[CLSA-2026:1794006330] Fix CVE(s): CVE-2026-55453, CVE-2026-55480, CVE-2026-61702
Type:
security
Severity:
Important
Release date:
2026-11-06 23:05:42 UTC
Description:
* SECURITY UPDATE: arbitrary file overwrite through a symlink planted at the predictable temporary PPD path in copy_model(). - debian/patches/CVE-2026-55480.patch: open the temporary PPD file with O_EXCL and O_NOFOLLOW. - CVE-2026-55480 * SECURITY UPDATE: file disclosure through path traversal in the banner path built from attributes-natural-language. - debian/patches/CVE-2026-61702.patch: reject requests with an invalid attributes-natural-language value. - CVE-2026-61702 * SECURITY UPDATE: PPD keyword injection through control characters in printer-supplied strings reported by the ipp backend. - debian/patches/CVE-2026-55453.patch: replace control characters in quoted IPP attribute strings with spaces. - CVE-2026-55453
CVEs fixed:
Updated packages:
  • cups_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:f5f75461759ff0d55110d0180f0826c932f121e6
  • cups-bsd_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:98b628cb443f98c894313b46a8201790f5f29576
  • cups-client_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:7bc5209bc047b7a079bf4a091d9cbb338b25ca25
  • cups-common_2.3.3op2-3+deb11u10+tuxcare.els3_all.deb
    sha:8e3e215776f843e69f9b1afe958e2346fbd0fdc2
  • cups-core-drivers_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:08b90261973b664947917b5e1e420ce076b4fe5d
  • cups-daemon_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:46e1636d4e329b22eae76c824c5a8c7dac321857
  • cups-ipp-utils_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:c50018ae41f40e2d49d556aabe1758b5d5c72ec0
  • cups-ppdc_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:bf015dcf56de94f999a28b828749c53fbf4cdcac
  • cups-server-common_2.3.3op2-3+deb11u10+tuxcare.els3_all.deb
    sha:c5081f13d32f2f176657e13fc11ce60fda2d6ccf
  • libcups2_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:b7d28cee62de35028b774bece6b808b955de0ea2
  • libcups2-dev_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:698c54495988520863c77519ae79b1ae9cfd710f
  • libcupsimage2_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:c76d0109bede339eb5cf6cfad77e55c01f416fbc
  • libcupsimage2-dev_2.3.3op2-3+deb11u10+tuxcare.els3_amd64.deb
    sha:b2731f5473a0df6d9363894e9796f97976504196
  • cups_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:87ec246ed812053931f47515d1dd8aacd6c1a763
  • cups-bsd_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:25e45ed7c8353a9cea6f93e29bcc3b52c8b8bbc6
  • cups-client_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:b0ca1da4e0bc15f91753bb83d6a6b405f6815607
  • cups-core-drivers_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:d9da1e7d5c0a5b7cb79f9f7a6e730036e884565a
  • cups-daemon_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:80aed2c47ae12b03b2af3eb1b1b9dad6bba5c315
  • cups-ipp-utils_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:98811c32379d67947fe37d7418f78906ed4c2689
  • cups-ppdc_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:413a2b7614000caf92cecc2eed75424a78a996b0
  • libcups2_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:02c9290ddf0a576e5f58ad09e66ae2af2bb902b7
  • libcups2-dev_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:33a8060e1f33898450b8a99b850e3c46049f2077
  • libcupsimage2_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:7885a49095bcf20da8df2280c8c0670eea9f579f
  • libcupsimage2-dev_2.3.3op2-3+deb11u10+tuxcare.els3_arm64.deb
    sha:11c8f7c7f409c043de7a7637bc96e89428bdcd78
  • cups_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:801237b254d712e3cbfe385168744f0b89c838fa
  • cups-bsd_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:5a6b54b6501772292f3a50b5ecfd6fb6ad46f24a
  • cups-client_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:39de18e1478b3c4ee40b39b320cf3216bcacde31
  • cups-core-drivers_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:b6636ead6ad90938644a1a4deb90ad5998ffb026
  • cups-daemon_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:28a026d96f8f333e4eab1402f2bdab8b292f0706
  • cups-ipp-utils_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:c086e4ad1c8eb0654d982ded0680a096f87ad11b
  • cups-ppdc_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:c4bbfdc4e3a6733084603b2d25c3795fd7105ca2
  • libcups2_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:b6325ae58c911671a277d7bb7ca79f70cb736523
  • libcups2-dev_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:b77309c87295b0f757c75da3d1dcb6e2d5de0d6e
  • libcupsimage2_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:0186c6fbf597591b010cbf7237c39c199ca1b1df
  • libcupsimage2-dev_2.3.3op2-3+deb11u10+tuxcare.els3_armel.deb
    sha:382f8287818f3207d728feb85ea0c94153fe7de3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.