https://bugs.gentoo.org/940313 https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3d20c109332d14672a807353cdc551018 From 95576ec3d20c109332d14672a807353cdc551018 Mon Sep 17 00:00:00 2001 From: Zdenek Dohnal Date: Thu, 26 Sep 2024 23:09:29 +0200 Subject: [PATCH] cfGetPrinterAttributes5(): Validate response attributes before return The destination can be corrupted or forged, so validate the response to strenghten security measures. Fixes CVE-2024-47076 --- a/cupsfilters/ipp.c +++ b/cupsfilters/ipp.c @@ -404,6 +404,14 @@ cfGetPrinterAttributes5(http_t *http_printer, ippDelete(response2); } } + + // Check if the response is valid + if (!ippValidateAttributes(response)) + { + ippDelete(response); + response = NULL; + } + if (have_http == 0) httpClose(http_printer); if (uri) free(uri); return (response);