{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos6els/vex/2026/cve-2026-41079-els_os-centos6els.json" } ], "tracking": { "current_release_date": "2026-04-30T17:29:58Z", "generator": { "date": "2026-04-30T17:29:58Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-41079-ELS_OS-CENTOS6ELS", "initial_release_date": "2026-04-24T17:16:00Z", "revision_history": [ { "date": "2026-04-24T17:16:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-04-30T17:29:58Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2026-41079" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 6", "product": { "name": "Community Enterprise Operating System 6", "product_id": "CentOS-6", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" }, { "branches": [ { "category": "product_version", "name": "cups-devel-1:1.4.2-81.el6_10.i686", "product": { "name": "cups-devel-1:1.4.2-81.el6_10.i686", "product_id": "cups-devel-1:1.4.2-81.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/cups-devel@1.4.2-81.el6_10?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.4.2-81.el6_10.i686", "product": { "name": "cups-libs-1:1.4.2-81.el6_10.i686", "product_id": "cups-libs-1:1.4.2-81.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/cups-libs@1.4.2-81.el6_10?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "cups-devel-1:1.4.2-81.el6_10.x86_64", "product": { "name": "cups-devel-1:1.4.2-81.el6_10.x86_64", "product_id": "cups-devel-1:1.4.2-81.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/cups-devel@1.4.2-81.el6_10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-php-1:1.4.2-81.el6_10.x86_64", "product": { "name": "cups-php-1:1.4.2-81.el6_10.x86_64", "product_id": "cups-php-1:1.4.2-81.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/cups-php@1.4.2-81.el6_10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.4.2-81.el6_10.x86_64", "product": { "name": "cups-lpd-1:1.4.2-81.el6_10.x86_64", "product_id": "cups-lpd-1:1.4.2-81.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/cups-lpd@1.4.2-81.el6_10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.4.2-81.el6_10.x86_64", "product": { "name": "cups-libs-1:1.4.2-81.el6_10.x86_64", "product_id": "cups-libs-1:1.4.2-81.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/cups-libs@1.4.2-81.el6_10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-1:1.4.2-81.el6_10.x86_64", "product": { "name": "cups-1:1.4.2-81.el6_10.x86_64", "product_id": "cups-1:1.4.2-81.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/cups@1.4.2-81.el6_10?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "product": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "product_id": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-devel@1.4.2-81.el6_10.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "product": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "product_id": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-devel@1.4.2-81.el6_10.tuxcare.els1?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "product": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "product_id": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-libs@1.4.2-81.el6_10.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "product": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "product_id": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-libs@1.4.2-81.el6_10.tuxcare.els1?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_id": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-devel@1.4.2-81.el6_10.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_id": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-devel@1.4.2-81.el6_10.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product": { "name": "cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_id": "cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-php@1.4.2-81.el6_10.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product": { "name": "cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_id": "cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-php@1.4.2-81.el6_10.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product": { "name": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_id": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-lpd@1.4.2-81.el6_10.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product": { "name": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_id": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-lpd@1.4.2-81.el6_10.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_id": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-libs@1.4.2-81.el6_10.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_id": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups-libs@1.4.2-81.el6_10.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product": { "name": "cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_id": "cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups@1.4.2-81.el6_10.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product": { "name": "cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_id": "cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cups@1.4.2-81.el6_10.tuxcare.els1?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686" }, "product_reference": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.4.2-81.el6_10.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-devel-1:1.4.2-81.el6_10.i686" }, "product_reference": "cups-devel-1:1.4.2-81.el6_10.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64" }, "product_reference": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.4.2-81.el6_10.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-devel-1:1.4.2-81.el6_10.x86_64" }, "product_reference": "cups-devel-1:1.4.2-81.el6_10.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686" }, "product_reference": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64" }, "product_reference": "cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64" }, "product_reference": "cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-php-1:1.4.2-81.el6_10.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-php-1:1.4.2-81.el6_10.x86_64" }, "product_reference": "cups-php-1:1.4.2-81.el6_10.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64" }, "product_reference": "cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64" }, "product_reference": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.4.2-81.el6_10.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.x86_64" }, "product_reference": "cups-lpd-1:1.4.2-81.el6_10.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64" }, "product_reference": "cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64" }, "product_reference": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.4.2-81.el6_10.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-libs-1:1.4.2-81.el6_10.x86_64" }, "product_reference": "cups-libs-1:1.4.2-81.el6_10.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686" }, "product_reference": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.4.2-81.el6_10.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-libs-1:1.4.2-81.el6_10.i686" }, "product_reference": "cups-libs-1:1.4.2-81.el6_10.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686" }, "product_reference": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64" }, "product_reference": "cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64" }, "product_reference": "cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.4.2-81.el6_10.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-1:1.4.2-81.el6_10.x86_64" }, "product_reference": "cups-1:1.4.2-81.el6_10.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64" }, "product_reference": "cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-41079", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings, which are subsequently visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. This vulnerability is fixed in 2.4.17.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-41079" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups/commit/b7c2525a885f528d243c3a92197ca99609b3f080", "url": "https://github.com/OpenPrinting/cups/commit/b7c2525a885f528d243c3a92197ca99609b3f080" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups/commit/d7fe0f521ff3b24676511e747b058362b9a20737", "url": "https://github.com/OpenPrinting/cups/commit/d7fe0f521ff3b24676511e747b058362b9a20737" }, { "category": "external", "summary": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-6wpw-g8g6-wvrv", "url": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-6wpw-g8g6-wvrv" } ], "release_date": "2026-04-24T17:16:00Z", "remediations": [ { "category": "no_fix_planned", "details": "This issue is only reachable when a system’s CUPS installation is actively performing SNMP-based discovery or supply polling and an attacker on the same Layer‑2 segment can deliver crafted SNMP replies (e.g., via spoofing/MITM), a network condition that is uncommon for server/VM deployments that are not placed on office LAN broadcast domains. Even if triggered, it is an out‑of‑bounds read limited to roughly 176 bytes that are re‑encoded and stored only as supply description strings visible to authenticated CUPS users, with no integrity impact and only low availability impact. Given the strict adjacency/spoofing prerequisites and the minimal, authenticated‑only data exposure, this can be safely deprioritized for centrally managed enterprise servers and VMs.", "product_ids": [ "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.i686", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-devel-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.i686", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-libs-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-lpd-1:1.4.2-81.el6_10.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els1.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.tuxcare.els2.x86_64", "CentOS-6:cups-php-1:1.4.2-81.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }