Re: [PLUG] CUPS flaw

["Rich Mingin \(PLUG\) via plug" <plug@lists.phillylinux.org>]

AFAIK, literally no one on Earth has "fixed" this vulnerability. There
are no safe versions.

Aggressively block/drop port 631 on your firewall, keep your local
network free of possible bad actors, and if you can't do both of
those, I would remove all components of CUPS from any machines you
need to keep secure.

On Mon, Sep 30, 2024 at 12:31 PM Frank via plug
<plug@lists.phillylinux.org> wrote:
>
> My Mint machines all got CUPS updates last week.  How would I know if
> those updates patched this vulnerability?
>
> - Frank
>
>
> On 9/30/24 9:50 AM, jeffv via plug wrote:
> > Critical Linux CUPS Printing System Flaws Could Allow Remote Command
> > Execution
> >
> > https://thehackernews.com/2024/09/critical-linux-cups-printing-system.html
> >
> >
> >
> > "A remote unauthenticated attacker can silently replace existing
> > printers' (or install new ones) IPP urls with a malicious one,
> > resulting in arbitrary command execution (on the computer) when a
> > print job is started (from that computer),"
> > ___________________________________________________________________________
> >
> > Philadelphia Linux Users Group         -- http://www.phillylinux.org
> > Announcements -
> > http://lists.phillylinux.org/mailman/listinfo/plug-announce
> > General Discussion  -- http://lists.phillylinux.org/mailman/listinfo/plug
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug