SUSE-SU-2026:5078-1

Опубликовано: 03 нояб. 2026

Источник: suse-cvrf

Описание

Security update for cups

This update for cups fixes the following issues:

CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116).
CVE-2026-105326: argument injection in mailto notifier allows unauthenticated remote code execution (bsc#1284274).

Список пакетов

Container suse/kiosk/firefox-esr:latest

cups-config-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

Container suse/kiosk/xorg-client:latest

cups-config-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

Container suse/samba-server:latest

cups-config-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Micro 5.3

cups-config-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

SUSE Linux Enterprise Micro 5.4

cups-config-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

SUSE Linux Enterprise Micro 5.5

cups-config-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

SUSE Linux Enterprise Module for Basesystem 15 SP7

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

libcups2-32bit-2.2.7-150000.3.101.2

SUSE Linux Enterprise Module for Development Tools 15 SP7

cups-ddk-2.2.7-150000.3.101.2

SUSE Linux Enterprise Server 15 SP4-LTSS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Server 15 SP5-LTSS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Server 15 SP6-LTSS

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Server for SAP Applications 15 SP4

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Server for SAP Applications 15 SP5

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

SUSE Linux Enterprise Server for SAP Applications 15 SP6

cups-2.2.7-150000.3.101.2

cups-client-2.2.7-150000.3.101.2

cups-config-2.2.7-150000.3.101.2

cups-ddk-2.2.7-150000.3.101.2

cups-devel-2.2.7-150000.3.101.2

libcups2-2.2.7-150000.3.101.2

libcups2-32bit-2.2.7-150000.3.101.2

libcupscgi1-2.2.7-150000.3.101.2

libcupsimage2-2.2.7-150000.3.101.2

libcupsmime1-2.2.7-150000.3.101.2

libcupsppdc1-2.2.7-150000.3.101.2

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20265078-1/
Link for SUSE-SU-2026:5078-1
https://www.suse.com/support/update/announcement/2026/suse-su-20265078-1/
E-Mail link for SUSE-SU-2026:5078-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1263116
SUSE Bug 1263116
https://bugzilla.suse.com/1284274
SUSE Bug 1284274
https://www.suse.com/security/cve/CVE-2026-105326/
SUSE CVE CVE-2026-105326 page
https://www.suse.com/security/cve/CVE-2026-41079/
SUSE CVE CVE-2026-41079 page

Описание

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot be interpreted as command-line options. A remote attacker who can reach the CUPS service could supply a crafted recipient value starting with "-" to influence sendmail behavior. Successful exploitation depends on the installed mail transfer agent and CUPS network exposure, and may lead to execution of attacker-controlled commands with the privileges of the CUPS service user.

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.101.2

Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.101.2

Container suse/kiosk/xorg-client:latest:cups-config-2.2.7-150000.3.101.2

Container suse/kiosk/xorg-client:latest:libcups2-2.2.7-150000.3.101.2

Ссылки

https://www.suse.com/security/cve/CVE-2026-105326.html
CVE-2026-105326
https://bugzilla.suse.com/1284274
SUSE Bug 1284274

Описание

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings, which are subsequently visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. This vulnerability is fixed in 2.4.17.

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.101.2

Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.101.2

Container suse/kiosk/xorg-client:latest:cups-config-2.2.7-150000.3.101.2

Container suse/kiosk/xorg-client:latest:libcups2-2.2.7-150000.3.101.2

Ссылки

https://www.suse.com/security/cve/CVE-2026-41079.html
CVE-2026-41079
https://bugzilla.suse.com/1263116
SUSE Bug 1263116

SUSE-SU-2026:5078-1

Описание

Список пакетов

Container suse/kiosk/firefox-esr:latest

Container suse/kiosk/xorg-client:latest

Container suse/samba-server:latest

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

SUSE Linux Enterprise Module for Development Tools 15 SP7

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-105326

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-41079

Описание

Затронутые продукты

Ссылки