oss-sec mailing list archives

Re: CVE Request: Cups Filters/Foomatic Filters: Does not consider semicolon as an illegal shell escape character


From: Till Kamppeter <till.kamppeter () gmail com>
Date: Mon, 14 Dec 2015 21:58:13 -0200

On 12/14/2015 07:32 PM, cve-assign () mitre org wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

There was another commit in cups-filters upstream (revision 7419) as
well adding (;) to the set of illegal shell escape characters:

http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419

Use CVE-2015-8560.

Thank you very much. I have released cups-filters 1.4.0 upstream now with reference to this CVE in the NEWS file.

   Till


Current thread: