The cups-filters package, which contains components formerly part of the core CUPS distribution, has multiple security issues addressed in this advisory. CVE-2024-47076 concerns the libcupsfilters cfGetPrinterAttributes API failing to sanitize IPP attributes, potentially allowing malicious input to be processed unsafely. Additional vulnerabilities include cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet from any source, and a remote command injection vulnerability in cups libppd via attacker-controlled PPD file data. Red Hat has released an update for Red Hat Enterprise Linux 9.2 Extended Update Support to remediate these issues.

The vulnerabilities could allow an attacker to exploit unsanitized IPP attributes, potentially leading to unauthorized actions or command injection via malicious PPD files. The cups-browsed UDP binding issue may allow processing of untrusted packets. These issues collectively pose a high security risk if exploited, impacting printing system components on affected Red Hat Enterprise Linux 9.2 systems.

Red Hat has released an updated cups-filters package (version 1.28.7-11.el9_2.2) for Red Hat Enterprise Linux 9.2 Extended Update Support that addresses these vulnerabilities. Users should apply this official security update promptly. For detailed update instructions, refer to Red Hat's advisory and article at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the provided update.