MGASA-2026-0201: cups Mageia

Vulnerability summary

MGASA-2026-0201 is a vulnerability in cups Mageia with no CVSS score yet.

Timeline

1. 12-06-2026
   PublishedVulnerability first disclosed.
2. 12-06-2026
   Last modifiedVulnerability information updated.

Description

Updated cups packages fix security vulnerabilities CVE-2026-27447, Authorization bypass via case-insensitive group-member lookup. CVE-2026-39314, Integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` CVE-2026-39316, Use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer CVE-2026-34978, Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache) CVE-2026-34979, Heap overflow in `get_options()` CVE-2026-34980, Shared PostScript queue lets anonymous Print-Job requests reach `lp`code execution over the network CVE-2026-34990, Local print admin token disclosure using temporary printers. Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users. Out-of-bounds heap read in cupsdSetPrinterAttr marker-types parsing

No weakness data has been published for this record.