There are some very significant recent CVEs out for CUPS, the unix printing system.
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=cups
It's an ideal moment to remind relay operators that a Tor node, relay or bridge, should be a single-purpose internet server.
Running alternate internet services is a bad idea. The node should have the minimum packages installed for the purpose of running a node. More packages means more possible vulnerabilities.
Needless to say, a CUPS server listening on 631/tcp or 631/udp while providing Tor access is a bad idea.
g