FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CUPS -- memory corruption

Affected packages
		cups	<	2.3.3_1

Details

VuXML ID	ce0c8590-b628-11ea-9d28-3c970ee9157c
Discovery	2020-04-28
Entry	2020-06-24

Apple reports:

CVE-2019-8842: The ippReadIO function may under-read an extension.

CVE-2020-3898: The ppdOpen function did not handle invalid UI constraint. ppdcSource::get_resolution function did not handle invalid resolution strings. An application may be able to gain elevated privileges.

[source]

References

CVE Name	CVE-2019-8842
CVE Name	CVE-2020-3898
URL	https://github.com/apple/cups/releases/tag/v2.3.3
URL	https://support.apple.com/en-us/HT211100