CUPS: Local denial-of-service via cupsd.conf update and related issues

A flaw was found in cups. A user in group defined by SystemGroup directive in /etc/cups/cups-files.conf can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write...

Moderate: Red Hat Security Advisory: cups security update

An update for cups is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

cups security update

1:2.3.3op2-34.2 - fix use-after-free reported by OSH 1:2.3.3op2-34.1 - RHEL-129746 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129738 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues...

Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2025-1320)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1320 advisory. A client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. CVE-2025-58436 A user in the...

Oracle Linux 9 : cups (ELSA-2026-0312)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0312 advisory. - RHEL-129746 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack Tenable has extracted the preceding description block...

ALSA-2026:0312 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack CVE-2025-584...

CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11

CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11. A patched version of the package is available...

CVE-2025-58436 affecting package cups for versions less than 2.3.3op2-11

CVE-2025-58436 affecting package cups for versions less than 2.3.3op2-11. A patched version of the package is available...

Medium: cups

Issue Overview: A client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. CVE-2025-58436 A user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. The...

Mageia: Security Advisory (MGASA-2026-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2026-0001 Updated cups packages fix bug & security vulnerabilities

cups has Authentication bypass with AuthType Negotiate. CVE-2025-58060 cups: Remote DoS via null dereference. CVE-2025-58364...

Unity Linux 20.1070e Security Update: cups-filters (UTSA-2025-993324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993324 advisory. CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions t...

Unity Linux 20.1070e Security Update: cups-filters (UTSA-2025-993320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993320 advisory. cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters...

Unity Linux 20.1070e Security Update: cups-filters (UTSA-2025-993321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993321 advisory. cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0....

Unity Linux 20.1070e Security Update: cups (UTSA-2025-993328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993328 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the...

openSUSE Security Advisory (SUSE-SU-2025:4425-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:4425-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.12.0 Vulnerability Details CVEID:CVE-2025-59419 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty...

[SECURITY] Fedora 42 Update: cups-2.4.16-4.fc42

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

SUSE SLED15: cups / cups-client / cups-config / cups-ddk / cups-devel / etc (SUSE-SU-2025:4425-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4425-1 advisory. Security issues fixed: - CVE-2025-58436: single client sending slow messages to cupsd can delay the...