It was found that a local attacker can perform limited reads of arbitrary files as root by manipulating cupsd.conf. https://nvd.nist.gov/vuln/detail/CVE-2018-4181
