OPENSUSE-SU-2026:12192-1
Vulnerability from csaf_opensuse - Published: 2026-10-20 00:00 - Updated: 2026-10-21 11:52Summary
cups-2.4.20-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: cups-2.4.20-1.1 on GA media
Description of the patch: These are all security issues fixed in the cups-2.4.20-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12192
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
40 products, the same list as for
CVE-2025-55480
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
40 products, the same list as for
CVE-2025-55480
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
40 products, the same list as for
CVE-2025-55480
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
40 products, the same list as for
CVE-2025-55480
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
40 products, the same list as for
CVE-2025-55480
Threats
Impact
moderate
Affected products
Recommended
40 products, the same list as for
CVE-2025-55480
Threats
Impact
low
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cups-2.4.20-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the cups-2.4.20-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12192",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12192-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-55480 page",
"url": "https://www.suse.com/security/cve/CVE-2025-55480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-105326 page",
"url": "https://www.suse.com/security/cve/CVE-2026-105326/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55453 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55467 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55480 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61702 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-87876 page",
"url": "https://www.suse.com/security/cve/CVE-2026-87876/"
}
],
"title": "cups-2.4.20-1.1 on GA media",
"tracking": {
"current_release_date": "2026-10-21T11:52:51Z",
"generator": {
"date": "2026-10-20T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12192-1",
"initial_release_date": "2026-10-20T00:00:00Z",
"revision_history": [
{
"date": "2026-10-20T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-21T11:52:51Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cups-0:2.4.20-1.1.aarch64",
"product": {
"name": "cups-0:2.4.20-1.1.aarch64",
"product_id": "cups-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-client-0:2.4.20-1.1.aarch64",
"product": {
"name": "cups-client-0:2.4.20-1.1.aarch64",
"product_id": "cups-client-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-client@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-config-0:2.4.20-1.1.aarch64",
"product": {
"name": "cups-config-0:2.4.20-1.1.aarch64",
"product_id": "cups-config-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-config@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-ddk-0:2.4.20-1.1.aarch64",
"product": {
"name": "cups-ddk-0:2.4.20-1.1.aarch64",
"product_id": "cups-ddk-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-ddk@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-0:2.4.20-1.1.aarch64",
"product": {
"name": "cups-devel-0:2.4.20-1.1.aarch64",
"product_id": "cups-devel-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-0:2.4.20-1.1.aarch64",
"product": {
"name": "cups-devel-32bit-0:2.4.20-1.1.aarch64",
"product_id": "cups-devel-32bit-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel-32bit@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-0:2.4.20-1.1.aarch64",
"product": {
"name": "libcups2-0:2.4.20-1.1.aarch64",
"product_id": "libcups2-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-32bit-0:2.4.20-1.1.aarch64",
"product": {
"name": "libcups2-32bit-0:2.4.20-1.1.aarch64",
"product_id": "libcups2-32bit-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2-32bit@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-0:2.4.20-1.1.aarch64",
"product": {
"name": "libcupsimage2-0:2.4.20-1.1.aarch64",
"product_id": "libcupsimage2-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"product": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"product_id": "libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2-32bit@2.4.20-1.1?arch=aarch64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cups-0:2.4.20-1.1.ppc64le",
"product": {
"name": "cups-0:2.4.20-1.1.ppc64le",
"product_id": "cups-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-client-0:2.4.20-1.1.ppc64le",
"product": {
"name": "cups-client-0:2.4.20-1.1.ppc64le",
"product_id": "cups-client-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-client@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-config-0:2.4.20-1.1.ppc64le",
"product": {
"name": "cups-config-0:2.4.20-1.1.ppc64le",
"product_id": "cups-config-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-config@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-ddk-0:2.4.20-1.1.ppc64le",
"product": {
"name": "cups-ddk-0:2.4.20-1.1.ppc64le",
"product_id": "cups-ddk-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-ddk@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-0:2.4.20-1.1.ppc64le",
"product": {
"name": "cups-devel-0:2.4.20-1.1.ppc64le",
"product_id": "cups-devel-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"product": {
"name": "cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"product_id": "cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel-32bit@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-0:2.4.20-1.1.ppc64le",
"product": {
