[CLSA-2026:1791921847] cups: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-13 20:04:18 UTC
Description:
- CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests
Updated packages:
  • cups-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:33ce7ea217f4a04d83ca8548dd2f48ad7fa5cb5fa0f66a3173dcde7aaa266c9f
  • cups-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:ad1035e3457266b89da06eccd121946d43ec174d002c03f12883141c7995aff6
  • cups-devel-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:74f733541d99f42ebcf2a6b852c4bac4d6461bcffa573e469974e1bfeddfefeb
  • cups-devel-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:d84a82fb128169be9457be2dfa404d572fc20bb0b260b84b20f47e3434535b2c
  • cups-libs-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:fe440f6e25d5cd23f0c9f8713f23f139a82dc80ced8863724e51e289e5e2d10d
  • cups-libs-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:bd0335266095827c1f64bf357881b87925c2fa7030354965fc754783ca95e819
  • cups-lpd-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:f52f700a6bd87e4aae59df0654aa7b7542dbdb0eed9f8411b65cf999c9d70e32
  • cups-lpd-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:68e93f74d62d3f93fc4b340c366c29712529779c246ab331e20754d4e1d7e97a
  • cups-php-1.4.2-81.el6_10.tuxcare.els5.i686.rpm
    sha:e0437d8f803072aec81984780610b2dac7052d068d177f4c24b579ae089da144
  • cups-php-1.4.2-81.el6_10.tuxcare.els5.x86_64.rpm
    sha:5e6b4f3bf876741d306287faed949d423e78819b2f085ed76edd181d14bdbb95
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.