Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | cups | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-client | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-devel | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-filesystem | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-ipptool | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-libs | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-lpd | 0:2.4.19-4.4.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | cups-printerapp | 0:2.4.19-4.4.hum1 |
Vulnerabilities 1
-
Medium 4.0
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared pr…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-107655
-
article
https://access.redhat.com/security/updates/classification/
-
article
https://images.redhat.com/
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80679.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2548399
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-107655
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-107655
-
article
https://github.com/OpenPrinting/cups/commit/12237ad
-
article
https://github.com/OpenPrinting/cups/commit/25d6830
-
article
https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78