Date: Wed, 14 Nov 2012 10:41:49 -0700 From: Kurt Seifried <kseifried@...hat.com> To: oss-security@...ts.openwall.com Subject: Re: Vulnerabilities in Oki CUPS printer drivers -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/18/2012 02:21 AM, Guido Berhoerster wrote: > > Vulnerabilities in Oki CUPS printer drivers > > The following describes a security vulnerability in several Oki > CUPS drivers. While I'm not aware that these drivers are packaged > in any ditribution, they are free software (licensed under the GPL > v2 or later) and made available via the Oki website and their FTP > server so I hope this is on topic here. Apologies for the delay on this, the files are no longer available on the Oki ftpsite, so I assume the vendor "fixed" this by removing them? I managed to dig up some copies of the file through google but they don't contain the okijobaccounting script or the rastertookimonochrome. So I can't confirm this (can anyone other than the original reporter? (e.g. iSIGHT or iDefense? I'm pretty sure you guys cover Oki as a vendor =). - -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBAgAGBQJQo9fdAAoJEBYNRVNeJnmT4DsP/2FUFLQB9a6qjDBGWsc9NueP UEeQTDsIUrMHfh6dE3Q8WD0CynG1yGRt6SB8NilOm93SnyXN8/oaXyK9wYiFKaBb uVmKdKTaIk/6o4tWOr6fcgFfa77do+y1OlqN6Sw7Ra6EI/9qCO65u1u0fskVy/HY OtcWO8Yx8fNTIKXXekoZwjY6nWV2RJi6/XHzfY9qAvhd2Qv+KyTickIOrOJRIKaW GejpWRMZaPUn1HV1IjGfTiLJYKI4IubvItSIaOO+ctMPPPJl/xtWjQpU3S1FEBJf 3lTqsQpcMc0eMhvj9arJ+BVgUZ/ejkbid/f9DZUuZ+qaJ2TCZEsBl0IYCzSQq2nD PzKCugRK1hJTyaDh4C/pgyNRfp8JshepgKR8jkGG3O/if8z812vmjou6mphI/cSf c0tLI+fp0of3ig9nhrvI8rftl7ZQUqN7Z+kjOWjBGv0PCRPXajBcTkFXlwU/n79L DA4pmqwPln3PnuPem1ZjvT1LnTMOeMstSEZEptuMcIPzPgUsOyQA7ZB6To2hj5l3 /ZLYgQj2vyHssYcXD2p8MqHtXm1+4W8MQsULP07SbOXDUzDA8c7Dm1/ALvu//Z41 PjVPBf3G0CWDGYrjEyybxL5KNBUU6vXO+WlUErecW3dZ4ZYnpEQEXbTtYwoehcST VbGJBYDDRufUHfODc7d/ =lvzJ -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.