[CLSA-2026:1792072653] cups: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-17 14:59:14 UTC
Description:
- CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs
CVEs fixed:
Updated packages:
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:4418cc335e6cf537ab3b919f8059f6fd57a8b5cdb4c6eb7e7829b330922754cd
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:e3b4da735f902168b04d38acd20f8f5ddbcbc6ee008a4e127d70a5b3fdd2f10d
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:de43955460152a579347fe0125976938e90525111f3d306803139a66ed7af922
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:47fa32d91d88fcdafdef5664989d16f4bea4a4068988821bd00fa587db211a0b
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:60333196f8c1bdf115d992f54e885f8675b3e7001f4dc403890e67112ee6fe6a
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:227f6154404c3dfbae92c9d4c11671de8b31658078f64e3c577d7aa2e00ab65a
  • cups-filesystem-1.6.3-52.0.1.el7_9.tuxcare.els2.noarch.rpm
    sha:ec8c785f5d52ef385ca3935f8f3aac1039ab3f1e758e19c9733ae97373effbee
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:ef28a3790a517142c7f54a5fad38393bf6fde2469ad15ac1d66cee1d3de89ef8
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:a776fb3a7669cc0db902560edc1c93f62462675d14237d800ef6ed793688944f
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:33acc14310815cf9a4ddf92ec511ba993b592fc1bfa3018ad0d0635d674cd822
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:bc3d1b00bd9b1e61496a14163fe7f5150bbe1c05b4c4ba5a07f0628411a8a0cc
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:d253a15bf67deea1eb4250804d3074fc9fdc828462bb38a6beebc1961be86a95
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:ee65b14aaed04365f6d6bb44f888ef859027d211e031c335b060795cf7830c84
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.