CVE-2011-2924

Name	CVE-2011-2924
Description	foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
foomatic-filters (PTS)	jessie, jessie (lts)	4.0.17-5+deb8u1	fixed
	stretch	4.0.17-9	fixed
	buster	4.0.17-11	fixed
	bullseye	4.0.17-12	fixed
	sid, trixie, bookworm	4.0.17-16	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
foomatic-filters	source	squeeze	4.0.5-6+squeeze2
foomatic-filters	source	(unstable)	4.0.12-1	low