cupshax

CUPSHax Quick proof of concept for the recent CUPS exploit. I was planning to clean it up a lot more, but the embargo was lifted a lot sooner than expected, so the code is a bit rushed. For all the technical details you should honestly just read Evilsocket's writeup. This exploit was written afte...

CLSA-2026-1787304093 Fix CVE(s): CVE-2024-47175, CVE-2024-47176

SECURITY UPDATE: PPD injection through unvalidated IPP attributes in the PPD generator ELSCVE-171480 - debian/patches/CVE-2024-47175.patch: sanitize the make and model, gate every IPP string written into the generated PPD on ippValidateAttribute, and restrict PPD keywords to a safe character set ...

CLSA-2026-1777481673 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...

CLSA-2026-1777480368 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...

CLSA-2025-1741215440 Fix CVE(s): CVE-2024-47175

SECURITY UPDATE: PPD injection issues - debian/patches/CVE-2024-47175.patch: validate URIs, attribute names, capabilities, and sanitize make and model in cups/ppd-cache.c, scheduler/ipp.c - CVE-2024-47175...