[CLSA-2026:1794404647] cups: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-11-11 13:44:18 UTC
Description:
- CVE-2026-55480: create the temporary PPD file in copy_model() with O_EXCL|O_NOFOLLOW - CVE-2026-61702: validate attributes-natural-language before using it as a banner directory name
CVEs fixed:
Updated packages:
  • cups-2.2.6-57.el8.tuxcare.els10.i686.rpm
    sha:7b9c4b2620be558c272e8edb7fb2dc9bdc6b9cc99f51dfedc996853df2d33633
  • cups-2.2.6-57.el8.tuxcare.els10.x86_64.rpm
    sha:9afbdf62e325fd13c11af341ebe7521ecd3c2b100a44afac8e01f28f09aadd58
  • cups-client-2.2.6-57.el8.tuxcare.els10.i686.rpm
    sha:75cb7cc233a46842bd293260c684f12dc130bf29ab557fb20fc97a4c084b36e8
  • cups-client-2.2.6-57.el8.tuxcare.els10.x86_64.rpm
    sha:3066874af7befa303a7a4f25d49af4cbc544a75dc3d378abb1898ae3f53827cc
  • cups-devel-2.2.6-57.el8.tuxcare.els10.i686.rpm
    sha:1edf8629abaeadf268b60cc18a826b6a2778a3187860282b52155b98166d435c
  • cups-devel-2.2.6-57.el8.tuxcare.els10.x86_64.rpm
    sha:5fd07a2e9676582c142123e853b0e9c04f59c08421f3c24bc19a548e91e61b20
  • cups-filesystem-2.2.6-57.el8.tuxcare.els10.noarch.rpm
    sha:21f7c687ca0c525bf355370531f5d702c5ee334a62784d55d31926a08ba942d9
  • cups-ipptool-2.2.6-57.el8.tuxcare.els10.i686.rpm
    sha:7b9e87ce4579dd9548044ce545ed1fcd30ab0a715e8c6781d484f98ef17beb4a
  • cups-ipptool-2.2.6-57.el8.tuxcare.els10.x86_64.rpm
    sha:652e77058271a71b04af8e6bf87138890f1c879351718e2ce7230c7dcc1134c3
  • cups-libs-2.2.6-57.el8.tuxcare.els10.i686.rpm
    sha:093ee869807e737c9e7342a84561e3533eb5803aa3c2210e04ee0f0fc3aacc03
  • cups-libs-2.2.6-57.el8.tuxcare.els10.x86_64.rpm
    sha:5f2e84f9ad9f15fea3b5cd6f21c49a62fcbd3fe85f82880e81e5b37b41357fc2
  • cups-lpd-2.2.6-57.el8.tuxcare.els10.i686.rpm
    sha:f396a6cedb5b3a13592f9bac8d9b47b0ed82d31f7906fc7f4f265e6b743d8955
  • cups-lpd-2.2.6-57.el8.tuxcare.els10.x86_64.rpm
    sha:3ffc323ac09f8a0b32aaeddbd5049be14a76c31c90809d8ab7854ea1f2347da2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.