• [SECURITY] [DSA 3419-1] cups-filters security update

    From Salvatore Bonaccorso@1:229/2 to All on Tue Dec 15 18:20:01 2015
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3419-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : cups-filters
    CVE ID : CVE-2015-8560
    Debian Bug : 807930

    Adam Chester discovered that missing input sanitising in the
    foomatic-rip print filter might result in the execution of arbitrary
    commands.

    For the stable distribution (jessie), this problem has been fixed in
    version 1.0.61-5+deb8u3.

    For the unstable distribution (sid), this problem has been fixed in
    version 1.4.0-1.

    We recommend that you upgrade your cups-filters packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBCgAGBQJWcEkkAAoJEAVMuPMTQ89EB7QP/Rg3zx17xwfl08PAA1zDTzYm uHz1oCPKn7ILIOoWGpAAqJykJOGTEOYh8E5HyTS5QqPjFBIX/DAgiaxgqpNjTG19 SOSbRdNrUFDdmHzBT3nB8Z7aGwpLXQxukPeXy0dA/pYUmfxqqDfpQUvwWhlOpSn4 X6Kk1aeloJL4FxrcldAr8oSUFsrBw5VtuOeP5yAwOQAT7J1iby2mqUddhKYXERIe Z+I/GtmCrZ8KvJ5L62Wo+Wfg0BcAHsW472TOxXusq+kJf56ndiJL2G4H0q/n9wNj cq5XVLLH1jKa32MaumAK69EHDPEVhPleRUDKyQhJvyN790jWehuEkHm0gdoE53mC fM2ZHubfOMLZNnwly6W44r4Q7Bau+PqrK/kPqtWkP0KyaFGnqSBce5W4ResNzLCa XGLt5CyrAszwa6VYVpWw8DMYi3S0WmYoe7yttCaBydtX9vJkAwEytJ7mZCbEiYT5 Lm3fB5EBufzhUBRqZq79x5TVM7nerMQoRRxJjL+FMpIF4+o9wP0ePvAZzvdzhLsi 9ji7tObNh3TcACsFQWBhU0AVajTDzu3SGJ1KyGa618VpvFqe9gpcdNnEYHRxHQAq Fvhz1RDfJoP4KbR8ISzqvPYDbakxRQswW+eROmNwapukyxI4W7V8txq/NJcW2+aS 36Jd2TO/UQQMozIdB1EU
    =GdJY
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)