The cups-filters package, which contains components formerly part of CUPS, has multiple security issues fixed in the Red Hat Enterprise Linux 8.8 update. Notably, CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize IPP attributes, potentially allowing malicious data to be processed. Additional vulnerabilities include cups-browsed trusting any UDP packet on port 631 and a remote command injection vulnerability in the cups libppd component via attacker-controlled PPD file data. The update addresses these issues by applying patches to sanitize inputs and restrict network bindings. Red Hat has issued this update as an important security advisory (RHSA-2024:7462) with affected packages available for multiple architectures and variants of RHEL 8.8.

These vulnerabilities could allow an attacker to exploit unsanitized IPP attributes or attacker-controlled data in PPD files to execute unintended commands or cause other security issues. The cups-browsed UDP binding issue could allow unauthorized network packets to be trusted. The overall impact is rated as important by Red Hat, indicating a significant security risk if unpatched.

Red Hat has released an official security update for cups-filters in Red Hat Enterprise Linux 8.8 Extended Update Support and Extended Life Cycle Long Life versions. Users should apply the update as described in Red Hat advisory RHSA-2024:7462 to remediate these vulnerabilities. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch.