Security update for cups SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2233-1 Final 1 1 2018-08-07T10:47:47Z current 2018-08-07T10:47:47Z 2018-08-07T10:47:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for cups This update for cups fixes the following issues: Security issues fixed: - CVE-2018-4180: Fix local privilege escalation to root in dnssd backend (bsc#1096405). - CVE-2018-4181: Limited local file reads as root via cupsd.conf include directive (bsc#1096406). - CVE-2018-4182: Fix cups-exec sandbox bypass due to insecure error handling (bsc#1096407). - CVE-2018-4183: Fix cups-exec sandbox bypass due to profile misconfiguration (bsc#1096408). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-cups-13718,slessp4-cups-13718 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182233-1/ Link for SUSE-SU-2018:2233-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004381.html E-Mail link for SUSE-SU-2018:2233-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1096405 SUSE Bug 1096405 https://bugzilla.suse.com/1096406 SUSE Bug 1096406 https://bugzilla.suse.com/1096407 SUSE Bug 1096407 https://bugzilla.suse.com/1096408 SUSE Bug 1096408 https://www.suse.com/security/cve/CVE-2018-4180/ SUSE CVE CVE-2018-4180 page https://www.suse.com/security/cve/CVE-2018-4181/ SUSE CVE CVE-2018-4181 page https://www.suse.com/security/cve/CVE-2018-4182/ SUSE CVE CVE-2018-4182 page https://www.suse.com/security/cve/CVE-2018-4183/ SUSE CVE CVE-2018-4183 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 cups-devel-1.3.9-8.46.56.3.1 cups-1.3.9-8.46.56.3.1 cups-client-1.3.9-8.46.56.3.1 cups-libs-1.3.9-8.46.56.3.1 cups-libs-32bit-1.3.9-8.46.56.3.1 cups-libs-x86-1.3.9-8.46.56.3.1 cups-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 cups-client-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 cups-libs-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 cups-libs-32bit-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 cups-libs-x86-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 cups-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 cups-client-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 cups-libs-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 cups-libs-32bit-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 cups-libs-x86-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 cups-devel-1.3.9-8.46.56.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions. CVE-2018-4180 SUSE Linux Enterprise Server 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:cups-devel-1.3.9-8.46.56.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182233-1/ https://www.suse.com/security/cve/CVE-2018-4180.html CVE-2018-4180 https://bugzilla.suse.com/1096405 SUSE Bug 1096405 https://bugzilla.suse.com/1096408 SUSE Bug 1096408 In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions. CVE-2018-4181 SUSE Linux Enterprise Server 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:cups-devel-1.3.9-8.46.56.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182233-1/ https://www.suse.com/security/cve/CVE-2018-4181.html CVE-2018-4181 https://bugzilla.suse.com/1096406 SUSE Bug 1096406 https://bugzilla.suse.com/1096408 SUSE Bug 1096408 https://bugzilla.suse.com/1105281 SUSE Bug 1105281 In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS. CVE-2018-4182 SUSE Linux Enterprise Server 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:cups-devel-1.3.9-8.46.56.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182233-1/ https://www.suse.com/security/cve/CVE-2018-4182.html CVE-2018-4182 https://bugzilla.suse.com/1096407 SUSE Bug 1096407 https://bugzilla.suse.com/1096408 SUSE Bug 1096408 https://bugzilla.suse.com/1105281 SUSE Bug 1105281 In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions. CVE-2018-4183 SUSE Linux Enterprise Server 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-client-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-32bit-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cups-libs-x86-1.3.9-8.46.56.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:cups-devel-1.3.9-8.46.56.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182233-1/ https://www.suse.com/security/cve/CVE-2018-4183.html CVE-2018-4183 https://bugzilla.suse.com/1096407 SUSE Bug 1096407 https://bugzilla.suse.com/1096408 SUSE Bug 1096408