[CLSA-2026:1792166076] Fix CVE(s): CVE-2026-107890
Type:
security
Severity:
Important
Release date:
2026-10-16 15:54:48 UTC
Description:
* SECURITY UPDATE: denial of service via repeated IPP group tags - debian/patches/CVE-2026-107890.patch: drop unnamed group separator attributes from job creation requests in scheduler/ipp.c add_job() and add_job_subscriptions() so cupsd does not dereference a NULL attribute name when starting the job; based on upstream commit f3fb41912e4e29dbbbe7c4afd4fe48508af21bc0 - CVE-2026-107890
CVEs fixed:
Updated packages:
  • cups_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:394bf65e7999881ca61d90edc691e02caf663857
  • cups-bsd_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:593a304f3a75003ddd4dded211c8b9ad90767242
  • cups-client_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:27a0c48de9837527fab7764f32e3028e7d205fa9
  • cups-common_2.3.1-9ubuntu1.9+tuxcare.els5_all.deb
    sha:5f8af4cf34b3747e37d0110e0aed69d3dde97623
  • cups-core-drivers_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:7f16f30762a8df545a8d4b369c88b4cbf2161145
  • cups-daemon_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:37cb520b1684ebb7acaf3afa9b215bdfea8b49d1
  • cups-ipp-utils_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:8c2bb72e534f32e69ef2c6658c9ae09bcc156549
  • cups-ppdc_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:e7190455867348ac052fd4583ac75aa06fb2414c
  • cups-server-common_2.3.1-9ubuntu1.9+tuxcare.els5_all.deb
    sha:1126610c1c54468188c90b5e7ed7ea8eb18d3ce9
  • libcups2_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:bd5f5be3596a4998c57ddabcf5b2d4f96d0769e9
  • libcups2-dev_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:2b21c749313441cae901320db6e224300ad30f8f
  • libcupsimage2_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:9ca83f846e85f70f1f171cb9bc53fde33785b7aa
  • libcupsimage2-dev_2.3.1-9ubuntu1.9+tuxcare.els5_amd64.deb
    sha:a91bf67ce709324435f270b1f20ac68664ce334e
  • cups_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:acb5f673746e7eacd617092c8d60e5e106804741
  • cups-bsd_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:ad6a97d5d3ed6ad09b28252d4d85810cddd83486
  • cups-client_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:44586705aaad44f45c817dc88092eb315c5ef733
  • cups-core-drivers_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:a1ef158657cd273bbda017e806c6e1815fc5ad37
  • cups-daemon_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:41dfcd71270fbb0f64195042d14d758520bdf4ce
  • cups-ipp-utils_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:2e63798e4e2cb8362a4435a55b8dfb6ede72498d
  • cups-ppdc_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:08f1d419f2fbee38e2c233fdd761a580062a63ab
  • libcups2_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:4b2114b311cefb0e1d16ebe802bfce84736cdbb1
  • libcups2-dev_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:5c2d0a95d1c28f7da4a11b1ef3bc76bf661b9a47
  • libcupsimage2_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:08756b1789fd041c5bab89e850efcd67277fb042
  • libcupsimage2-dev_2.3.1-9ubuntu1.9+tuxcare.els5_arm64.deb
    sha:10f1a4f5c20b7fbedb1f64e0a2b0beaa89eb9314
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.