OESA-2026-4138 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers.. Security Fixes: The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a...

openSUSE 16: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (openSUSE-SU-2026:21893-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21893-1 advisory. This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be...

SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / libcups2 / etc (SUSE-SU-2026:4281-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4281-1 advisory. This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in...

Security update for cups

This update for cups fixes the following issue: CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4281-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

SUSE-SU-2026:23877-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

SUSE-SU-2026:23925-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

OPENSUSE-SU-2026:21893-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

SUSE SLES12 Security Update : cups (SUSE-SU-2026:4216-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4216-1 advisory. This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to...

Security update for cups

This update for cups fixes the following issue: CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945. Patch Instructions: To install this SUSE update use the SUSE...

CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

CVE-2026-41079 OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory i...