[CLSA-2026:1792048411] Fix CVE(s): CVE-2026-107885, CVE-2026-107890
Type:
security
Severity:
Important
Release date:
2026-10-15 07:13:43 UTC
Description:
* SECURITY UPDATE: fix denial of service in cupsd where a client holding an in-flight Send-Document request stopped unrelated incomplete jobs from timing out, allowing them to accumulate until MaxJobs. - debian/patches/CVE-2026-107885.patch: give created jobs an absolute pending timeout of now + MultipleOperationTimeout and stop deferring the timeout for in-flight Send-Document requests once it passes in create_job() and cupsdCheckJobs(). - CVE-2026-107885. * SECURITY UPDATE: fix NULL pointer dereference in cupsd caused by repeated IPP group tags in job-creation requests. - debian/patches/CVE-2026-107890.patch: remove unnamed group separator attributes from new job requests in add_job() and add_job_subscriptions() in scheduler/ipp.c. - CVE-2026-107890.
CVEs fixed:
Updated packages:
  • cups_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:75d25530d8511f4b7b1175af34e52e49c90f9bf0
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:6b505c7405fa12f0ec9263767e1ef2a212e07728
  • cups-client_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:4c19937d68cdffafaee3458647d5b7deccc97de2
  • cups-common_2.2.10-6+deb10u10+tuxcare.els5_all.deb
    sha:ada5efb389240beff0c5081933e452b344de3d93
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:89eb0d8ead930d5a3ecd99b72342381e282279c3
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:554aeb3d6f697088021acedea674d43260b6f1df
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:175244b9e01a9012ad406265fbd1fbbc0a5f1763
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:a564d5138e41fdf3d12afda29fb64502459cb558
  • cups-server-common_2.2.10-6+deb10u10+tuxcare.els5_all.deb
    sha:f6e8946b1d6bb947243b9f1bab35160a9e2177b1
  • libcups2_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:1725a3f172821782cb7cc99d46483d35dbe014ed
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:e0c1d300d92f96f659cd9d1773fd4b398ec6f023
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:f5998cce60bd5c281ec77c80031f803b8ec318e2
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els5_amd64.deb
    sha:73d22bfef2dfb601ed54372bcac6fde6e3d7b09c
  • cups_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:05681e39f29465a3dc14a500802f7420c7464a36
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:7296275815f759d33372a4d3e05de74deb0209f3
  • cups-client_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:f5e2445a32154db0b667f2302c99ba961b99b51c
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:ebe5a74f2214c2828b00ab755e938b326ba25ff9
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:6f6cf4c76da3cbf6b813f48633e6675284b6b1ef
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:e65fac22b16e5377b76ce47476e07a9ae1d0f9c0
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:21a118844ed52045f10a962af261cd2f656efdfd
  • libcups2_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:17e6841eb0ef476abf2355469ec2758ea3384fc6
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:19e1a59cd58d2aecd49b9e30eec428de3a851dec
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:39c17223de4dd0dadbfcd85343f1dc1566f15bd6
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els5_arm64.deb
    sha:5fa2538607b99f31b68978562ed861950a40e754
  • cups_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:31689c6803e91cedcbf193a180b1c6319ee3c176
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:602342e0d1ec5095cc9df91c3268db30393ad713
  • cups-client_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:f873051f62e3cbacb867152b9dadab2c17124d6a
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:e1bd0a3068dc65a02443b7d2d778cc42064b8433
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:23aab887ed8914208ab8bbc850789afb202e3f50
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:0a5d8f6a70a473f7a72fc1b268042727cc12e1f4
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:1dedec9521a989c14f505649d5a3dd4794cf0de9
  • libcups2_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:bdfd29f6773bc42a461309a1bbce254b40a69997
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:b8e9bc34bc0f31887bad16950628f38f717152eb
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:7c58dae3c0b47a2549228d4ef79be5263aa940f1
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els5_armel.deb
    sha:1f04137dc185cc74d2f2c5fb8bfe770e40a1744c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.