Oval Definition:oval:org.opensuse.security:def:111355
Revision Date:2021-04-30Version:1
Title:Security update for cups (Important)
Description:

This update for cups fixes the following issues:

- CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1184161
CVE-2021-25317
openSUSE-SU-2021:0638-1
Platform(s):openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • cups-2.2.7-lp152.9.9.1 is installed
  • OR cups-client-2.2.7-lp152.9.9.1 is installed
  • OR cups-config-2.2.7-lp152.9.9.1 is installed
  • OR cups-ddk-2.2.7-lp152.9.9.1 is installed
  • OR cups-devel-2.2.7-lp152.9.9.1 is installed
  • OR cups-devel-32bit-2.2.7-lp152.9.9.1 is installed
  • OR libcups2-2.2.7-lp152.9.9.1 is installed
  • OR libcups2-32bit-2.2.7-lp152.9.9.1 is installed
  • OR libcupscgi1-2.2.7-lp152.9.9.1 is installed
  • OR libcupscgi1-32bit-2.2.7-lp152.9.9.1 is installed
  • OR libcupsimage2-2.2.7-lp152.9.9.1 is installed
  • OR libcupsimage2-32bit-2.2.7-lp152.9.9.1 is installed
  • OR libcupsmime1-2.2.7-lp152.9.9.1 is installed
  • OR libcupsmime1-32bit-2.2.7-lp152.9.9.1 is installed
  • OR libcupsppdc1-2.2.7-lp152.9.9.1 is installed
  • OR libcupsppdc1-32bit-2.2.7-lp152.9.9.1 is installed
    • BACK