Monday, January 13, 2025

[USN-7202-1] HPLIP vulnerability

-----BEGIN PGP SIGNATURE-----
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=77r0
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7202-1
January 13, 2025

hplip vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

HPLIP could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- hplip: HP Linux Printing and Imaging System (HPLIP)

Details:

Kevin Backhouse discovered that HPLIP incorrectly handled certain MDNS
responses. A remote attacker could use this issue to cause HPLIP to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
hplip 3.20.3+dfsg0-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7202-1
CVE-2020-6923

Package Information:
https://launchpad.net/ubuntu/+source/hplip/3.20.3+dfsg0-2ubuntu0.1

No comments:

Post a Comment