[CLSA-2026:1793645096] cups: Fix of CVE-2026-107890
Type:
security
Severity:
Important
Release date:
2026-11-02 18:45:08 UTC
Description:
- CVE-2026-107890: drop unnamed group separator attributes from job creation requests in add_job() and add_job_subscriptions() so cupsd does not dereference a NULL attribute name when starting the job
CVEs fixed:
Updated packages:
  • cups-2.2.6-57.el8.tuxcare.els8.i686.rpm
    sha:3a8fe38391538bc79d4d28a91057908cbd0ba7bf23b4e5cd835eedb4063b32af
  • cups-2.2.6-57.el8.tuxcare.els8.x86_64.rpm
    sha:896aa9d4e0d47e465293554583e328f895586ea86ca072b8d6fb19f90e6969da
  • cups-client-2.2.6-57.el8.tuxcare.els8.i686.rpm
    sha:4e71db87a784b213e3ba2f035312821d136e9324aa2a59eea51f2811c88b4068
  • cups-client-2.2.6-57.el8.tuxcare.els8.x86_64.rpm
    sha:e97124571c79770d8a6938fe427c948a439fe31289241adba6483d4d5588f85e
  • cups-devel-2.2.6-57.el8.tuxcare.els8.i686.rpm
    sha:0d8e008306b27de4415ddb23a7cf4151982adf847838b83d8e1d72ea16355e74
  • cups-devel-2.2.6-57.el8.tuxcare.els8.x86_64.rpm
    sha:ce57801d9e9ba2052c10e6743d89684532d9a86e40b6f02364aeb65ac07a2768
  • cups-filesystem-2.2.6-57.el8.tuxcare.els8.noarch.rpm
    sha:6f1b09f02b95c58586b11642cb8ab901ddf3be35b2b097193bb6c72177f2c2b4
  • cups-ipptool-2.2.6-57.el8.tuxcare.els8.i686.rpm
    sha:cd3175a8af922a1579accdb97df17c0d1385bf97a00b5a68e7e0ca315d0f0b68
  • cups-ipptool-2.2.6-57.el8.tuxcare.els8.x86_64.rpm
    sha:4828f312b9fb22be7d6c50d5ba526f6d2d73c79e0ce51cd16863af9aa9cc5da6
  • cups-libs-2.2.6-57.el8.tuxcare.els8.i686.rpm
    sha:0db34edd5bf0973f742ba464c5cf05cd5221b9b38dfeffbcf07a10b00b640599
  • cups-libs-2.2.6-57.el8.tuxcare.els8.x86_64.rpm
    sha:015dd047b6fc7368acc82e7992e2f25d5d8ac27781a7d1ca2444f24b7849cab1
  • cups-lpd-2.2.6-57.el8.tuxcare.els8.i686.rpm
    sha:f78876782fc6ca3c29646c882dcdbdc9853ca72ce6d0e228e9593a5beb3f5dad
  • cups-lpd-2.2.6-57.el8.tuxcare.els8.x86_64.rpm
    sha:6d6e6f8b4d34c97531ebbc0c672e26217053ad9204d290a31eb477fea3f1552a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.