PatchFirst · Latest vulnerabilities
Vulnerabilities published for cups-filters in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374) - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373) - CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in the rastertopclx filter (bsc#1253364)
This update for cups-filters fixes the following issues: - CVE-2024-47175: no validation of IPP attributes in `ppdCreatePPDFromIPP2` when writing to a temporary PPD file allows for the injection of attacker-controlled data to the resulting PPD (bsc#1230932).
This update for cups-filters fixes the following issues: - CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets (bsc#1231294) - CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 (bsc#1230937).
This update for cups-filters fixes the following issues: - cups-browsed would bind on UDP INADDR_ANY:631 and trust any packet from any source to trigger a Get-Printer-Attributes IPP request to an attacker controlled URL. This patch removes support for the legacy CUPS and LDAP protocols(bsc#1230939, CVE-2024-47176)
Check your installed stack and versions against the current vulnerability feeds.