{"id":"CLSA-2026-1785552246","summary":"cups: Fix of 2 CVEs","details":"- CVE-2026-34978: reject \"..\" path traversal in the RSS notifier\n  notify-recipient-uri, both in notifier/rss.c and when the subscription\n  is created in the scheduler, and refuse to write when the target path\n  exists and is not a regular file; previously a remote IPP client could\n  make the lp-owned notifier clobber root-managed state such as\n  CacheDir/job.cache\n- CVE-2026-34979: fix heap buffer overflow when building filter option\n  strings; ipp_length() skipped NOVALUE, MIMETYPE, NAMELANG, TEXTLANG,\n  URI and URISCHEME attributes that get_options() does emit, so the\n  allocated options buffer was undersized","modified":"2026-10-26T09:30:30.703597909Z","published":"2026-08-01T02:44:17Z","upstream":["CVE-2026-34978","CVE-2026-34979"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785552246.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34978"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34979"}],"affected":[{"package":{"name":"cups","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-client","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-client?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-filesystem","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-filesystem?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-ipptool","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-ipptool?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-libs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-libs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-lpd","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-lpd?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}},{"package":{"name":"cups-printerapp","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cups-printerapp?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.3op2-16.el9_2.1.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785552246.json"}}],"schema_version":"1.9.0"}