cups reports:
2019-12-19

The ippSetValuetag function did not validate the default language value.

CVE-2019-2228
cups-2.2.11p1.tgz

cups-2.2.11p1.tgz