PT-2015-7874 · Apple · Cups

Publicado 2015-12-16 · Atualizado 2015-12-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions CUPS (affected versions not specified)

Description The issue is related to the POODLE attack, and as a security improvement, SSLv3 support is disabled in the CUPS web interface. For environments where SSLv3 support is still needed, it can be re-enabled by adding SSLOptions AllowSSL3 to /etc/cups/cupsd.conf.

Recommendations To resolve the issue, consider updating the configuration by adding SSLOptions AllowSSL3 to /etc/cups/cupsd.conf for environments that require SSLv3 support. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

USN-2839-1

Produtos afetados

Cups

Referências · 3

• https://osv.dev/vulnerability/USN-2839-1 · Aviso do Fabricante
• https://launchpad.net/bugs/1505328 · Nota
• https://ubuntu.com/security/notices/USN-2839-1 · Aviso do Fabricante