-
Mon Mar 09 2026 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-17
- RHEL-154276 endless poll loop in http_write when POLLHUP is returned
-
Fri Dec 12 2025 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-16
- fix use-after-free reported by OSH
-
Thu Nov 27 2025 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues
-
Tue Nov 18 2025 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-14
- RHEL-122293 [image-mode] Missing /var/log/cups
-
Tue Sep 16 2025 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file
-
Thu Sep 11 2025 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS
-
Tue Jan 07 2025 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-11
- provide a way how to opt-out from system crypto policy if needed
-
Fri Dec 06 2024 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-10
- RHEL-68415 Inability to disable weak ciphers in CUPS configuration
-
Mon Dec 02 2024 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-9
- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails
-
Mon Nov 25 2024 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file