CUPS flaws enable Linux remote code execution, but there’s a catch

A security researcher disclosed four linked CUPS vulnerabilities that can lead to remote code execution when the cups-browsed daemon is enabled and a user prints to a maliciously advertised printer; the attack abuses a foomatic-rip filter in a crafted PPD. Impact is limited because cups-browsed is often disabled by default and exploitation requires local-network access and user interaction; Red Hat rates the issues as Important and recommends stopping/disabling cups-browsed as a mitigation while patches are developed.