Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-708-1: HPLIP vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-708-1: HPLIP vulnerability
# 1  
Old 01-13-2009
USN-708-1: HPLIP vulnerability
Description:
===========================================================Ubuntu Security Notice USN-708-1 January 13, 2009hplip vulnerabilityhttps://launchpad.net/bugs/191299===========================================================A security issue affects the following Ubuntu releases:Ubuntu 7.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 7.10: hplip 2.7.7.dfsg.1-0ubuntu5.3In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that an installation script in the HPLIP package wouldchange permissions on the hplip config files located in user's home directories.A local user could exploit this and change permissions on arbitrary filesupon an HPLIP installation or upgrade, which could lead to root privileges.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

hp-check

hp-check(1)							   User Manuals 						       hp-check(1)

NAME

       hp-check - Dependency/Version Check Utility

DESCRIPTION

       Check the existence and versions of HPLIP dependencies. (Run as 'python ./check.py' from the HPLIP tarball before installation.)

SYNOPSIS

       hp-check [OPTIONS]

OPTIONS

       Compile-time check:
	      -c or --compile

       Run-time check:
	      -r or --run

       Compile and run-time checks:
	      -b or --both (default)

       Fix the found issues on confirmation:
	      --fix

       Set the logging level:
	      -l<level> or --logging=<level> <level>: none, info*, error, warn, debug (*default)

       Run in debug mode:
	      -g (same as option: -ldebug)

       Output plain text only:
	      -t

       This help information:
	      -h or --help

NOTES

       1. For checking for the proper build environment for the HPLIP supplied tarball (.tar.gz or .run),

       use the --compile or --both switches.

       2. For checking for the proper runtime environment for a distro supplied package (.deb, .rpm, etc),

       use the --runtime switch.

AUTHOR

       HPLIP  (Hewlett-Packard Linux Imaging and Printing) is an HP developed solution for printing, scanning, and faxing with HP inkjet and laser
       based printers in Linux.

REPORTING BUGS

       The HPLIP Launchpad.net site https://launchpad.net/hplip is available to get help, report bugs, make suggestions, discuss the HPLIP project
       or otherwise contact the HPLIP Team.

COPYRIGHT

       Copyright (c) 2001-14 Hewlett-Packard Development Company, L.P.

       This software comes with ABSOLUTELY NO WARRANTY.  This is free software, and you are welcome to distribute it under certain conditions. See
       COPYING file for more details.

Linux									15							       hp-check(1)