cups-filters: CVE-2023-24805

[CamberLoid]

CVE

CVE-2023-24805

Advisories

• Upstream: https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-gpxc-v2m8-fr3x
• Debian: https://security-tracker.debian.org/tracker/DSA-5407-1

Description

It was discovered that missing input sanitising in cups-filters, when using the Backend Error Handler (beh) backend to create an accessible network printer, may result in the execution of arbitrary commands.

• Impact: RCE when using beh
• Severity: High

Solutions

Fix via 1.28.17

[jiegec]

Update to 2.0.0