Advisories » MGASA-2015-0067

Updated cups packages fix CVE-2014-9679

Publication date: 15 Feb 2015
Modification date: 15 Feb 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9679

Description

Updated cups packages fix security vulnerability:

A malformed file with an invalid page header and compressed raster data can
trigger a buffer overflow in cupsRasterReadPixels (CVE-2014-9679).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=15260
• https://www.cups.org/str.php?L4551
• http://openwall.com/lists/oss-security/2015/02/12/12
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9679

SRPMS

4/core

• cups-1.7.0-7.4.mga4