Download Latest Version cups-2.4.19-source.tar.gz (8.0 MB)
Email in envelope

Get an email when there's a new version of OpenPrinting CUPS

Home / v2.4.17
Name Modified Size InfoDownloads / Week
Parent folder
cups-2.4.17-source.tar.gz 2026-04-17 8.2 MB
cups-2.4.17-source.tar.gz.sig 2026-04-17 119 Bytes
README.md 2026-04-17 1.0 kB
v2.4.17 source code.tar.gz 2026-04-17 8.2 MB
v2.4.17 source code.zip 2026-04-17 8.8 MB
Totals: 5 Items   25.1 MB 1

The new release 2.4.17 contains the following security fixes:

  • CVE-2026-27447: The scheduler treated local user and group names as case- insensitive.
  • CVE-2026-34978: The RSS notifier could write outside the scheduler's RSS directory.
  • CVE-2026-34980: The scheduler did not filter control characters from option values.
  • CVE-2026-34979: The scheduler did not always allocate enough memory for a job's options string.
  • CVE-2026-34990: The scheduler incorrectly allowed local certificates over the loopback interface.
  • CVE-2026-39314: Fixed the range check for job password strings.
  • CVE-2026-39316: Fixed a printer subscription bug in the scheduler.
  • CVE-2026-NNNNN: Fixed a SNMP string conversion bug in the backends.

where the last CVE number is requested from Github for several days now, the number will be corrected once we have one, but we decided to make a release to share the other fixes.

The release includes other fixes as well, listed in CHANGES.md.

Enjoy!

Source: README.md, updated 2026-04-17