advisories/16221.adv

type: security
subject: Updated cups-filters package fixes security vulnerability
CVE:
 - CVE-2015-3258
 - CVE-2015-3279
src:
  4:
   core:
     - cups-filters-1.0.53-1.2.mga4
  5:
   core:
     - cups-filters-1.0.71-1.mga5
description: |
  A heap-based buffer overflow was discovered in the way the texttopdf
  utility of cups-filters processed print jobs with a specially crafted line
  size. An attacker being able to submit print jobs could exploit this flaw
  to crash texttopdf or, possibly, execute arbitrary code with the
  privileges of the 'lp' user (CVE-2015-3258, CVE-2015-3279).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=16221
 - https://bugzilla.redhat.com/show_bug.cgi?id=1235385
 - https://bugzilla.redhat.com/show_bug.cgi?id=1238990
ID: MGASA-2015-0270
1	type: security
2	subject: Updated cups-filters package fixes security vulnerability
3	CVE:
4	- CVE-2015-3258
5	- CVE-2015-3279
6	src:
7	4:
8	core:
9	- cups-filters-1.0.53-1.2.mga4
10	5:
11	core:
12	- cups-filters-1.0.71-1.mga5
13	description: \|
14	A heap-based buffer overflow was discovered in the way the texttopdf
15	utility of cups-filters processed print jobs with a specially crafted line
16	size. An attacker being able to submit print jobs could exploit this flaw
17	to crash texttopdf or, possibly, execute arbitrary code with the
18	privileges of the 'lp' user (CVE-2015-3258, CVE-2015-3279).
19	references:
20	- https://bugs.mageia.org/show_bug.cgi?id=16221
21	- https://bugzilla.redhat.com/show_bug.cgi?id=1235385
22	- https://bugzilla.redhat.com/show_bug.cgi?id=1238990
23	ID: MGASA-2015-0270