[CLSA-2026:1794233052] cups: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-11-09 14:04:24 UTC
Description:
- CVE-2026-55480: open temporary PPD files with O_EXCL and O_NOFOLLOW - CVE-2026-61702: reject invalid attributes-natural-language values
CVEs fixed:
Updated packages:
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els4.i686.rpm
    sha:a10d449491fef23e289460a20a0a619f5e9b42433db4f39957885c964f55adfc
  • cups-1.6.3-52.0.1.el7_9.tuxcare.els4.x86_64.rpm
    sha:2def60adbb92aa72be3a2afc8aa3f8e909c7d692ae139b14f98174a2f1eb9979
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els4.i686.rpm
    sha:40e59250503ed133ff040e2aac3c6f899b7df34a28f1d1523d679a913a1528f0
  • cups-client-1.6.3-52.0.1.el7_9.tuxcare.els4.x86_64.rpm
    sha:4552c4f437acd10ce128c129572138ba5aca42106bfdb7476c4b5e6d27b15e96
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els4.i686.rpm
    sha:89d861863e4b3396db161b5cdb87880532e1588b0cf9924793300fc9f5bf6796
  • cups-devel-1.6.3-52.0.1.el7_9.tuxcare.els4.x86_64.rpm
    sha:1838bfac7d79ce2b1cf2ca8d4e8229f0510031d9d5f0960f60783ed30c1882be
  • cups-filesystem-1.6.3-52.0.1.el7_9.tuxcare.els4.noarch.rpm
    sha:e37e56585b99ea4abd4ceece154b6d9dc4becc7babbf30d531023eb5e50b519c
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els4.i686.rpm
    sha:2d1c2952a65c86000650f9dc5c50c91426efb2dd649ce179bbe3302808553980
  • cups-ipptool-1.6.3-52.0.1.el7_9.tuxcare.els4.x86_64.rpm
    sha:765134d173986705b029d40c4a8e64bebd9434553e4a2edfd2c5a4d2c96bb284
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els4.i686.rpm
    sha:c8ed9935e985cfe34dbed15ca5e24eb4e3432ad95eea39f18b1fae1ffc80a03b
  • cups-libs-1.6.3-52.0.1.el7_9.tuxcare.els4.x86_64.rpm
    sha:e78d0d4ff6c685553d736b9823c8860805e3ccec7a3394a8ea5d6fe663872dce
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els4.i686.rpm
    sha:5d1ca220b598258e9be7abd8c09b5943c2da41125239fafb844b6b97a01a7e56
  • cups-lpd-1.6.3-52.0.1.el7_9.tuxcare.els4.x86_64.rpm
    sha:2f4fb67179b3e74e00cd580505ed9525f1d6f2b74661b07478c9b92b67111048
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.