CLSA-2026-1787304093

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787304093
Upstream
CVE (2)
Published
2026-08-21T09:21:43Z
Modified
2026-10-26T09:31:47Z
Summary
Fix CVE(s): CVE-2024-47175, CVE-2024-47176
Details
  • SECURITY UPDATE: PPD injection through unvalidated IPP attributes in the PPD generator (ELSCVE-171480)
    • debian/patches/CVE-2024-47175.patch: sanitize the make and model, gate every IPP string written into the generated PPD on ippValidateAttribute(), and restrict PPD keywords to a safe character set in cupsfilters/ppdgenerator.c.
    • CVE-2024-47175
  • SECURITY UPDATE: cups-browsed creates print queues from unauthenticated packets on UDP port 631 (ELSCVE-171473)
    • debian/patches/CVE-2024-47176.patch: drop "cups" from the default BrowseRemoteProtocols in configure.ac, so the legacy CUPS browsing listener is not enabled.
    • CVE-2024-47176
References

Affected packages

TuxCare:Ubuntu:18.04
cups-browsed

Package

Name
cups-browsed
Purl
pkg:deb/tuxcare/cups-browsed?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"
cups-filters

Package

Name
cups-filters
Purl
pkg:deb/tuxcare/cups-filters?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"
cups-filters-core-drivers

Package

Name
cups-filters-core-drivers
Purl
pkg:deb/tuxcare/cups-filters-core-drivers?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"
libcupsfilters-dev

Package

Name
libcupsfilters-dev
Purl
pkg:deb/tuxcare/libcupsfilters-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"
libcupsfilters1

Package

Name
libcupsfilters1
Purl
pkg:deb/tuxcare/libcupsfilters1?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"
libfontembed-dev

Package

Name
libfontembed-dev
Purl
pkg:deb/tuxcare/libfontembed-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"
libfontembed1

Package

Name
libfontembed1
Purl
pkg:deb/tuxcare/libfontembed1?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787304093.json"