Summary
[1:2.2.6-66]
- fix use-after-free reported by OSH
[1:2.2.6-65]
- RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cups | 1:2.2.6-66.el8_10 |
| Oracle Linux · 8 | cups-client | 1:2.2.6-66.el8_10 |
| Oracle Linux · 8 | cups-devel | 1:2.2.6-66.el8_10 |
| Oracle Linux · 8 | cups-filesystem | 1:2.2.6-66.el8_10 |
| Oracle Linux · 8 | cups-ipptool | 1:2.2.6-66.el8_10 |
| Oracle Linux · 8 | cups-libs | 1:2.2.6-66.el8_10 |
| Oracle Linux · 8 | cups-lpd | 1:2.2.6-66.el8_10 |
Vulnerabilities 2
-
Medium 6.0
OpenPrinting CUPS vulnerable to stack based out-of-bound write
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which ru…
-
Medium 5.1
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes…