The cups-filters package, formerly part of the core CUPS distribution, contains multiple security flaws addressed in this update. CVE-2024-47076 involves the libcupsfilters cfGetPrinterAttributes API failing to sanitize IPP attributes, potentially enabling malicious input handling. Additional vulnerabilities include cups-browsed binding on UDP INADDR_ANY:631 and trusting any packet source, and a remote command injection vulnerability in the cups libppd component via attacker-controlled PPD file data. These issues are fixed in the updated cups-filters package for Red Hat Enterprise Linux 9.2 Extended Update Support and related variants.

These vulnerabilities could allow an attacker to exploit unsanitized IPP attributes or inject commands remotely via crafted PPD files, potentially leading to unauthorized actions or system compromise. The cups-browsed UDP binding issue could allow attackers to send malicious packets that are trusted by the service. Red Hat rates the overall security impact as Important, indicating a high risk but not critical severity. No known exploits in the wild have been reported at this time.

Red Hat has released an updated cups-filters package (version 1.28.7-11.el9_2.2) for Red Hat Enterprise Linux 9.2 Extended Update Support and related variants that addresses these vulnerabilities. Users should apply this update promptly following Red Hat's published guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch.