Frugalware Linux - Let's make things Frugal!

Donations

Donate to support our development efforts.

Languages

Share Frugalware with your friends.

Recent updates

lib-extra/
ruby-heroku-api
0.3.11-1-i686
multimedia-extra/
subliminal
0.6.4-1-i686
network-extra/
baresip
0.4.4-1-i686
lib-extra/
python-requests
1.2.2-1-i686
lib-extra/
python-mahotas
1.0-1-i686
lib-extra/
ruby-heroku-api
0.3.11-1-x86_64
multimedia-extra/
subliminal
0.6.4-1-x86_64
network-extra/
baresip
0.4.4-1-x86_64
lib-extra/rohc
1.5.2-1-i686
games-extra/dustrac
1.3.1-1-i686

Releases

Information

Server information

Uptime:
36 day(s) 10 h 21 m 0 s

Package:	foomatic-filters
Date:	2011-09-03
Posted by:	Miklos Vajna
Vulnerable version:	4.0.1-5
Unaffected version:	4.0.1-6mores1
Bug tracker entry:	http://bugs.frugalware.org/task/4556
CVEs:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2924
Description:	It was found that foomatic-rip filter used insecurely created temporary file for storage of PostScript data by rendering the data, intended to be sent to the PostScript filter, when the debug mode was enabled. A local attacker could use this flaw to conduct symlink attacks (overwrite arbitrary file accessible with the privileges of the user running the foomatic-rip universal print filter).