Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1617-1

Опубликовано: 24 апр. 2026
Источник: suse-cvrf

Описание

Security update for cups

This update for cups fixes the following issues:

  • CVE-2026-34980: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network (bsc#1261569).
  • CVE-2026-34990: Local print admin token disclosure using temporary printers (bsc#1261568).

Список пакетов

Image SLES12-SP5-Azure-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-HPC-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-HPC-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-SAP-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-SAP-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-Standard-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-EC2-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-EC2-ECS-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-EC2-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-EC2-SAP-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-EC2-SAP-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-GCE-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-GCE-On-Demand
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-GCE-SAP-BYOS
cups-libs-1.7.5-20.62.1
Image SLES12-SP5-GCE-SAP-On-Demand
cups-libs-1.7.5-20.62.1
SUSE Linux Enterprise Server 12 SP5-LTSS
cups-1.7.5-20.62.1
cups-client-1.7.5-20.62.1
cups-devel-1.7.5-20.62.1
cups-libs-1.7.5-20.62.1
cups-libs-32bit-1.7.5-20.62.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
cups-1.7.5-20.62.1
cups-client-1.7.5-20.62.1
cups-devel-1.7.5-20.62.1
cups-libs-1.7.5-20.62.1
cups-libs-32bit-1.7.5-20.62.1

Ссылки

Описание

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary such as /usr/bin/vim as lp. At time of publication, there are no publicly available patches.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-HPC-BYOS:cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-HPC-On-Demand:cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-SAP-BYOS:cups-libs-1.7.5-20.62.1
Ссылки

Описание

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on localhost, and the attacker can combine CUPS-Create-Local-Printer with printer-is-shared=true to persist a file:///... queue even though the normal FileDevice policy rejects such URIs. Printing to that queue gives an arbitrary root file overwrite; the PoC below uses that primitive to drop a sudoers fragment and demonstrate root command execution. At time of publication, there are no publicly available patches.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-HPC-BYOS:cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-HPC-On-Demand:cups-libs-1.7.5-20.62.1
Image SLES12-SP5-Azure-SAP-BYOS:cups-libs-1.7.5-20.62.1
Ссылки