"name": "libcups2-0:2.4.20-1.1.ppc64le",
"product_id": "libcups2-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-32bit-0:2.4.20-1.1.ppc64le",
"product": {
"name": "libcups2-32bit-0:2.4.20-1.1.ppc64le",
"product_id": "libcups2-32bit-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2-32bit@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-0:2.4.20-1.1.ppc64le",
"product": {
"name": "libcupsimage2-0:2.4.20-1.1.ppc64le",
"product_id": "libcupsimage2-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"product": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"product_id": "libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2-32bit@2.4.20-1.1?arch=ppc64le\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cups-0:2.4.20-1.1.s390x",
"product": {
"name": "cups-0:2.4.20-1.1.s390x",
"product_id": "cups-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-client-0:2.4.20-1.1.s390x",
"product": {
"name": "cups-client-0:2.4.20-1.1.s390x",
"product_id": "cups-client-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-client@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-config-0:2.4.20-1.1.s390x",
"product": {
"name": "cups-config-0:2.4.20-1.1.s390x",
"product_id": "cups-config-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-config@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-ddk-0:2.4.20-1.1.s390x",
"product": {
"name": "cups-ddk-0:2.4.20-1.1.s390x",
"product_id": "cups-ddk-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-ddk@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-0:2.4.20-1.1.s390x",
"product": {
"name": "cups-devel-0:2.4.20-1.1.s390x",
"product_id": "cups-devel-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-0:2.4.20-1.1.s390x",
"product": {
"name": "cups-devel-32bit-0:2.4.20-1.1.s390x",
"product_id": "cups-devel-32bit-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel-32bit@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-0:2.4.20-1.1.s390x",
"product": {
"name": "libcups2-0:2.4.20-1.1.s390x",
"product_id": "libcups2-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-32bit-0:2.4.20-1.1.s390x",
"product": {
"name": "libcups2-32bit-0:2.4.20-1.1.s390x",
"product_id": "libcups2-32bit-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2-32bit@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-0:2.4.20-1.1.s390x",
"product": {
"name": "libcupsimage2-0:2.4.20-1.1.s390x",
"product_id": "libcupsimage2-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"product": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"product_id": "libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2-32bit@2.4.20-1.1?arch=s390x\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cups-0:2.4.20-1.1.x86_64",
"product": {
"name": "cups-0:2.4.20-1.1.x86_64",
"product_id": "cups-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-client-0:2.4.20-1.1.x86_64",
"product": {
"name": "cups-client-0:2.4.20-1.1.x86_64",
"product_id": "cups-client-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-client@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-config-0:2.4.20-1.1.x86_64",
"product": {
"name": "cups-config-0:2.4.20-1.1.x86_64",
"product_id": "cups-config-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-config@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-ddk-0:2.4.20-1.1.x86_64",
"product": {
"name": "cups-ddk-0:2.4.20-1.1.x86_64",
"product_id": "cups-ddk-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-ddk@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-0:2.4.20-1.1.x86_64",
"product": {
"name": "cups-devel-0:2.4.20-1.1.x86_64",
"product_id": "cups-devel-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cups-devel-32bit-0:2.4.20-1.1.x86_64",
"product": {
"name": "cups-devel-32bit-0:2.4.20-1.1.x86_64",
"product_id": "cups-devel-32bit-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cups-devel-32bit@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-0:2.4.20-1.1.x86_64",
"product": {
"name": "libcups2-0:2.4.20-1.1.x86_64",
"product_id": "libcups2-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcups2-32bit-0:2.4.20-1.1.x86_64",
"product": {
"name": "libcups2-32bit-0:2.4.20-1.1.x86_64",
"product_id": "libcups2-32bit-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcups2-32bit@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-0:2.4.20-1.1.x86_64",
"product": {
"name": "libcupsimage2-0:2.4.20-1.1.x86_64",
"product_id": "libcupsimage2-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libcupsimage2-32bit-0:2.4.20-1.1.x86_64",
"product": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.x86_64",
"product_id": "libcupsimage2-32bit-0:2.4.20-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:cups:2.4.20:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libcupsimage2-32bit@2.4.20-1.1?arch=x86_64\u0026upstream=cups-0:2.4.20-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64"
},
"product_reference": "cups-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le"
},
"product_reference": "cups-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x"
},
"product_reference": "cups-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64"
},
"product_reference": "cups-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64"
},
"product_reference": "cups-client-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le"
},
"product_reference": "cups-client-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x"
},
