Skip to content
OpenAdvisories
Medium ALSA-2024:4265 1 CVE

Moderate: cups security update

Published Jul 2, 2024 · Updated Oct 29, 2026

Summary

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 7

ReleasePackageFixed in
AlmaLinux · 8 cups 1:2.2.6-60.el8_10
AlmaLinux · 8 cups-client 1:2.2.6-60.el8_10
AlmaLinux · 8 cups-devel 1:2.2.6-60.el8_10
AlmaLinux · 8 cups-filesystem 1:2.2.6-60.el8_10
AlmaLinux · 8 cups-ipptool 1:2.2.6-60.el8_10
AlmaLinux · 8 cups-libs 1:2.2.6-60.el8_10
AlmaLinux · 8 cups-lpd 1:2.2.6-60.el8_10

Vulnerabilities 1

  • Medium 4.4

    Cupsd Listen arbitrary chmod 0140777

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to…

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-35235
  • report
    https://bugzilla.redhat.com/2290318
  • advisory
    https://errata.almalinux.org/8/ALSA-2024-4265.html