[USN-7045-1] libppd vulnerability

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAmb12PMACgkQZWnYVadE
vpP8ow/+OrUKiJa2F0h6j3puIMWyWJy9tzXTqetHsdY0xDur9WuusV6S9f8czZ+U
sZEY8T57JUBTRPB+AcTpLdmC/EeEqgSq2RhZO26objRs7axqD9MbCAoX2JHRW7Sc
K5Fv2xrFW8TjM89T1Pl9UoZls8RsBKE8HzABG2MMZsXSZIFIvOGZlDtMiOB5KIbo
1xanyg5tNpPam1NUWc22GXC2QtuZFthca2EWIS1h08TQk7VAXLGK90qjx064rBKK
7mvCCwmcv9+v98jN/Te46uTJzi9GqBOPhKoKqOR2anEq16Wp9e/LlJuknRV7Ec2l
frFH1j8OfarE6IJbz9OF0AJcVoO9edkmDZNQvzovLPPNwHgBMUv/Che8SvlPKRjZ
XPUu69MKJzyA+EFHHBzx5uKhhc9TDeimrwNpL01TKwfkb4OK+LOdeTXkjjgWl7fe
NLyV0G6prxGznRuso2TxZHmxwBC7kG/cZ0CKnUK58Atwj1uTf3XN/Ac8OK9GkSoA
PPxdxWDaZiFPsaDVPOgd5oX1GE7od7egRvYvi4B3W5xzFV8d78zRrJv7bhWUFgh3
r2YGH6cKI1ErSOAhx08ORn7vPEMVnGcuzowBvzVUtVI6tyY/XWLTsryxKb2+zzKX
xg2lXMuvHQf1YqBr1tbIyVuLFg6XzW3Ec8BPrbdwCNwaGNKwUps=
=YsXf
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7045-1
September 26, 2024

libppd vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

libppd could be made to run programs if it received specially crafted
network traffic.

Software Description:
- libppd: OpenPrinting libppd

Details:

Simone Margaritelli discovered that libppd incorrectly sanitized IPP data
when creating PPD files. A remote attacker could possibly use this issue to
manipulate PPD files and execute arbitrary code when a printer is used.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
libppd-utils 2:2.0.0-0ubuntu4.1
libppd2 2:2.0.0-0ubuntu4.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7045-1
CVE-2024-47175

Package Information:
https://launchpad.net/ubuntu/+source/libppd/2:2.0.0-0ubuntu4.1