Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CUPS Security Update Fixes Multiple Critical Issues
published 5 months ago
Summary
A security update for CUPS fixes several critical vulnerabilities that could allow unauthorized access, data disclosure, or denial of service. These vulnerabilities affect CUPS installations and can be exploited by attackers. To ensure your system's security, update CUPS to the latest version, 2.4.19, as soon as possible.
Original advisory text
Security update for cups
This update for cups fixes the following issues
- CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572).
- CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571).
- CVE-2026-34979: Heap overflow in `get_options()` (bsc#1261570).
- CVE-2026-34980: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
(bsc#1261569).
- CVE-2026-34990: Local print admin token disclosure using temporary printers (bsc#1261568).
- CVE-2026-39314: negative `job-password-supported` attribute can lead to a denial of service (bsc#1261743).
- CVE-2026-39316: dangling subscription pointer can lead to a denial of service (bsc#1261742).
- CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure
(bsc#1263116).
Changes for cups:
- Version upgrade to 2.4.19
- CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572).
- CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571).
- CVE-2026-34979: Heap overflow in `get_options()` (bsc#1261570).
- CVE-2026-34980: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
(bsc#1261569).
- CVE-2026-34990: Local print admin token disclosure using temporary printers (bsc#1261568).
- CVE-2026-39314: negative `job-password-supported` attribute can lead to a denial of service (bsc#1261743).
- CVE-2026-39316: dangling subscription pointer can lead to a denial of service (bsc#1261742).
- CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure
(bsc#1263116).
Changes for cups:
- Version upgrade to 2.4.19
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202621871-1/ Vendor Advisory
- https://bugzilla.suse.com/1261568 Third Party Advisory
- https://bugzilla.suse.com/1261569 Third Party Advisory
- https://bugzilla.suse.com/1261570 Third Party Advisory
- https://bugzilla.suse.com/1261571 Third Party Advisory
- https://bugzilla.suse.com/1261572 Third Party Advisory
- https://bugzilla.suse.com/1261742 Third Party Advisory
- https://bugzilla.suse.com/1261743 Third Party Advisory
- https://bugzilla.suse.com/1263116 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-27447 URL
- https://www.suse.com/security/cve/CVE-2026-34978 URL
- https://www.suse.com/security/cve/CVE-2026-34979 URL
- https://www.suse.com/security/cve/CVE-2026-34980 URL
- https://www.suse.com/security/cve/CVE-2026-34990 URL
- https://www.suse.com/security/cve/CVE-2026-39314 URL
- https://www.suse.com/security/cve/CVE-2026-39316 URL
- https://www.suse.com/security/cve/CVE-2026-41079 URL
Timeline
Published26 May 2026
Updated3 Jun 2026
First seen3 Jun 2026
Sources
SUSE-SU-2026:21871-1 · OSV
Track software like this
Free during beta