"product_reference": "cups-client-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-client-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64"
},
"product_reference": "cups-client-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-config-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64"
},
"product_reference": "cups-config-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-config-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le"
},
"product_reference": "cups-config-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-config-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x"
},
"product_reference": "cups-config-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-config-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64"
},
"product_reference": "cups-config-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64"
},
"product_reference": "cups-ddk-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le"
},
"product_reference": "cups-ddk-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x"
},
"product_reference": "cups-ddk-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-ddk-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64"
},
"product_reference": "cups-ddk-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64"
},
"product_reference": "cups-devel-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le"
},
"product_reference": "cups-devel-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x"
},
"product_reference": "cups-devel-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64"
},
"product_reference": "cups-devel-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64"
},
"product_reference": "cups-devel-32bit-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le"
},
"product_reference": "cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x"
},
"product_reference": "cups-devel-32bit-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cups-devel-32bit-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64"
},
"product_reference": "cups-devel-32bit-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64"
},
"product_reference": "libcups2-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le"
},
"product_reference": "libcups2-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x"
},
"product_reference": "libcups2-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64"
},
"product_reference": "libcups2-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-32bit-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64"
},
"product_reference": "libcups2-32bit-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-32bit-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le"
},
"product_reference": "libcups2-32bit-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-32bit-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x"
},
"product_reference": "libcups2-32bit-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcups2-32bit-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64"
},
"product_reference": "libcups2-32bit-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64"
},
"product_reference": "libcupsimage2-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le"
},
"product_reference": "libcupsimage2-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x"
},
"product_reference": "libcupsimage2-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64"
},
"product_reference": "libcupsimage2-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64"
},
"product_reference": "libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le"
},
"product_reference": "libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x"
},
"product_reference": "libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcupsimage2-32bit-0:2.4.20-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
},
"product_reference": "libcupsimage2-32bit-0:2.4.20-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-55480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-55480"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-55480",
"url": "https://www.suse.com/security/cve/CVE-2025-55480"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-55480"
},
{
"cve": "CVE-2026-105326",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-105326"
}
],
"notes": [
{
"category": "general",
"text": "An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot be interpreted as command-line options. A remote attacker who can reach the CUPS service could supply a crafted recipient value starting with \"-\" to influence sendmail behavior. Successful exploitation depends on the installed mail transfer agent and CUPS network exposure, and may lead to execution of attacker-controlled commands with the privileges of the CUPS service user.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-105326",
"url": "https://www.suse.com/security/cve/CVE-2026-105326"
},
{
"category": "external",
"summary": "SUSE Bug 1284274 for CVE-2026-105326",
"url": "https://bugzilla.suse.com/1284274"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-105326"
},
{
"cve": "CVE-2026-55453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55453"
}
],
"notes": [
{
"category": "general",
"text": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quote_string() function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before report_attr() writes the value to the scheduler status stream. The scheduler can parse an injected newline as a separate PPD: control line and persist an attacker-selected PPD keyword. The reporter demonstrated that a later print job on a Foomatic-backed queue could consume an injected FoomaticRIPCommandLine value and execute in the filter context as lp. This issue is fixed in version 2.4.20.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55453",
