Multiple vulnerabilities in OpenPrinting packages

[KexyBiscuit]

Affected package (and version)

cups-browsed (2.0.0), libcupsfilters (2.0.0), libppd (2.0.0), cups (2.4.10-1)

CVE ID(s)

CVE-2024-47076, CVE-2024-47076, CVE-2024-47175

Severity

0-day

Other security advisory ID(s）

• https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8
• https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
• https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6

Description/References

• https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Patch(es)/Solution(s)

See #8098.

[KexyBiscuit]

No fix available for cups-filters (2.0.0-1) CVE-2024-47177 (GHSA-p9rh-jxmq-gq47) at the time of writing.