UBUNTU-CVE-2026-55467
- Source
- https://ubuntu.com/security/CVE-2026-55467
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55467.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-55467
- Upstream
- Published
- 2026-10-15T18:17:00Z
- Modified
- 2026-10-28T20:17:22Z
- Severity
-
- 2.5 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the cupsdCreateJob option-string builder in scheduler/job.c maps attacker-controlled destination-uri and pre-dial-string values from a configured fax queue to the phone and faxPrefix options. Unlike ordinary IPP job attributes, these mapped fax values bypass the control-character sanitizer and are copied directly into the filter options argument. A user permitted to submit a job can therefore inject control characters into the downstream option stream. The reporter states that a downstream fax filter passing these values to a shell or modem command could execute code as lp, while the maintainer states that CUPS has no confidentiality or integrity impact because the only known code-executing filter is optional Foomatic and addressed separately, leaving possible disruption of the affected queue. This issue is fixed in version 2.4.20.
- References
Affected packages
Ubuntu:22.04:LTS
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.28.10-2
1.28.11-1
1.28.11-2
1.28.12-1
1.28.13-0ubuntu1
1.28.14-1
1.28.15-0ubuntu1
1.28.15-0ubuntu1.2
1.28.15-0ubuntu1.3
1.28.15-0ubuntu1.4
1.28.15-0ubuntu1.5
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-browsed",
"binary_version": "1.28.15-0ubuntu1.5"
},
{
"binary_name": "cups-filters",
"binary_version": "1.28.15-0ubuntu1.5"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "1.28.15-0ubuntu1.5"
},
{
"binary_name": "libcupsfilters1",
"binary_version": "1.28.15-0ubuntu1.5"
},
{
"binary_name": "libfontembed1",
"binary_version": "1.28.15-0ubuntu1.5"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}Ubuntu:24.04:LTS
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-filters",
"binary_version": "2.0.0-0ubuntu4.1"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "2.0.0-0ubuntu4.1"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}libcupsfilters
Package
- Name
- libcupsfilters
- Purl
- pkg:deb/ubuntu/libcupsfilters?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.0.0-0ubuntu1
2.0.0-0ubuntu6
2.0.0-0ubuntu7
2.0.0-0ubuntu7.1
2.0.0-0ubuntu7.2
Ecosystem specific
{
"binaries": [
{
"binary_name": "libcupsfilters-tests",
"binary_version": "2.0.0-0ubuntu7.2"
},
{
"binary_name": "libcupsfilters2-common",
"binary_version": "2.0.0-0ubuntu7.2"
},
{
"binary_name": "libcupsfilters2t64",
"binary_version": "2.0.0-0ubuntu7.2"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}Ubuntu:26.04:LTS
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=resolute
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-filters",
"binary_version": "2.0.1-0ubuntu4.1"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "2.0.1-0ubuntu4.1"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}libcupsfilters
Package
- Name
- libcupsfilters
- Purl
- pkg:deb/ubuntu/libcupsfilters?arch=source&distro=resolute
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "libcupsfilters-tests",
"binary_version": "2.1.1-0ubuntu5"
},
{
"binary_name": "libcupsfilters2-common",
"binary_version": "2.1.1-0ubuntu5"
},
{
"binary_name": "libcupsfilters2t64",
"binary_version": "2.1.1-0ubuntu5"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}Ubuntu:26.10
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=stonking
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-filters",
"binary_version": "2.0.1-0ubuntu5"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "2.0.1-0ubuntu5"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}libcupsfilters
Package
- Name
- libcupsfilters
- Purl
- pkg:deb/ubuntu/libcupsfilters?arch=source&distro=stonking
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "libcupsfilters-tests",
"binary_version": "2.1.1-0ubuntu5"
},
{
"binary_name": "libcupsfilters2-common",
"binary_version": "2.1.1-0ubuntu5"
},
{
"binary_name": "libcupsfilters2t64",
"binary_version": "2.1.1-0ubuntu5"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}Ubuntu:Pro:16.04:LTS
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=esm-infra%2Fxenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.0.76-1
1.1.0-1
1.1.0-1build1
1.3.0-1
1.4.0-1
1.5.0-1
1.6.0-1
1.7.0-1
1.8.1-1
1.8.2-1
1.8.2-2
1.8.2-2ubuntu2
1.8.2-2ubuntu3
1.8.3-2ubuntu1
1.8.3-2ubuntu2
1.8.3-2ubuntu3
1.8.3-2ubuntu3.1
1.8.3-2ubuntu3.4
1.8.3-2ubuntu3.5
1.8.3-2ubuntu3.5+esm1
1.8.3-2ubuntu3.5+esm2
1.8.3-2ubuntu3.5+esm3
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-browsed",
"binary_version": "1.8.3-2ubuntu3.5+esm3"
},
{
"binary_name": "cups-filters",
"binary_version": "1.8.3-2ubuntu3.5+esm3"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "1.8.3-2ubuntu3.5+esm3"
},
{
"binary_name": "libcupsfilters1",
"binary_version": "1.8.3-2ubuntu3.5+esm3"
},
{
"binary_name": "libfontembed1",
"binary_version": "1.8.3-2ubuntu3.5+esm3"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}Ubuntu:Pro:18.04:LTS
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=esm-infra%2Fbionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.17.9-0ubuntu1
1.17.9-1
1.20.0-2
1.20.1-1
1.20.1-1build1
1.20.2-0ubuntu1
1.20.2-0ubuntu2
1.20.2-0ubuntu3
1.20.2-0ubuntu3.1
1.20.2-0ubuntu3.3
1.20.2-0ubuntu3.3+esm1
1.20.2-0ubuntu3.3+esm2
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-browsed",
"binary_version": "1.20.2-0ubuntu3.3+esm2"
},
{
"binary_name": "cups-filters",
"binary_version": "1.20.2-0ubuntu3.3+esm2"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "1.20.2-0ubuntu3.3+esm2"
},
{
"binary_name": "libcupsfilters1",
"binary_version": "1.20.2-0ubuntu3.3+esm2"
},
{
"binary_name": "libfontembed1",
"binary_version": "1.20.2-0ubuntu3.3+esm2"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}Ubuntu:Pro:20.04:LTS
cups-filters
Package
- Name
- cups-filters
- Purl
- pkg:deb/ubuntu/cups-filters?arch=source&distro=esm-infra%2Ffocal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.25.11-0ubuntu1
1.25.11-1
1.25.12-1
1.25.13-1
1.26.0-1
1.26.1-1
1.26.2-1
1.27.0-1
1.27.0-2
1.27.1-1
1.27.1-2
1.27.1-3
1.27.2-1
1.27.3-1
1.27.4-1
1.27.4-1ubuntu0.2
1.27.4-1ubuntu0.3
1.27.4-1ubuntu0.4
1.27.4-1ubuntu0.4+esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "cups-browsed",
"binary_version": "1.27.4-1ubuntu0.4+esm1"
},
{
"binary_name": "cups-filters",
"binary_version": "1.27.4-1ubuntu0.4+esm1"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "1.27.4-1ubuntu0.4+esm1"
},
{
"binary_name": "libcupsfilters1",
"binary_version": "1.27.4-1ubuntu0.4+esm1"
},
{
"binary_name": "libfontembed1",
"binary_version": "1.27.4-1ubuntu0.4+esm1"
}
],
"priority_reason": "BellSoft advisory reference suggests a Java/OpenJDK-related CVE; Ubuntu ships OpenJDK packages, so a Java component issue is plausibly in scope."
}