https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-18T23:26:59.381904+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bell-cve-2026-107888 BELL-CVE-2026-107888 2026-10-18T23:26:59.388851+00:00

Affected: Alpaquita:23: cups, Alpaquita:25: cups, Alpaquita:stream: cups

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-107888 fkie_cve-2026-107888 2026-10-18T23:26:59.388946+00:00

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this.

 https://vulnerability.circl.lu/vuln/ghsa-95mw-jr52-2v5f GHSA-95mw-jr52-2v5f 2026-10-18T23:26:59.389004+00:00

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this.

 https://vulnerability.circl.lu/vuln/rhsa-2026:81410 RHSA-2026:81410 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-18T23:26:59.389040+00:00

cups: cups: Denial of Service via improper job submission timeout handling cups: cups: Denial of Service via double-free in printer class management cups: CUPS: Denial of Service via deleted temporary printer cups: cups: Denial of Service via repeated IPP group tags

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-107888 UBUNTU-CVE-2026-107888 2026-10-18T23:26:59.389081+00:00

Affected: Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.10: cups, Ubuntu:26.04:LTS: cups

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this.