USN-6844-1 fixed vulnerabilities in the CUPS package. The update
lead to the discovery of a regression in CUPS with regards to
how the cupsd daemon handles Listen configuration directive.
This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Rory McNamara discovered that when starting the cupsd server with a
Listen configuration item, the cupsd process fails to validate if
bind call passed. An attacker could possibly trick cupsd to perform
an arbitrary chmod of the provided argument, providing world-writable
access to the target.
More Stories
python-uv-build-0.6.14-2.fc43 rust-gitui-0.26.3-6.fc43 rust-gstreamer-0.23.5-2.fc43 rust-ron-0.9.0-1.fc43 rust-version-ranges-0.1.1-2.fc43 rust-zip-2.6.1-1.fc43 uv-0.6.14-3.fc43
FEDORA-2025-1311e4cd58 Packages in this update: python-uv-build-0.6.14-2.fc43 rust-gitui-0.26.3-6.fc43 rust-gstreamer-0.23.5-2.fc43 rust-ron-0.9.0-1.fc43 rust-version-ranges-0.1.1-2.fc43 rust-zip-2.6.1-1.fc43 uv-0.6.14-3.fc43 Update description: Update rust-ron to 0.9. Update rust-zip...
rpki-client-9.5-1.el10_0
FEDORA-EPEL-2025-2ec16b3a94 Packages in this update: rpki-client-9.5-1.el10_0 Update description: rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered....
rpki-client-9.5-1.fc41
FEDORA-2025-17fed14cc3 Packages in this update: rpki-client-9.5-1.fc41 Update description: rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered....
rpki-client-9.5-1.fc40
FEDORA-2025-d5fdbedb7f Packages in this update: rpki-client-9.5-1.fc40 Update description: rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered....
rpki-client-9.5-1.el9
FEDORA-EPEL-2025-f8a9a83d41 Packages in this update: rpki-client-9.5-1.el9 Update description: rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered....
rpki-client-9.5-1.el10_1
FEDORA-EPEL-2025-f8fbd7b9af Packages in this update: rpki-client-9.5-1.el10_1 Update description: rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered....