Synopsis: Moderate: hplip security update
Issue Date: 2011-01-17
CVE Numbers: CVE-2010-4267
—
Hewlett-Packard Linux Imaging and Printing (HPLIP) provides drivers for
Hewlett-Packard printers and multifunction peripherals, and tools for
installing, using, and configuring them.
A flaw was found in the way certain HPLIP tools discovered devices using
the SNMP protocol. If a user ran certain HPLIP tools that search for
supported devices using SNMP, and a malicious user is able to send
specially-crafted SNMP responses, it could cause those HPLIP tools to crash
or, possibly, execute arbitrary code with the privileges of the user
running them. (CVE-2010-4267)
Red Hat would like to thank Sebastian Krahmer of the SuSE Security Team for
reporting this issue.
Users of hplip should upgrade to these updated packages, which contain a
backported patch to correct this issue.
—
SL5
x86_64
hpijs-1.6.7-6.el5_6.1.x86_64.rpm
hplip-1.6.7-6.el5_6.1.x86_64.rpm
libsane-hpaio-1.6.7-6.el5_6.1.x86_64.rpm
i386
hpijs-1.6.7-6.el5_6.1.i386.rpm
hplip-1.6.7-6.el5_6.1.i386.rpm
libsane-hpaio-1.6.7-6.el5_6.1.i386.rpm
SL6
x86_64
hpijs-3.9.8-33.el6_0.1.x86_64.rpm
hplip-3.9.8-33.el6_0.1.x86_64.rpm
hplip-common-3.9.8-33.el6_0.1.x86_64.rpm
hplip-gui-3.9.8-33.el6_0.1.x86_64.rpm
hplip-libs-3.9.8-33.el6_0.1.i686.rpm
hplip-libs-3.9.8-33.el6_0.1.x86_64.rpm
libsane-hpaio-3.9.8-33.el6_0.1.x86_64.rpm
i386
hpijs-3.9.8-33.el6_0.1.i686.rpm
hplip-3.9.8-33.el6_0.1.i686.rpm
hplip-common-3.9.8-33.el6_0.1.i686.rpm
hplip-gui-3.9.8-33.el6_0.1.i686.rpm
hplip-libs-3.9.8-33.el6_0.1.i686.rpm
libsane-hpaio-3.9.8-33.el6_0.1.i686.rpm
– Scientific Linux Development Team
