CLSA-2026-1785552246

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1785552246
Upstream
CVE (2)
Published
2026-08-01T02:44:17Z
Modified
2026-10-26T09:30:30Z
Summary
cups: Fix of 2 CVEs
Details
  • CVE-2026-34978: reject ".." path traversal in the RSS notifier notify-recipient-uri, both in notifier/rss.c and when the subscription is created in the scheduler, and refuse to write when the target path exists and is not a regular file; previously a remote IPP client could make the lp-owned notifier clobber root-managed state such as CacheDir/job.cache
  • CVE-2026-34979: fix heap buffer overflow when building filter option strings; ipp_length() skipped NOVALUE, MIMETYPE, NAMELANG, TEXTLANG, URI and URISCHEME attributes that get_options() does emit, so the allocated options buffer was undersized
References

Affected packages

TuxCare:AlmaLinux:9.2
cups

Package

Name
cups
Purl
pkg:rpm/tuxcare/cups?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-client

Package

Name
cups-client
Purl
pkg:rpm/tuxcare/cups-client?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-devel

Package

Name
cups-devel
Purl
pkg:rpm/tuxcare/cups-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-filesystem

Package

Name
cups-filesystem
Purl
pkg:rpm/tuxcare/cups-filesystem?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-ipptool

Package

Name
cups-ipptool
Purl
pkg:rpm/tuxcare/cups-ipptool?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-libs

Package

Name
cups-libs
Purl
pkg:rpm/tuxcare/cups-libs?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-lpd

Package

Name
cups-lpd
Purl
pkg:rpm/tuxcare/cups-lpd?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"
cups-printerapp

Package

Name
cups-printerapp
Purl
pkg:rpm/tuxcare/cups-printerapp?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.3op2-16.el9_2.1.tuxcare.els13

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"