6098 matches found
OPENSUSE-SU-2026:21818-1 Security update for libcupsfilters
This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field bsc1273145. - CVE-2026-64612: malformed PNG aborts CUPS image filter process bsc1273146...
Linux Distros Unpatched Vulnerability : CVE-2026-87875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap...
CVE-2026-87876: Improper Handling of Case Sensitivity
Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...
Linux Distros Unpatched Vulnerability : CVE-2026-87876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribu...
CVE-2026-87875: Out-of-bounds Read
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
PT-2026-89099
Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description The cupsUTF32ToUTF8 function in cups/transcode.c lacks a source-length bound, which allows the system to read past the end of the source buffer. This results in a heap out-of-bounds read, a...
PT-2026-89100
Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description Case-insensitive comparisons on request-derived usernames within the scheduler, specifically during printer ACL validation and private-attribute filtering, may allow the bypass of username-based...
NewStart CGSL MAIN 7.02 : cups-filters Vulnerability (NS-SA-2026-0089)
The remote NewStart CGSL host, running version MAIN 7.02, has cups-filters packages installed that are affected by a vulnerability: - libppd = 2.1b1 ppdCreatePPDFromIPP2 does not validate or sanitize the IPP attributes when writing them to a temporary PPD file, allowing the injection of attacker...
NewStart CGSL MAIN 7.02 : cups Multiple Vulnerabilities (NS-SA-2026-0093)
The remote NewStart CGSL host, running version MAIN 7.02, has cups packages installed that are affected by multiple vulnerabilities: - libppd = 2.1b1 ppdCreatePPDFromIPP2 does not validate or sanitize the IPP attributes when writing them to a temporary PPD file, allowing the injection of attacker...
cups-filters-1.28.17-9.1 on GA media (moderate)
cups-filters-1.28.17-9.1 on GA media Announcement ID: openSUSE-SU-2026:11681-1 Rating: moderate Cross-References: CVE-2026-64611 CVE-2026-64612 CVSS scores: CVE-2026-64611 SUSE : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-64611 SUSE : 7.1...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups-filters (UTSA-2026-106457)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106457 advisory. A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the...
OPENSUSE-SU-2026:11681-1 cups-filters-1.28.17-9.1 on GA media
These are all security issues fixed in the cups-filters-1.28.17-9.1 package on the GA media of openSUSE Tumbleweed...
Security update for cups-filters
This update for cups-filters fixes the following issues: CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. CVE-2026-64612: authenticated client that can submit an image print job can...
SUSE-SU-2026:3935-1 Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. - CVE-2026-64612: authenticated client that can submit an image print job...
SUSE-SU-2026:3918-1 Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. - CVE-2026-64612: authenticated client that can submit an image print job...
Security update for cups-filters
This update for cups-filters fixes the following issues: CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. CVE-2026-64612: authenticated client that can submit an image print job can...
Alibaba Cloud Linux 3 : 0277: cups-filters (ALINUX3-SA-2026:0277)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0277 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-64612: A flaw was found in libcupsfilters...
ROOT-OS-DEBIAN-12-CVE-2025-61915 CVE-2025-61915 in cups - Patched by Root
Root has patched CVE-2025-61915 in the cups package for Root:Debian:12. Multiple fixed versions available...