RHBA-2015:0386Medium

Red Hat Bug Fix Advisory: cups bug fix and enhancement update

Published
March 5, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (5)

CVE-2014-2856 →CVE-2014-3537 →CVE-2014-5029 →CVE-2014-5030 →CVE-2014-5031 →

📋 Description

CVE-2014-2856 — cups: cross-site scripting flaw fixed in the 1.7.2 release CVE-2014-3537 — cups: insufficient checking leads to privilege escalation CVE-2014-5029 — cups: Incomplete fix for CVE-2014-3537 CVE-2014-5030 — cups: allows local users to read arbitrary files via a symlink attack CVE-2014-5031 — cups: world-readable permissions

🎯 Affected products84

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • cups-1:1.6.3-17.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-1:1.6.3-17.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-1:1.6.3-17.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • cups-1:1.6.3-17.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • cups-1:1.6.3-17.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-1:1.6.3-17.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • cups-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • cups-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • cups-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • cups-client-1:1.6.3-17.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-client-1:1.6.3-17.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-client-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • cups-client-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • cups-client-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-client-1:1.6.3-17.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • cups-debuginfo-1:1.6.3-17.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
  • cups-debuginfo-1:1.6.3-17.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • cups-debuginfo-1:1.6.3-17.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • cups-debuginfo-1:1.6.3-17.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • cups-debuginfo-1:1.6.3-17.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
  • cups-debuginfo-1:1.6.3-17.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • +54 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (7)