ASA-202102-13 log generated external raw

[ASA-202102-13] cups: information disclosure
Arch Linux Security Advisory ASA-202102-13 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2020-10001 Package : cups Type : information disclosure Remote : No Link : Summary ======= The package cups before version 1:2.3.3op2-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 1:2.3.3op2-1. # pacman -Syu "cups>=1:2.3.3op2-1" The problem has been fixed upstream in version 2.3.3op2. Workaround ========== None. Description =========== A security issue was found in cups before version 2.3.3op2. A missing length check in the ippReadIO function could lead to a buffer over- read. Impact ====== A remote attacker might be able to cause a denial of service or access sensitive information. References ==========