[manjaro-security] [ASA-202102-13] cups: information disclosure
Remi Gacogne via arch-security
arch-security at lists.archlinux.org
Fri Feb 12 08:06:51 CET 2021
Arch Linux Security Advisory ASA-202102-13
Date : 2021-02-06
CVE-ID : CVE-2020-10001
Package : cups
Type : information disclosure
Remote : No
Link : https://security.archlinux.org/AVG-1529
The package cups before version 1:2.3.3op2-1 is vulnerable to
Upgrade to 1:2.3.3op2-1.
# pacman -Syu "cups>=1:2.3.3op2-1"
The problem has been fixed upstream in version 2.3.3op2.
A security issue was found in cups before version 2.3.3op2. A missing
length check in the ippReadIO function could lead to a buffer over-
A remote attacker might be able to cause a denial of service or access
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 840 bytes
Desc: OpenPGP digital signature
More information about the manjaro-security