CVE-2026-107885: fix denial of service by not letting an in-flight
Send-Document suppress submission timeouts of unrelated held jobs
beyond MultipleOperationTimeout
CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated
IPP group tags in job creation requests