AlmaLinux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785836378)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785836378 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior,...

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785836378)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785836378 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prio...

CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php (CENTOS6:CLSA-2025:1758796854)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1758796854 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-base...

AlmaLinux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776768072)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776768072 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior,...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.2:CLSA-2026:1786675343)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786675343 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local...

openSUSE 16: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (openSUSE-SU-2026:21893-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21893-1 advisory. This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be...

SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (SUSE-SU-2026:4281-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4281-1 advisory. This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in...

SUSE CVE-2026-95511

Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...

CVE-2026-95511

Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...

CVE-2026-95511

...

CVE-2026-95511

...

EUVD-2026-84335

Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...

CVE-2026-95511

This CVE ID is rejected and does not represent an active vulnerability entry.

CVE-2026-95511

A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure a printer that uses a privileged serial backend. The CUPS scheduler does not restrict the path component of non-file device URIs, ...

Security update for cups

This update for cups fixes the following issue: CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4281-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2026-091448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091448 advisory. A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2026-054024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054024 advisory. A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An...

PT-2026-96687

Name of the Vulnerable Software and Affected Versions CUPS and cups-filters affected versions not specified Description A privilege escalation issue exists in CUPS when used with the cups-filters serial backend. A local user with lpadmin group membership can configure a printer using a privileged...

SUSE-SU-2026:23877-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...