Oval Definition:oval:org.opensuse.security:def:70385
Revision Date:2021-04-30Version:1
Title:Security update for cups (Important)
Description:

This update for cups fixes the following issues:

- CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
Family:unixClass:patch
Status:Reference(s):1132091
1176409
1176412
1184161
CVE-2019-11023
CVE-2020-14392
CVE-2020-14393
CVE-2021-25317
SUSE-SU-2019:1267-3
SUSE-SU-2020:2646-1
SUSE-SU-2021:1454-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND perl-DBI-1.642-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
  • AND Package Information
  • graphviz-addons-2.40.1-6.3 is installed
  • OR graphviz-perl-2.40.1-6.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
  • AND Package Information
  • cups-2.2.7-3.26.1 is installed
  • OR cups-client-2.2.7-3.26.1 is installed
  • OR cups-config-2.2.7-3.26.1 is installed
  • OR cups-ddk-2.2.7-3.26.1 is installed
  • OR cups-devel-2.2.7-3.26.1 is installed
  • OR libcups2-2.2.7-3.26.1 is installed
  • OR libcups2-32bit-2.2.7-3.26.1 is installed
  • OR libcupscgi1-2.2.7-3.26.1 is installed
  • OR libcupsimage2-2.2.7-3.26.1 is installed
  • OR libcupsmime1-2.2.7-3.26.1 is installed
  • OR libcupsppdc1-2.2.7-3.26.1 is installed
  • BACK