CVE-2026-27447 affecting package cups for versions less than 2.4.17-1

CVE-2026-27447 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34979 affecting package cups for versions less than 2.4.17-1

CVE-2026-34979 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34990 affecting package cups for versions less than 2.4.17-1

CVE-2026-34990 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34980 affecting package cups for versions less than 2.4.17-1

CVE-2026-34980 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2026:10589-1 cups-2.4.17-1.1 on GA media

These are all security issues fixed in the cups-2.4.17-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : cups (2026-82a2214b53)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-82a2214b53 advisory. 2.4.17 - security fixes for CVE-2026-39316, CVE-2026-39314, CVE-2026-34979, CVE-2026-34990, CVE-2026-27447, CVE-2026-34978 Tenable has extracted the...

The vulnerability of the cupsd server daemon in the CUPS printing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the cupsd server printing service in CUPS is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

cups: CUPS: Denial of Service via integer underflow in IPP attribute handling

A flaw was found in CUPS, an open-source printing system. An unprivileged local user can exploit an integer underflow vulnerability by providing a negative job-password-supported Internet Printing Protocol IPP attribute. This manipulation causes the cupsd root process to crash, which can be...

cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authentication

A flaw was found in OpenPrinting CUPS. A local unprivileged user can exploit this vulnerability by coercing the cupsd service to authenticate to an attacker-controlled Internet Printing Protocol IPP service. This allows the user to create a persistent printer queue that can overwrite arbitrary...

cups: Slow client communication leads to a possible DoS attack

A flaw was found in cups. A client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients...

cups: cups-filters: cups-filters: Out-of-bounds write via crafted PDF MediaBox

A flaw was found in cups-filters. This vulnerability allows an out-of-bounds write via a crafted Portable Document Format PDF file with a large MediaBox value...

cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

A flaw was found in OpenPrinting CUPS. An unauthorized client can exploit this vulnerability by sending a specially crafted print job to a shared PostScript queue without authentication. The server improperly handles the page-border value, allowing an attacker to embed and reparse malicious text ...

cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison

A flaw was found in OpenPrinting CUPS. This authorization bypass vulnerability allows an unprivileged user to gain unauthorized access to restricted operations. This can be exploited by using a username that differs only in case from an authorized user during authorization checks...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.17-1.hum1 aarch64, x8664 cups-client-2.4.17-1.hum1 aarch64, x8664 cups-devel-2.4.17-1.hum1 aarch64, x8664 cups-filesystem-2.4.17-1.hum1 noarch cups-ipptool-2.4.17-1.hum1 aarch64,...

OESA-2026-1931 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: OpenPrinting CUPS is an open source printing system for Linux and othe...

OESA-2026-1933 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: OpenPrinting CUPS is an open source printing system for Linux and othe...

SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (SUSE-SU-2026:1399-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1399-1 advisory. This update for cups fixes the following issue: - CVE-2026-34990: Local print admin token disclosure using temporary...

Slackware Linux 15.0 / current cups Multiple Vulnerabilities (SSA:2026-107-01)

The version of cups installed on the remote host is prior to 2.4.17. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-107-01 advisory. New cups packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups (UTSA-2026-010663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010663 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coer...

Fedora 45 : cups (2026-7d1173fd68)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7d1173fd68 advisory. Automatic update for cups-2.4.17-1.fc45. Changelog Fri Apr 17 2026 Zdenek Dohnal - 1:2.4.17-1 - 2.4.17 fedora2456363, fedora2456362, fedora2454994,...