An update that solves six vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
## This update for cups fixes the following issues * CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup (bsc#1261572). * CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (bsc#1261571). * CVE-2026-34979: Heap overflow in `get_options()` (bsc#1261570). * CVE-2026-34980: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (bsc#1261569). * CVE-2026-39314: negative `job-password-supported` attribute can lead to a denial of service (bsc#1261743). * CVE-2026-39316: dangling subscription pointer can lead to a denial of service (1261742). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like
![]()
* bsc#1261569
* bsc#1261570
* bsc#1261571
* bsc#1261572
* bsc#1261742
* bsc#1261743
Cross-
* CVE-2026-27447
* CVE-2026-34978
* CVE-2026-34979
* CVE-2026-34980
* CVE-2026-39314
* CVE-2026-39316
CVSS scores:
* CVE-2026-27447 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
* CVE-2026-27447 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
* CVE-2026-27447 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
* CVE-2026-34978 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
* CVE-2026-34978 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
* CVE-2026-34979 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-34979 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | SUSE 2026-2731-1 editorconfig-core-c Moderate Stack Overflow Threat | 0 | 5 | 03-07-2026 |
| 2 | SUSE Linux Micro Important Kernel Security Fix 2026-22398-1 | 0 | 5 | 03-07-2026 |
| 3 | SUSE Python-lxml Moderate Info Disclosure Update Advisory 2026-2729-1 | 0 | 5 | 03-07-2026 |
| 4 | SUSE Python-Lxml Moderate Local File Read Threat Update 2026-2728-1 | 0 | 5 | 03-07-2026 |
| 5 | SUSE Linux Micro 6.0 Kernel RT Important Threat Fixes 2026-22397-1 | 0 | 5 | 03-07-2026 |
| 6 | SUSE Linux Micro 6.0 Kernel RT Important Heap Overflow Fixes 2026-22396-1 | 0 | 5 | 03-07-2026 |
| 7 | SUSE 15 SP6 Buildah Important Denial Of Service Issues SUSE-SU-2026-2733-1 | 0 | 5 | 03-07-2026 |
| 8 | SUSE Linux Micro 6.0 Kernel Important Security Issues Fix 2026-22401-1 | 0 | 5 | 03-07-2026 |
| 9 | openSUSE dhcpcd Moderate NULL Pointer Issue Fix 2026-21220-1 | 0 | 5 | 03-07-2026 |
| 10 | SUSE Linux Micro 6.0 Kernel Important Security Patch SUSE-SU-2026-22399-1 | 0 | 5 | 03-07-2026 |