cups: fix several CVEs