Oracle Linux 10 : libcupsfilters (ELSA-2026-56965)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-56965 advisory. - RHEL-214027 CVE-2026-64611 libcupsfilters: Fix infinite loop and empty deviceids in ieee1284 Tenable has extracted the preceding description block...

libcupsfilters security update

1:2.0.0-13 - RHEL-214027 CVE-2026-64611 libcupsfilters: Fix infinite loop and empty deviceids in ieee1284 1:2.0.0-12 - RHEL-212655 CVE-2026-64612 libcupsfilters: Handle libpng errors via longjmp/setjmp to prevent process abort on malformed PNG...

UBUNTU-CVE-2026-64611

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

CVE-2026-46151

In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblpctrlmsg collapses the usbcontrolmsg return value to 0/-errno, discarding the actual number of bytes transferred. A broken printer can complete the GETDEVICE...