	cups-ipptool	< 2.2.6-60.el8_10	cups-ipptool-2.2.6-60.el8_10.aarch64.rpm
oracle linux	8	aarch64	cups-libs	< 2.2.6-60.el8_10	cups-libs-2.2.6-60.el8_10.aarch64.rpm
oracle linux	8	aarch64	cups-libs	< 2.2.6-60.el8_10	cups-libs-2.2.6-60.el8_10.aarch64.rpm