CVE-2023-32360

NameCVE-2023-32360
DescriptionAn authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1051953

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups (PTS)buster2.2.10-6+deb10u6vulnerable
buster (security)2.2.10-6+deb10u8vulnerable
bullseye (security), bullseye2.3.3op2-3+deb11u2vulnerable
bookworm2.4.2-3+deb12u1vulnerable
trixie, sid2.4.2-6fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cupssource(unstable)2.4.2-61051953

Notes

[bookworm] - cups <no-dsa> (Workaround exist; patch changes only default cupsd.conf; can be fixed via point release)
[bullseye] - cups <no-dsa> (Workaround exist; patch changes only default cupsd.conf; can be fixed via point release)
https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913 (v2.4.3)

Search for package or bug name: Reporting problems