[CLSA-2026:1792049053] Fix CVE(s): CVE-2026-107885, CVE-2026-107890
Type:
security
Severity:
Important
Release date:
2026-10-15 07:24:24 UTC
Description:
* SECURITY UPDATE: an in-flight Send-Document on any connection suppressed the submission timeout of every pending job. - debian/patches/CVE-2026-107885.patch: give Create-Job jobs an absolute MultipleOperationTimeout deadline in scheduler/ipp.c and only defer the timeout in cupsdCheckJobs() until it passes. - CVE-2026-107885 * SECURITY UPDATE: NULL dereference on repeated IPP group tags in job-creation requests. - debian/patches/CVE-2026-107890.patch: drop unnamed group-separator attributes in add_job() and add_job_subscriptions() in scheduler/ipp.c. - CVE-2026-107890
CVEs fixed:
Updated packages:
  • cups_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:f4f0dca31d1e7b97a61c2fea834266ee2f73e230
  • cups-bsd_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:7b060ecd9308123d2c4a12ae1c3ab4b06cf45907
  • cups-client_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:1b28e1bc9a8178b98adc328ea199f3128495fbb9
  • cups-common_2.3.3op2-3+deb11u10+tuxcare.els2_all.deb
    sha:bf6c3891c2b58185aa1e2bba956bc839f1e6ad3b
  • cups-core-drivers_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:a20881c80f33894d7df447a424c64975e408cadf
  • cups-daemon_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:8c7526e3269944491075b9a5044cb3644078afac
  • cups-ipp-utils_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:1c3ac085e0d496157c0a826991a0724468104ae4
  • cups-ppdc_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:ec8a09e0d0c2e17f2d5cde77bcd043980d02167d
  • cups-server-common_2.3.3op2-3+deb11u10+tuxcare.els2_all.deb
    sha:a1bd13b9fa113a7fafacaedad72fd0c4c3f9364e
  • libcups2_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:639ace88a4b29c308625e81c262607547995bf8c
  • libcups2-dev_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:a149ed73ec98ddf51451cdf9f3e8f66de80c3714
  • libcupsimage2_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:dadbb0624d368ab61367655ad2e767c18921e4fe
  • libcupsimage2-dev_2.3.3op2-3+deb11u10+tuxcare.els2_amd64.deb
    sha:ff534f53879f75edbd03724c48068250a1450a37
  • cups_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:0003cbe5f73093912ccb866a9310bc3dca6cf177
  • cups-bsd_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:b3af963ac2fc0587cff4984e1564f65277dd1e99
  • cups-client_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:b21bf816c1882ef569ad1b9ec89086a51c31acf0
  • cups-core-drivers_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:a98c08179f50a6cce1425201c205d76d443db4b1
  • cups-daemon_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:5c5a55dc6c73e1d22ffdfde737b06baf2cda723f
  • cups-ipp-utils_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:7f396197df45be0fa9faa6caee04ccb56fb5a8e3
  • cups-ppdc_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:4364bff6d80410397ad00f38c964dbdc2f21f334
  • libcups2_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:78ee18a30c8c1c26ff29cabf77ab6ff23dbfdff1
  • libcups2-dev_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:02c8f05419ade22a5a6c04c98b265aa8a35641c9
  • libcupsimage2_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:937556244787e51d7bd8150b2615f4c0fb6fc230
  • libcupsimage2-dev_2.3.3op2-3+deb11u10+tuxcare.els2_arm64.deb
    sha:819d6b518583f301c946f575d260dd53046ba039
  • cups_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:ac86f6e92d5a44b28a52cf56135fc9ca5351ded8
  • cups-bsd_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:39cb1b927d882b72314e2fc4e461c8b23d003828
  • cups-client_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:9db46cc89f0eb8bce48dd0fe7b6ebbe9bf59a483
  • cups-core-drivers_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:a50741ef3ac567756312664647b90635509936a0
  • cups-daemon_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:d51275c353305c2e0b228675e19724dc2710fec0
  • cups-ipp-utils_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:7321b168c8c87cebae2fed81016c64feb0efaff1
  • cups-ppdc_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:12ae43a84cb5ada5e2192325acda2d8ab35acc07
  • libcups2_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:76651dbcdc6eac752ba7c27de8cd1e89dc8786b8
  • libcups2-dev_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:a3f4b987e6eac68703de610f92f6030afc830daa
  • libcupsimage2_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:a3edcddfefd3b00d09188a1c3fee82dda1ee76ec
  • libcupsimage2-dev_2.3.3op2-3+deb11u10+tuxcare.els2_armel.deb
    sha:b7aadfe225e5831bb9886c2c45557b7103f5f803
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.