Security bugs are reported here via bugzilla

[Seth Alan Woolley <seth AT positivism.org>]

Didn't check the versions first as I wanted to get the announcement out
right away, but from the bug report it affects at least 1.1.17-1.1.18,
but a patch that changed this behavior was inserted in 1.1.19, so yes,
we are safe.

Seth

On Mon, Nov 03, 2003 at 01:37:14PM -0800, Eric Sandall wrote:
> Quoting Seth Alan Woolley <seth AT positivism.org>:
> > ----- Forwarded message from bugzilla AT redhat.com -----
> > 
> > Subject: [RHSA-2003:275-01] Updated CUPS packages fix denial of service
> > From: bugzilla AT redhat.com
> > Date: Mon, 3 Nov 2003 04:26 -0500
> > To: redhat-watch-list AT redhat.com, bugtraq AT securityfocus.com,
> >         full-disclosure AT lists.netsys.com
> > Cc: 
> > 
> > ---------------------------------------------------------------------
> >                    Red Hat Security Advisory
> > 
> > Synopsis:          Updated CUPS packages fix denial of service
> > Advisory ID:       RHSA-2003:275-01
> > Issue date:        2003-11-03
> > Updated on:        2003-11-03
> > Product:           Red Hat Linux
> > Keywords:          
> > Cross references:  
> > Obsoletes:         
> > CVE Names:         CAN-2003-0788
> > ---------------------------------------------------------------------
> 
> We're on the 1.1.20 rc's, so we're safe, yes?
> 
> -sandalle
> 
> -- 
> PGP Key Fingerprint:  FCFF 26A1 BE21 08F4 BB91  FAED 1D7B 7D74 A8EF DD61
> http://search.keyserver.net:11371/pks/lookup?op=get&search=0xA8EFDD61
> 
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.12
> GCS/E/IT$ d-- s++:+>: a-- C++(+++) BL++++VIS>$ P+(++) L+++ E-(---) W++ N+@ 
> o?
> K? w++++>-- O M-@ V-- PS+(+++) PE(-) Y++(+) PGP++(+) t+() 5++ X(+) R+(++)
> tv(--)b++(+++) DI+@ D++(+++) G>+++ e>+++ h---(++) r++ y+
> ------END GEEK CODE BLOCK------
> 
> Eric Sandall                     |  Source Mage GNU/Linux Developer
> eric AT sandall.us                  |  http://www.sourcemage.org/
> http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
> http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/
> 
> ----------------------------------------------------------------
> This message was sent using IMP, the Internet Messaging Program.
> _______________________________________________
> SM-Security mailing list
> SM-Security AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-security

-- 
Seth Alan Woolley <seth at positivism.org>, SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A

Attachment: pgpEOFptN6UvA.pgp
Description: PGP signature