"url": "https://www.suse.com/security/cve/CVE-2026-55453"
},
{
"category": "external",
"summary": "SUSE Bug 1284275 for CVE-2026-55453",
"url": "https://bugzilla.suse.com/1284275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-55453"
},
{
"cve": "CVE-2026-55467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55467"
}
],
"notes": [
{
"category": "general",
"text": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the cupsdCreateJob option-string builder in scheduler/job.c maps attacker-controlled destination-uri and pre-dial-string values from a configured fax queue to the phone and faxPrefix options. Unlike ordinary IPP job attributes, these mapped fax values bypass the control-character sanitizer and are copied directly into the filter options argument. A user permitted to submit a job can therefore inject control characters into the downstream option stream. The reporter states that a downstream fax filter passing these values to a shell or modem command could execute code as lp, while the maintainer states that CUPS has no confidentiality or integrity impact because the only known code-executing filter is optional Foomatic and addressed separately, leaving possible disruption of the affected queue. This issue is fixed in version 2.4.20.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55467",
"url": "https://www.suse.com/security/cve/CVE-2026-55467"
},
{
"category": "external",
"summary": "SUSE Bug 1284276 for CVE-2026-55467",
"url": "https://bugzilla.suse.com/1284276"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-55467"
},
{
"cve": "CVE-2026-55480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55480"
}
],
"notes": [
{
"category": "general",
"text": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_model() in scheduler/ipp.c creates a predictable TempDir/\u003cconnection-number\u003e.ppd path in an lp-group-writable directory and opens it as root without O_EXCL or O_NOFOLLOW. Exploitation requires an lp-group process able to write that directory to predict the connection-derived name and plant a symlink before the root open, while a privileged add-printer or modify-printer operation using a model PPD triggers copy_model(). The reporter treats an existing lp foothold and the privileged operation as distinct prerequisites, while the maintainer assesses high privileges because installing the relevant filter or administering the printer requires root or print-administrator access. If the race succeeds, the root scheduler follows the symlink and truncates or overwrites a root-writable target with generated PPD data, compromising file integrity or availability. This issue is fixed in version 2.4.20.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55480",
"url": "https://www.suse.com/security/cve/CVE-2026-55480"
},
{
"category": "external",
"summary": "SUSE Bug 1284277 for CVE-2026-55480",
"url": "https://bugzilla.suse.com/1284277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-55480"
},
{
"cve": "CVE-2026-61702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61702"
}
],
"notes": [
{
"category": "general",
"text": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets banner. The job-sheets value must first match a registered banner basename, and the traversed path must contain a matching reachable basename; selecting an arbitrary target as demonstrated additionally requires pre-positioned path state such as a symlink with that basename. Subject to the scheduler\u0027s filesystem and sandbox access, path separators in the language value can escape the intended banner directory, make the root scheduler open the reachable file, and copy its bytes into a job-sheet spool object that a configured backend can deliver to an attacker-observable endpoint. This issue is fixed in version 2.4.20.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61702",
"url": "https://www.suse.com/security/cve/CVE-2026-61702"
},
{
"category": "external",
"summary": "SUSE Bug 1284278 for CVE-2026-61702",
"url": "https://bugzilla.suse.com/1284278"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-61702"
},
{
"cve": "CVE-2026-87876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-87876"
}
],
"notes": [
{
"category": "general",
"text": "Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS\u0027s scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-87876",
"url": "https://www.suse.com/security/cve/CVE-2026-87876"
},
{
"category": "external",
"summary": "SUSE Bug 1279944 for CVE-2026-87876",
"url": "https://bugzilla.suse.com/1279944"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-client-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-config-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-ddk-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:cups-devel-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcups2-32bit-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-0:2.4.20-1.1.x86_64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.aarch64",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.ppc64le",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.s390x",
"openSUSE Tumbleweed:libcupsimage2-32bit-0:2.4.20-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-87876"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.