[CLSA-2026:1792071609] cups: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-15 13:40:19 UTC
Description:
- CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs
CVEs fixed:
Updated packages:
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:697d850c937427ea890530e61051e3af7665eb56ef0a5ad4780ca0248654df56
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:9ec127b4bf4b1e0c3d9901c7a7adc7be3a7de3b66079115ed9580d886e42b023
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:7c6141628b0b3970948efb21fbd3a7b94f08007299cb76244ce84e11c6d96937
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:da1560c27b314c2a4ac7b750fa7b6ec9fa856308831504c027d3b177e9749967
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:423941bb5351ba23829df58047de2f0e71d35f90d037be5988ab5b52de4fc2cb
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:f4e0c76b0f5c10923571e27bdda8bf967e72bb3d94d866ef495389af53e6ada3
  • cups-filesystem-1.6.3-52.0.1.el7_9.tuxcare.els2.noarch.rpm
    sha:bdd1818ec9a0dd4ec8d31e04efac50773c8e37eb50ce56743edfb94b2f14c50a
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:5dcc8407ba7dcc4c2e6aa0bd7ef25b880a6c2f173f5901150cf8d1686d28b3ec
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:3e391f7e5bc622371c4eb5405720b7b8391e2faf509a0760e855419548729882
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:fc80caceab64837f2d0e20750c25d12bf5c14a8ae718d652b212d39893d95226
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:4ef9b4568204f38bbd959f306150d8e8bd138aa935d56ec599ed257a64480ec4
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els2.i686.rpm
    sha:0197ff4d48581c77f6f18c8168cc22c874d6b3f41f30ca6a72aa7c2a304aee70
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els2.x86_64.rpm
    sha:f241befffaf73123930e9ed6953559115f0895b44280719c510783456ef216df
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.