[CLSA-2026:1791920953] cups: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-17 13:12:16 UTC
Description:
- CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests
Updated packages:
  • cups-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:c29b3c6847ab2e324f28d957f4e86fa86b7f6f347969039d65fb7b8408f76bef
  • cups-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:cd150d8ba8d8671ca59ca2b93ececcd8ef77ddf1731d4a07a9987969a6af8be0
  • cups-devel-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:9bc1b712023f6c0d6131b612e4b5ed89991b40e860215a9474e5d72f3276fa46
  • cups-devel-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:3e9a5bc2fa43b36b83fcadb7d06fa5a53baa8228c0270f425eedeb690481db73
  • cups-libs-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:1b38a4f945f29a21cec939f9ca2d4369fd948e687c029cd77cb97397a442e28f
  • cups-libs-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:608bdef3a8add484f80d3b117d0052e383b95922cfd7030bfbf17c3ca4e655c5
  • cups-lpd-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:4c9839fc2d4d32ce558cb11e503d1ed9657acd8a92468f391c545a40bd90c17b
  • cups-lpd-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:4f56a7e2ab94a8d54d98b3e3c9686f58ad40e2d67795657a59c352469fd78b12
  • cups-php-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:46088c4bfa55c5b42038aa9ecd473d0e4e12742027bcbf0e95437049710bc319
  • cups-php-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:97db03f04fe4475db5ec34e6c4285d5ed648dc4814f37d6a154b241a5fafb205
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.