{"schemaVersion":3,"id":"MGASA-2026-0483","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated cups package fixes security vulnerabilities\n\nCUPS ipp backend status-line injection can update queue PPD and lead to\nconditional RCE as lp via foomatic-rip. (CVE-2026-55453)\nCUPS fax option values bypass the CVE-2026-34980 control-character\nsanitizer (incomplete fix). (CVE-2026-55467)\ncopy_model() creates a predictable PPD tempfile without\nO_EXCL/O_NOFOLLOW. (CVE-2026-55480)\nroot-side banner file disclosure. (CVE-2026-61702)\nHeap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length\nbound — reachable from SNMP supply-description parsing\n(backend/snmp-supplies.c). (CVE-2026-87875)\nCVE-2026-27447 follow-up: remaining case-insensitive username matching\nin scheduler side paths. (CVE-2026-87876)\nArgument injection in mailto notifier allows unauthenticated remote code\nexecution. (CVE-2026-105326)","dates":{"published":"2026-10-12T18:47:12.000Z","modified":"2026-10-12T19:13:25.022Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"cups","name":"cups","label":"cups","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/cups","purlType":"rpm","versions":[{"text":"< 2.4.20-1.mga10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.20-1.mga10","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2026-0483.html","label":"advisories.mageia.org/MGASA-2026-0483.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36331","label":"bugs.mageia.org/show_bug.cgi?id=36331","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KX5YFUOJ5JKV64QGD4WMERKGBI43OV3M/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["WEB"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/10/05/6","label":"www.openwall.com/lists/oss-security/2026/10/05/6","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-7j85-5r23-xhvh","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-7j85-5r23-xhvh","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-fw7q-ww8w-phx8","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-fw7q-ww8w-phx8","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-gj33-wxpv-6fgg","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-gj33-wxpv-6fgg","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-r4wf-366f-f6g3","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-r4wf-366f-f6g3","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2026-105326","CVE-2026-55453","CVE-2026-55467","CVE-2026-55480","CVE-2026-61702","CVE-2026-87875","CVE-2026-87876"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-12T18:47:12.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-12T19:13:25.022Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:51:38.765Z","stale":false,"partial":false}}