CVE-2023-32360

NameCVE-2023-32360
DescriptionAn authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-3594-1, ELA-978-1
Debian Bugs1051953

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups (PTS)jessie, jessie (lts)1.7.5-11+deb8u12fixed
stretch (security)2.2.1-8+deb9u8vulnerable
stretch (lts), stretch2.2.1-8+deb9u11fixed
buster2.2.10-6+deb10u6vulnerable
buster (security)2.2.10-6+deb10u9fixed
bullseye2.3.3op2-3+deb11u6fixed
bullseye (security)2.3.3op2-3+deb11u2vulnerable
bookworm2.4.2-3+deb12u5fixed
sid, trixie2.4.7-1.2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cupssourcejessie1.7.5-11+deb8u12ELA-978-1
cupssourcestretch2.2.1-8+deb9u11ELA-978-1
cupssourcebuster2.2.10-6+deb10u9DLA-3594-1
cupssourcebullseye2.3.3op2-3+deb11u4
cupssourcebookworm2.4.2-3+deb12u2
cupssource(unstable)2.4.2-61051953

Notes

https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913 (v2.4.3)

Search for package or bug name: Reporting problems