<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: foomatic-filters</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2011-2924: foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data b</title><link>https://patchthecve.com/cve/CVE-2011-2924.html</link><guid>https://patchthecve.com/cve/CVE-2011-2924.html</guid><pubDate>Tue, 16 Jun 2026 23:32:15 +0000</pubDate><description>MEDIUM 5.5: foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges </description></item><item><title>CVE-2011-2923: foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by r</title><link>https://patchthecve.com/cve/CVE-2011-2923.html</link><guid>https://patchthecve.com/cve/CVE-2011-2923.html</guid><pubDate>Tue, 16 Jun 2026 23:32:15 +0000</pubDate><description>MEDIUM 5.5: foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of </description></item><item><title>CVE-2010-5325: Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows r</title><link>https://patchthecve.com/cve/CVE-2010-5325.html</link><guid>https://patchthecve.com/cve/CVE-2010-5325.html</guid><pubDate>Tue, 16 Jun 2026 23:26:33 +0000</pubDate><description>CRITICAL 9.8: Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.</description></item><item><title>CVE-2015-8560: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomat</title><link>https://patchthecve.com/cve/CVE-2015-8560.html</link><guid>https://patchthecve.com/cve/CVE-2015-8560.html</guid><pubDate>Wed, 17 Jun 2026 00:34:46 +0000</pubDate><description>HIGH 7.3: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.</description></item><item><title>CVE-2015-8327: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomat</title><link>https://patchthecve.com/cve/CVE-2015-8327.html</link><guid>https://patchthecve.com/cve/CVE-2015-8327.html</guid><pubDate>Wed, 17 Jun 2026 00:34:19 +0000</pubDate><description>HIGH 7.5: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.</description></item><item><title>CVE-2004-0801: Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with acc</title><link>https://patchthecve.com/cve/CVE-2004-0801.html</link><guid>https://patchthecve.com/cve/CVE-2004-0801.html</guid><pubDate>Tue, 16 Jun 2026 22:06:24 +0000</pubDate><description>HIGH 7.5: Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.</description></item></channel></rss>