MiracleLinux 8 : cups-2.2.6-68.el8_10 (AXSA:2026-1240:09)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1240:09 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has...

CLSA-2026-1777392877 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from IPP option values and allowlist PPD keywords returned by filters so a remote attacker cannot inject cupsFilter/cupsFilter2 entries on a shared PostScript queue and gain code execution as the cupsd user...

CLSA-2026-1777022893 Fix CVE(s): CVE-2026-34980

SECURITY UPDATE: arbitrary PPD keyword injection via job options - debian/patches/CVE-2026-34980.patch: filter control characters from option values and allowlist PPD keywords from filters in scheduler/job.c - CVE-2026-34980...

CLSA-2026-1776788057 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...

BELL-CVE-2026-34980

Bulletin has no description...

CVE-2026-34980

creationtimestamp| type| source ---|---|--- 2026-03-31 23:29:02+00:00| published-proof-of-concept| https://github.com/OpenPrinting/cups/security/advisories/GHSA-4852-v58g-6cwf 2026-04-08 06:58:20+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mixpqgctwh2s 2026-04-08...