{"id":"CLSA-2026-1785510391","summary":"cups: Fix of 2 CVEs","details":"- CVE-2021-25317: install /var/log/cups as 0700 root:sys instead of 0755 lp:sys\n  so the 'lp' user cannot plant symlinks that cupsd follows on log creation.\n  This matches the mode cupsd itself computes for the log directory\n  (0300|LogFilePerm with --with-log-file-perm=0600).\n- CVE-2025-58364: already addressed by Patch103 (upstream e58cba9d), shipped in\n  1:1.6.3-52.tuxcare.els5; no code change in this release.","modified":"2026-10-26T09:31:42.898836356Z","published":"2026-08-01T05:23:36Z","upstream":["CVE-2021-25317","CVE-2025-58364"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1785510391.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25317"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58364"}],"affected":[{"package":{"name":"cups","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}},{"package":{"name":"cups-client","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups-client?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}},{"package":{"name":"cups-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}},{"package":{"name":"cups-filesystem","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups-filesystem?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}},{"package":{"name":"cups-ipptool","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups-ipptool?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}},{"package":{"name":"cups-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}},{"package":{"name":"cups-lpd","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/cups-lpd?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.3-52.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785510391.json"}}],"schema_version":"1.9.0"}