----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
SUSE update for cups

SECUNIA ADVISORY ID:
SA28441

VERIFY ADVISORY:
http://secunia.com/advisories/28441/

CRITICAL:
Moderately critical

IMPACT:
DoS, System access

WHERE:
>From local network

OPERATING SYSTEM:
openSUSE 10.2
http://secunia.com/product/13375/
openSUSE 10.3
http://secunia.com/product/16124/
SUSE Linux 10.1
http://secunia.com/product/10796/
SUSE Linux Enterprise Server 9
http://secunia.com/product/4118/
SUSE Linux Enterprise Server 10
http://secunia.com/product/12192/

SOFTWARE:
Novell Open Enterprise Server
http://secunia.com/product/4664/

DESCRIPTION:
SUSE has issued an update for cups. This fixes some vulnerabilities,
which can be exploited by malicious users or malicious people to
cause a DoS (Denial of Service) or to potentially compromise a
vulnerable system. 

1) A signedness error exists within the processing of ASN1 encoded
strings from SNMP responses.

For more information:
SA28129

The vulnerability affects openSUSE 10.2 and 10.3 only.

2) An unspecified boundary error can be exploited by a user with
administrator privileges to cause a stack-based buffer overflow via a
specially crafted URI.

This is related to vulnerability #5 in:
SA28136

SOLUTION:
Apply updated packages.

x86 Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cups-1.2.12-22.6.i586.rpm
e844b0c92d437c25e71c9be92c3d6ee4

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cups-client-1.2.12-22.6.i586.rpm
7f3525adc1a7ab85f3650fd9adf69bc8

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cups-devel-1.2.12-22.6.i586.rpm
88ea6ba071bd51ee23b87c5d13a551b6

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cups-libs-1.2.12-22.6.i586.rpm
5a41077855e2e502d6c1cfb5e369ef8b

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cups-1.2.7-12.9.i586.rpm
c4163c0ad47db8221f9b1ea41bdbf259

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cups-client-1.2.7-12.9.i586.rpm
b55019f39c36ea6ef3352635b7093705

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cups-devel-1.2.7-12.9.i586.rpm
f83d6477eb8f1c2ed76ba1f4b896ced3

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cups-libs-1.2.7-12.9.i586.rpm
295394a3fdc59c155d1683a3084df888

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cups-1.1.23-40.35.i586.rpm
a5efab6d27bc1262873d4b467e288bbd

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cups-client-1.1.23-40.35.i586.rpm
69b85c943b27dccf4fd3c69072ee01de

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cups-devel-1.1.23-40.35.i586.rpm
8ab20affa8deb5a6d75481e244935761

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cups-libs-1.1.23-40.35.i586.rpm
79005dc03c94da463a65b6313a06515e

Power PC Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cups-1.2.12-22.6.ppc.rpm
63f5378c91584358555df660d128cc0f

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cups-client-1.2.12-22.6.ppc.rpm
835d0e286f18d2fa5bba7fa6a0ecef60

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cups-devel-1.2.12-22.6.ppc.rpm
47bf9d7837037bc8ea2394a3c63cdf2e

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cups-libs-1.2.12-22.6.ppc.rpm
7421ec50af012b698f9f3e55b8dc15db

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cups-1.2.7-12.9.ppc.rpm
ccabb5d2c72bc5fa707289b1d2529884

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cups-client-1.2.7-12.9.ppc.rpm
06e88fbb162d9505027071cfb49c2981
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cups-devel-1.2.7-12.9.ppc.rpm
fdd75eb988613f025a6882e509e6f8db
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cups-libs-1.2.7-12.9.ppc.rpm
cf062d8d41eddd7eef98fb9518db4f26

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cups-1.1.23-40.35.ppc.rpm
2abd05fc5936cb3b3c54af60dc9f4cce

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cups-client-1.1.23-40.35.ppc.rpm
e503e321ae5683fe8ea66084616fe0f1

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cups-devel-1.1.23-40.35.ppc.rpm
5c5c12e135f4f3a3dd752a24f165c80c

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cups-libs-1.1.23-40.35.ppc.rpm
17b18d3827777331560d97ff934f7a2b

x86-64 Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cups-1.2.12-22.6.x86_64.rpm
f04e3ddc357e5c81e6db4170d2d773e7

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cups-client-1.2.12-22.6.x86_64.rpm
8b91333502a71746b16a77369d062b33

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cups-devel-1.2.12-22.6.x86_64.rpm
6599150352f49d5494125502a86d8930

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cups-libs-1.2.12-22.6.x86_64.rpm
c1635a3dab2ddda61b1ea7ed835334f8

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cups-libs-32bit-1.2.12-22.6.x86_64.rpm
e84064f49db1ec54dbf9247148d91ee7

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cups-1.2.7-12.9.x86_64.rpm
a71b6141bac10ef6b32fd156e107afa6

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cups-client-1.2.7-12.9.x86_64.rpm
971d1b6ed9965673b232c18c8c6897f0

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cups-devel-1.2.7-12.9.x86_64.rpm
dcca8172ada73a69773b2be6e6b5a46e

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cups-libs-1.2.7-12.9.x86_64.rpm
e418b6e5ab33453fabb81a0a64d72587

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cups-libs-32bit-1.2.7-12.9.x86_64.rpm
4c9bb5f870772967b8dcb6d47e4118c5

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cups-1.1.23-40.35.x86_64.rpm
56c999311218649e26f5e5b745f206de

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cups-client-1.1.23-40.35.x86_64.rpm
f7f80373487516f8258f5d32497deade

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cups-devel-1.1.23-40.35.x86_64.rpm
7b734519a2317ad3b706e2661c67fc3f

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cups-libs-1.1.23-40.35.x86_64.rpm
facfda468d147b872cd003cf38dd385d

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cups-libs-32bit-1.1.23-40.35.x86_64.rpm
48fdaa964afc64d86ebb59670a2100fb

Sources:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/cups-1.2.12-22.6.src.rpm
ed83be3003be5537bdbf50274c6fea06

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/cups-1.2.7-12.9.src.rpm
9c0ba6d4e3c15b81642d65d5e5582ef2

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/cups-1.1.23-40.35.src.rpm
ca0082ed490367ee4dba961dd1d5081f

Open Enterprise Server

http://support.novell.com/techcenter/psdb/eb37a23ce60ab91ec04f08ea1e3aa56a.html

Novell Linux POS 9

http://support.novell.com/techcenter/psdb/eb37a23ce60ab91ec04f08ea1e3aa56a.html

Novell Linux Desktop 9

http://support.novell.com/techcenter/psdb/eb37a23ce60ab91ec04f08ea1e3aa56a.html

SUSE Linux Enterprise Server 10 SP1

http://support.novell.com/techcenter/psdb/eb37a23ce60ab91ec04f08ea1e3aa56a.html

SUSE Linux Enterprise Desktop 10 SP1

http://support.novell.com/techcenter/psdb/eb37a23ce60ab91ec04f08ea1e3aa56a.html

SUSE SLES 9

http://support.novell.com/techcenter/psdb/eb37a23ce60ab91ec04f08ea1e3aa56a.html

ORIGINAL ADVISORY:
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html

OTHER REFERENCES:
SA28129:
http://secunia.com/advisories/28129/

SA28136:
http://secunia.com/advisories/28136/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------