[CLSA-2026:1792072796] cups: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-15 14:00:07 UTC
Description:
- CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs
CVEs fixed:
Updated packages:
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:e7cc73d9f017e7fc3201e6f28930b6b23fa0d29575767a1d774499b20fd94119
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:72ffb512c355ec9c21b2d2d18343239cb0430b454447a63e983feb1ba16fe18a
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:cf0265959a47b9d14c6bac144df772a24bfe30720f83d86abbb4291399c3e72f
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:5e6c69923f5dd8827305ab6240914ffcb7c5977a45015a61a5a986dba30d9e2a
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:9487d3e19b46c6959aff4698853cc3bd63da6c10537eba0bb2dcb171eca70939
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:f735875384f46bec4f1602637d91b8124ebbba3a20e6187a54b642bf61a0e323
  • cups-filesystem-1.6.3-52.0.1.el7_9.tuxcare.els2.noarch.rpm
    sha:410db63d277d95290c87635cd1657bc2cc6abb8caa48330e0a433d330776b24a
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:a8a2c0fbfd3cefb009e327627d831cf8a0b28c9c50818c190b5396085421e03b
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:d1343f0b83a44c962a40b372b56f986123783f6aeff95b974ff7997c853d3489
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:7e2f94c810debac21ab44314cd818c1cab0726b4fdf5b10b3734beca69831808
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:e1b6d9c9a1057f0bd295e88ca6488c2093c6d767e7a312af0881958d09d87481
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:999ae4b56ae4499164aaa84c9eb2bfd317e491d041bd63aab32c2e816d8c262a
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:a40bf9bf962cb13f775b459468af59b63ed91e15baaae004898061d0fdbb082c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.