CVE-2026-87876: Improper Handling of Case Sensitivity

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

Linux Distros Unpatched Vulnerability : CVE-2026-87876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribu...

PT-2026-89099

Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description The cupsUTF32ToUTF8 function in cups/transcode.c lacks a source-length bound, which allows the system to read past the end of the source buffer. This results in a heap out-of-bounds read, a...

NewStart CGSL MAIN 7.02 : cups Multiple Vulnerabilities (NS-SA-2026-0093)

The remote NewStart CGSL host, running version MAIN 7.02, has cups packages installed that are affected by multiple vulnerabilities: - libppd = 2.1b1 ppdCreatePPDFromIPP2 does not validate or sanitize the IPP attributes when writing them to a temporary PPD file, allowing the injection of attacker...

NewStart CGSL MAIN 7.02 : cups-filters Vulnerability (NS-SA-2026-0089)

The remote NewStart CGSL host, running version MAIN 7.02, has cups-filters packages installed that are affected by a vulnerability: - libppd = 2.1b1 ppdCreatePPDFromIPP2 does not validate or sanitize the IPP attributes when writing them to a temporary PPD file, allowing the injection of attacker...

cups-filters-1.28.17-9.1 on GA media (moderate)

cups-filters-1.28.17-9.1 on GA media Announcement ID: openSUSE-SU-2026:11681-1 Rating: moderate Cross-References: CVE-2026-64611 CVE-2026-64612 CVSS scores: CVE-2026-64611 SUSE : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-64611 SUSE : 7.1...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups-filters (UTSA-2026-106457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106457 advisory. A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the...

OPENSUSE-SU-2026:11681-1 cups-filters-1.28.17-9.1 on GA media

These are all security issues fixed in the cups-filters-1.28.17-9.1 package on the GA media of openSUSE Tumbleweed...

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. CVE-2026-64612: authenticated client that can submit an image print job can...

SUSE-SU-2026:3935-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. - CVE-2026-64612: authenticated client that can submit an image print job...

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. CVE-2026-64612: authenticated client that can submit an image print job can...

SUSE-SU-2026:3918-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. - CVE-2026-64612: authenticated client that can submit an image print job...

Alibaba Cloud Linux 3 : 0277: cups-filters (ALINUX3-SA-2026:0277)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0277 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-64612: A flaw was found in libcupsfilters...

ROOT-OS-DEBIAN-12-CVE-2026-39314 CVE-2026-39314 in cups - Patched by Root

Root has patched CVE-2026-39314 in the cups package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-27447 CVE-2026-27447 in cups - Patched by Root

Root has patched CVE-2026-27447 in the cups package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-39316 CVE-2026-39316 in cups - Patched by Root

Root has patched CVE-2026-39316 in the cups package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34979 CVE-2026-34979 in cups - Patched by Root

Root has patched CVE-2026-34979 in the cups package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34980 CVE-2026-34980 in cups - Patched by Root

Root has patched CVE-2026-34980 in the cups package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-58436 CVE-2025-58436 in cups - Patched by Root

Root has patched CVE-2025-58436 in the cups package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-61915 CVE-2025-61915 in cups - Patched by Root

Root has patched CVE-2025-61915 in the cups package for Root:Debian:12. Multiple fixed versions available...