< back to search

gpp_maybe Security update for cups
SUSE-SLE-Micro-6.1-549

This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572). - CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571). - CVE-2026-34979: Heap overflow in `get_options()` (bsc#1261570). - CVE-2026-34980: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (bsc#1261569). - CVE-2026-34990: Local print admin token disclosure using temporary printers (bsc#1261568). - CVE-2026-39314: negative `job-password-supported` attribute can lead to a denial of service (bsc#1261743). - CVE-2026-39316: dangling subscription pointer can lead to a denial of service (bsc#1261742). - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). Changes for cups: - Version upgrade to 2.4.19

cloud_download Downloads

SUSE Linux Micro 6.1 aarch64
  • Packages
    cups-config
    CUPS library configuration files
    2.4.19-slfo.1.1_1.1 lock rpm
    libcups2
    HTTP/IPP communication and printer queue and job library
    2.4.19-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 x86_64
  • Packages
    cups-config
    CUPS library configuration files
    2.4.19-slfo.1.1_1.1 lock rpm
    libcups2
    HTTP/IPP communication and printer queue and job library
    2.4.19-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 ppc64le
  • Packages
    cups-config
    CUPS library configuration files
    2.4.19-slfo.1.1_1.1 lock rpm
    libcups2
    HTTP/IPP communication and printer queue and job library
    2.4.19-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 s390x
  • Packages
    cups-config
    CUPS library configuration files
    2.4.19-slfo.1.1_1.1 lock rpm
    libcups2
    HTTP/IPP communication and printer queue and job library
    2.4.19-slfo.1.1_1.1 lock rpm