Advisories » MGASA-2026-0483

Updated cups package fixes security vulnerabilities

Publication date: 12 Oct 2026
Modification date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-55453 , CVE-2026-55467 , CVE-2026-55480 , CVE-2026-61702 , CVE-2026-87875 , CVE-2026-87876 , CVE-2026-105326

Description

CUPS ipp backend status-line injection can update queue PPD and lead to
conditional RCE as lp via foomatic-rip. (CVE-2026-55453)
CUPS fax option values bypass the CVE-2026-34980 control-character
sanitizer (incomplete fix). (CVE-2026-55467)
copy_model() creates a predictable PPD tempfile without
O_EXCL/O_NOFOLLOW. (CVE-2026-55480)
root-side banner file disclosure. (CVE-2026-61702)
Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length
bound — reachable from SNMP supply-description parsing
(backend/snmp-supplies.c). (CVE-2026-87875)
CVE-2026-27447 follow-up: remaining case-insensitive username matching
in scheduler side paths. (CVE-2026-87876)
Argument injection in mailto notifier allows unauthenticated remote code
execution. (CVE-2026-105326)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36331
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KX5YFUOJ5JKV64QGD4WMERKGBI43OV3M/
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq
• https://www.openwall.com/lists/oss-security/2026/10/05/6
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-7j85-5r23-xhvh
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-fw7q-ww8w-phx8
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-gj33-wxpv-6fgg
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-r4wf-366f-f6g3
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22
• https://www.cve.org/CVERecord?id=CVE-2026-55453
• https://www.cve.org/CVERecord?id=CVE-2026-55467
• https://www.cve.org/CVERecord?id=CVE-2026-55480
• https://www.cve.org/CVERecord?id=CVE-2026-61702
• https://www.cve.org/CVERecord?id=CVE-2026-87875
• https://www.cve.org/CVERecord?id=CVE-2026-87876
• https://www.cve.org/CVERecord?id=CVE-2026-105326

SRPMS

10/core

• cups-2.4.20-1.mga10