Severe Unauthenticated RCE Flaw (CVSS 9.9) in GNU/Linux Systems Awaiting Full Disclosure

[dalto]

At this point, let’s move the discussion to this topic to keep the solutions in one place:

Cups is affected by a security vulnerability [26 September 2024]

As of writing there is no Linux fix available for this high profile security issue. In the meantime it’s recommended to disable and remove the “cups-browsed” service, updating CUPS, or at least blocking all traffic to UDP port 631. Source: systemctl status cups-browsed to check if you have it enabled sudo systemctl disable --now cups-browsed to stop/disable. But with this you will not be able to use network printers added automatically, you may need to add network printer manually af…