[CLSA-2026:1791849789] Fix CVE(s): CVE-2026-107885, CVE-2026-107886, CVE-2026-107888
Type:
security
Severity:
Important
Release date:
2026-10-13 00:03:21 UTC
Description:
* SECURITY UPDATE: NULL pointer dereference on held jobs - debian/patches/CVE-2026-107888.patch: abort a held job whose destination printer or class has gone away instead of dereferencing a NULL printer in scheduler/job.c cupsdCheckJobs(); backport of upstream commit c5fc041ca0a211f8e69854907be7b55f56955659 - CVE-2026-107888 * SECURITY UPDATE: double free in printer-class management - debian/patches/CVE-2026-107886.patch: clear the class printers pointer after freeing it in scheduler/ipp.c add_class(); backport of upstream commit 13bc9d4f8d695403d54469cc3c8b675e34a7037f - CVE-2026-107886 * SECURITY UPDATE: resource exhaustion via held Send-Document requests - debian/patches/CVE-2026-107885.patch: bound the time an in-flight Send-Document may delay the submission timeout to MultipleOperationTimeout in scheduler/ipp.c, scheduler/job.c and scheduler/job.h; backport of upstream commit 3bb26257e343d2da2bee12bcc1e7a9b283fe4bec - CVE-2026-107885
CVEs fixed:
Updated packages:
  • cups_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:79e812a5224b45a175d8fda1b0f775e320485578
  • cups-bsd_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:40e20fdac2ab077785643dec56f580dff84cb073
  • cups-client_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:0dc4ee62242d25bbe51c02d13c1dab333fe48561
  • cups-common_2.3.1-9ubuntu1.9+tuxcare.els4_all.deb
    sha:6397afa925345ee5e9b145ff701bf715698b61e6
  • cups-core-drivers_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:cfd87d2889da75c4aed6c7d447fe6be3c3ebee8c
  • cups-daemon_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:3bf3eef37ffc07bae5f5bb2631710b2ed3a23bcb
  • cups-ipp-utils_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:bead39a72f3ddb6e3dfb9c9ac2e0f3a81ecbd2c7
  • cups-ppdc_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:981ecc0fcb8472a759309084fbd16ebb7baf64ab
  • cups-server-common_2.3.1-9ubuntu1.9+tuxcare.els4_all.deb
    sha:498d0b5b90a484d40feb00bed97d1ed7fd27b29e
  • libcups2_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:1d988f37c3c156debb1c21fe3ace62b1814ae84d
  • libcups2-dev_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:93131895a190297a21567ff9327d0eb9bdcb4fa7
  • libcupsimage2_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:1a3036603bebf8ebf05363a5b9cde32568956fe0
  • libcupsimage2-dev_2.3.1-9ubuntu1.9+tuxcare.els4_amd64.deb
    sha:cc1b90af0e95c10bf3bfa041ceee0fb64f33d8b6
  • cups_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:89962bc40b49e5fd817671462b4c2f30f8d58d7e
  • cups-bsd_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:056d1a3588576b04053d5b58af3c7570160add30
  • cups-client_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:e9d23c34e00ade9f8a8686cc450cc20e11106515
  • cups-core-drivers_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:854df75c8aabc592bcdd18eb2493003f04fc6652
  • cups-daemon_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:48380a729a545949d43db5368878534ba43c8cc6
  • cups-ipp-utils_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:6b656ab80540d16a9db2b7929fb5952da2021040
  • cups-ppdc_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:948863026385d353133ee46644f09348e7cc7b5b
  • libcups2_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:bbacfd214755590a8219e8b3c9aa059189d8164c
  • libcups2-dev_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:bf6f056ed7ea08817f445ba3bb2021f842aa50be
  • libcupsimage2_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:43473adcbdd8a99e6f806987972f8791d880dab4
  • libcupsimage2-dev_2.3.1-9ubuntu1.9+tuxcare.els4_arm64.deb
    sha:3cd7b231e6750e0c6a1b02f3ab75b988b3890712
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.