CVE-2026-34978 is a medium-severity OpenPrinting CUPS vulnerability, published in early April 2026, that lets a remote IPP client abuse the RSS notification URI field to traverse out of CUPS’ RSS cache directory and overwrite lp-writable state files such as job.cache. It is not the kind of bug...
A single, slow client can stall the Common UNIX Printing System (CUPS) daemon (cupsd) and render an entire print service unusable — a denial‑of‑service vulnerability tracked as CVE‑2025‑58436 that was fixed in CUPS v2.4.15 and affects upstream packages prior to that release.
Background /...