[CLSA-2026:1794006164] Fix CVE(s): CVE-2026-55453, CVE-2026-55480, CVE-2026-61702
Type:
security
Severity:
Important
Release date:
2026-11-06 23:02:57 UTC
Description:
* SECURITY UPDATE: arbitrary file overwrite through a symlink planted at the predictable temporary PPD path in copy_model(). - debian/patches/CVE-2026-55480.patch: open the temporary PPD file with O_EXCL and O_NOFOLLOW. - CVE-2026-55480 * SECURITY UPDATE: file disclosure through path traversal in the banner path built from attributes-natural-language. - debian/patches/CVE-2026-61702.patch: reject requests with an invalid attributes-natural-language value. - CVE-2026-61702 * SECURITY UPDATE: PPD keyword injection through control characters in printer-supplied strings reported by the ipp backend. - debian/patches/CVE-2026-55453.patch: replace control characters in quoted IPP attribute strings with spaces. - CVE-2026-55453
CVEs fixed:
Updated packages:
  • cups_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:ad3ff3cb77c7c45779383f580a33d36b959a056e
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:a4beac40fa616a23eef8a2bcf37a7ac1e360c084
  • cups-client_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:3596d29c5cba1a12183c3a0ce19fadbcd8d78850
  • cups-common_2.2.10-6+deb10u10+tuxcare.els6_all.deb
    sha:736f06250742b52d951667624155dbd96b270748
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:d781d48e1cd1853e87ae22003f8e10ab5a1194bd
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:eb7021faa24bb7f4457185d040cd59471597c767
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:e1134e5fe0c9b9ca595cb1bc1626bf48f6f2fc43
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:08139e6cbcc4bddf3226b4f6495137e99eea467e
  • cups-server-common_2.2.10-6+deb10u10+tuxcare.els6_all.deb
    sha:70813d26b32c86eefb975190fe763013f45cd41e
  • libcups2_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:251c8fdfdcdcb406623bd1104e67bcb8dcccd606
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:786eeb3f0c61bdefbcafd2844602bc4f5eeea85c
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:79e979dc10a3b53d98625c45e2f4c5533559d4be
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els6_amd64.deb
    sha:12f29bfe268d5933b8e9cb6b6d46157f8598f9c5
  • cups_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:2f0f99181ef24ef714763c18cd253dd6abfd2263
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:6e84dc8dced5a24cacb0035f8d908f888c86a4f5
  • cups-client_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:bbd29db6a79eb8981e53688fcf79c92c412c83ec
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:07cf78ccde98d9f1bb89b6d9e1cdfcfaa3d24c7f
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:3e11b34c3889fe6146ab64bdfad8cc4602a7bab2
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:f351fdd0bdfc265a57b4156b204ce11a29249c79
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:b99316afdd75f46095da49ad4526c92dbae9989f
  • libcups2_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:af92c414ada3d49ece01e396833e5494c2782187
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:78aea4e45954832a967c581699465ec884e96478
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:247989970879f595d2738349031dd524b488e53a
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els6_arm64.deb
    sha:89f4ec958025c6f5b8fe7fb667410446a937c977
  • cups_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:ed47858509d55a3fd7f8ceebd76970c05c23c490
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:5193051eb08acc29bbcb2fb6628eebe52bf4bf8e
  • cups-client_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:49f3585c29487663e2bf932b3b3df9d1cdde576e
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:01feba681f93e6bb7e2110c5e876ac01b85ce378
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:cda2319ab0fb98514b4450f7c81838f85dc506af
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:2c5da98f1d4749089e8d5b35977d202941c73b08
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:761f2a8e4c4f75e728ccad615650a03662f76c8c
  • libcups2_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:f7d908261b8c2a18f9aa73edfa68a02b6c15f0a8
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:7bb83fe57c842fab5c57d0ca4a218edc5dfb70ae
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:145880d46e95457356869d52bf36cf6d185d1890
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els6_armel.deb
    sha:8b4b99c4b5f0192c17083ecf796257d774c8d128
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.