{"id":"CLSA-2026-1778253061","summary":"Fix CVE(s): CVE-2026-27447","details":"   * SECURITY UPDATE: fix authorization bypass in cupsd caused by\n     case-insensitive comparison of local user and group names.\n     - debian/patches/CVE-2026-27447.patch: compare usernames against the\n       canonical pw_name from getpwnam() with strcmp() in\n       cupsdCheckGroup() and cupsdIsAuthorized() in scheduler/auth.c;\n       include the upstream follow-up \"Fix unauthenticated print policies\"\n       (Issue #1557) so CUPSD_AUTH_NONE policies still match users that\n       do not have a local account.\n     - CVE-2026-27447.","modified":"2026-06-04T09:45:28.006375041Z","published":"2026-05-08T15:13:47Z","upstream":["CVE-2026-27447"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1778253061.html"}],"affected":[{"package":{"name":"cups","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-bsd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-bsd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-client","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-client?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-core-drivers","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-core-drivers?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-daemon","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-daemon?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-ipp-utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-ipp-utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-ppdc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-ppdc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"cups-server-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cups-server-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"libcups2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libcups2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"libcups2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libcups2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"libcupsimage2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libcupsimage2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}},{"package":{"name":"libcupsimage2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libcupsimage2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-6+deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1778253061.json"}}],"schema_version":"1.7.5"}