Updated CUPS packages that fix a security issue in PDF handling are now
available for CentOS Linux 3, 4, and 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.
Maurycy Prodeus discovered an integer overflow flaw in the way CUPS processes
PDF files. An attacker could create a malicious PDF file that could
potentially execute arbitrary code when printed. (CVE-2007-3387)
All users of CUPS should upgrade to these updated packages, which contain a
backported patch to resolve this issue.