Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux CUPS may crash or lose print jobs
published 22 days ago
Summary
The CUPS printing system on AlmaLinux versions can allow print jobs to stay open past their timeout, cause the scheduler to crash when classes are changed or when a destination disappears, and accept malformed job requests. These issues could interrupt printing or cause the print service to stop working. Updating CUPS to the latest package from AlmaLinux resolves the problems.
What to do
- Update almalinux cups to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-client to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-devel to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-filesystem to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-ipptool to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-libs to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-lpd to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
- Update almalinux cups-printerapp to version 1:2.3.3op2-16.el9_2.1.tuxcare.els16.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | cups |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-client |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-devel |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-filesystem |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-ipptool |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-libs |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-lpd |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
| TuxCare:AlmaLinux:9.2 | almalinux | cups-printerapp |
< 1:2.3.3op2-16.el9_2.1.tuxcare.els16 Fix: upgrade to 1:2.3.3op2-16.el9_2.1.tuxcare.els16
|
Original advisory text
cups: Fix of 4 CVEs
- CVE-2026-107885: prevent clients from holding multiple open print jobs beyond the configured timeout
- CVE-2026-107886: prevent a scheduler crash when modifying a class
- CVE-2026-107888: prevent a scheduler crash when a held job destination disappears
- CVE-2026-107890: filter group separators from job creation requests
- CVE-2026-107886: prevent a scheduler crash when modifying a class
- CVE-2026-107888: prevent a scheduler crash when a held job destination disappears
- CVE-2026-107890: filter group separators from job creation requests
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791915424.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107885 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107886 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107888 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107890 Vendor Advisory
Timeline
Published13 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1791915424 · OSV
Track software like this
Free during beta