| Summary: | <net-print/cups-2.2.10: Linux session cookies use a predictable random number seed (CVE-2018-4700) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Lars Wendler (Polynomial-C) (RETIRED) <polynomial-c> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | pacho, printing |
| Priority: | Normal | Flags: | stable-bot:
sanity-check+
|
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://github.com/apple/cups/releases/tag/v2.2.10 | ||
| Whiteboard: | B3 [noglsa cve] | ||
| Package list: |
net-print/cups-2.2.11
|
Runtime testing required: | --- |
|
Description
Lars Wendler (Polynomial-C) (RETIRED)
2018-12-08 12:30:16 UTC
Not really fixed: https://bugs.chromium.org/p/project-zero/issues/detail?id=1706#c3 (In reply to Hanno Boeck from comment #1) > Not really fixed: > https://bugs.chromium.org/p/project-zero/issues/detail?id=1706#c3 Thanks, Hanno. Well, meanwhile cups-2.2.11 was released but I have no idea if this bug is finally fully fixed... The tag says it was fixed in 2.2.10 https://github.com/apple/cups/releases/tag/v2.2.10 any issues stabilizing 2.2.11? sparc stable The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8ac59b92148da35b9d7d6066f0e03ee2953375a7 commit 8ac59b92148da35b9d7d6066f0e03ee2953375a7 Author: Tobias Klausmann <klausman@gentoo.org> AuthorDate: 2019-06-04 07:52:16 +0000 Commit: Tobias Klausmann <klausman@gentoo.org> CommitDate: 2019-06-04 07:52:35 +0000 net-print/cups-2.2.11-r0: alpha stable Bug: http://bugs.gentoo.org/672742 Signed-off-by: Tobias Klausmann <klausman@gentoo.org> net-print/cups/cups-2.2.11.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ppc64 stable x86 stable amd64 stable ppc stable ia64 stable arm64 stable hppa stable arm stable s390 stable The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5d061b6cf8a79d5dc2501f4a1d0c61835369a7a4 commit 5d061b6cf8a79d5dc2501f4a1d0c61835369a7a4 Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2019-07-31 11:53:46 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2019-07-31 11:54:08 +0000 net-print/cups: Security cleanup Bug: https://bugs.gentoo.org/672742 Package-Manager: Portage-2.3.69, Repoman-2.3.16 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org> net-print/cups/Manifest | 2 - net-print/cups/cups-2.2.10.ebuild | 337 ------------------------------------- net-print/cups/cups-2.2.7.ebuild | 343 -------------------------------------- 3 files changed, 682 deletions(-) |
