CLSA-2026-1785510391

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1785510391
Upstream
CVE (2)
Published
2026-08-01T05:23:36Z
Modified
2026-10-26T09:31:42Z
Summary
cups: Fix of 2 CVEs
Details
  • CVE-2021-25317: install /var/log/cups as 0700 root:sys instead of 0755 lp:sys so the 'lp' user cannot plant symlinks that cupsd follows on log creation. This matches the mode cupsd itself computes for the log directory (0300|LogFilePerm with --with-log-file-perm=0600).
  • CVE-2025-58364: already addressed by Patch103 (upstream e58cba9d), shipped in 1:1.6.3-52.tuxcare.els5; no code change in this release.
References

Affected packages

TuxCare:CentOS:7
cups

Package

Name
cups
Purl
pkg:rpm/tuxcare/cups?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"
cups-client

Package

Name
cups-client
Purl
pkg:rpm/tuxcare/cups-client?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"
cups-devel

Package

Name
cups-devel
Purl
pkg:rpm/tuxcare/cups-devel?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"
cups-filesystem

Package

Name
cups-filesystem
Purl
pkg:rpm/tuxcare/cups-filesystem?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"
cups-ipptool

Package

Name
cups-ipptool
Purl
pkg:rpm/tuxcare/cups-ipptool?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"
cups-libs

Package

Name
cups-libs
Purl
pkg:rpm/tuxcare/cups-libs?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"
cups-lpd

Package

Name
cups-lpd
Purl
pkg:rpm/tuxcare/cups-lpd?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:1.6.3-52.el7_9.tuxcare.els7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"