DSA-3419-1 cups-filters -- security update

Debian Security Advisory

DSA-3419-1 cups-filters -- security update

Date Reported:

15 Dec 2015

Affected Packages:

cups-filters

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 807930.
In Mitre's CVE dictionary: CVE-2015-8560.

More information:

Adam Chester discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands.

For the stable distribution (jessie), this problem has been fixed in version 1.0.61-5+deb8u3.

For the unstable distribution (sid), this problem has been fixed in version 1.4.0-1.

We recommend that you upgrade your cups-filters packages.