Headline
Ubuntu Security Notice USN-7043-1
Ubuntu Security Notice 7043-1 - Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to connect to a system, created manipulated PPD files, and execute arbitrary code when a printer is used. This update disables support for the legacy CUPS printer discovery protocol. Simone Margaritelli discovered that cups-filters incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
==========================================================================Ubuntu Security Notice USN-7043-1September 26, 2024cups-filters vulnerabilities==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 22.04 LTS- Ubuntu 20.04 LTSSummary:cups-filters could be made to run programs if it received specially craftednetwork traffic.Software Description:- cups-filters: OpenPrinting CUPS FiltersDetails:Simone Margaritelli discovered that the cups-filters cups-browsed componentcould be used to create arbitrary printers from outside the local network.In combination with issues in other printing components, a remote attackercould possibly use this issue to connect to a system, created manipulatedPPD files, and execute arbitrary code when a printer is used. This updatedisables support for the legacy CUPS printer discovery protocol.(CVE-2024-47176)Simone Margaritelli discovered that cups-filters incorrectly sanitized IPPdata when creating PPD files. A remote attacker could possibly use thisissue to manipulate PPD files and execute arbitrary code when a printer isused. (CVE-2024-47076)Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 22.04 LTS cups-browsed 1.28.15-0ubuntu1.3 cups-filters 1.28.15-0ubuntu1.3Ubuntu 20.04 LTS cups-browsed 1.27.4-1ubuntu0.3 cups-filters 1.27.4-1ubuntu0.3In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-7043-1 CVE-2024-47076, CVE-2024-47176Package Information: https://launchpad.net/ubuntu/+source/cups-filters/1.28.15-0ubuntu1.3 https://launchpad.net/ubuntu/+source/cups-filters/1.27.4-1ubuntu0.3Related news
Ubuntu Security Notice 7044-1 - Simone Margaritelli discovered that libcupsfilters incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
Ubuntu Security Notice 7042-1 - Simone Margaritelli discovered that cups-browsed could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to connect to a system, created manipulated PPD files, and execute arbitrary code when a printer is used. This update disables support for the legacy CUPS printer discovery protocol.
A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain conditions. "A remote unauthenticated attacker can silently replace existing printers' (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print
A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain conditions. "A remote unauthenticated attacker can silently replace existing printers' (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print