Ubuntu alert USN-7878-1 (cups-filters)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7878-1] cups-filters vulnerabilities
Date:
             
 
Thu, 20 Nov 2025 18:15:00 +0000
Message-ID:
             
 
<E1vM9BM-0005PB-SO@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7878-1
November 20, 2025

cups-filters vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in cups-filters.

Software Description:
- cups-filters: OpenPrinting CUPS Filters

Details:

It was discovered that cups-filters incorrectly handled certain malformed
TIFF image files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)

It was discovered that cups-filters incorrectly handled certain malformed
PDF document files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)

It was discovered that cups-filters incorrectly handled certain malformed
CUPS Raster files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-64524)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  cups-filters                    2.0.1-0ubuntu3.25.10.1

Ubuntu 24.04 LTS
  cups-filters                    2.0.0-0ubuntu4.1

Ubuntu 22.04 LTS
  cups-filters                    1.28.15-0ubuntu1.5
  libcupsfilters1                 1.28.15-0ubuntu1.5

Ubuntu 20.04 LTS
  cups-filters                    1.27.4-1ubuntu0.4+esm1
                                  Available with Ubuntu Pro
  libcupsfilters1                 1.27.4-1ubuntu0.4+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  cups-filters                    1.20.2-0ubuntu3.3+esm2
                                  Available with Ubuntu Pro
  libcupsfilters1                 1.20.2-0ubuntu3.3+esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  cups-filters                    1.8.3-2ubuntu3.5+esm3
                                  Available with Ubuntu Pro
  libcupsfilters1                 1.8.3-2ubuntu3.5+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7878-1
  CVE-2025-57812, CVE-2025-64503, CVE-2025-64524

Package Information:
  https://launchpad.net/ubuntu/+source/cups-filters/2.0.1-0...
  https://launchpad.net/ubuntu/+source/cups-filters/2.0.0-0...
  https://launchpad.net/ubuntu/+source/cups-filters/1.28.15...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmkfWFsACgkQcpJm3tlz
hgGTexAAojzKsT9Rqf6SrnuVMT0pvPk4GLHnfrdeFIb8LuIy3vk+TuGkbD/AUItC
zR0qzqLXOSI9M4ur6pLZbUMiaE2mbJF39CnSpB32tBddRrunGI1jXolZCs6wE1A+
Zk/lqHmv2JCS0+BAcvRbOYowltk0bsLh2b1PiCRFBzAvWWcpDeY2uhiOGFNhZH7W
q889a7/Pw+PN/h2mBgYnzJjEhiQorfu+hfkVbbkJR28V+WPONNEzc73lsdjd6hiT
j7kJtpa9YvqjiEsF3n3uagd6JNdEVDrRn1+kqjJi8VN/U4AWvxyLrOcz30p4PEXL
0qU1ry07JTJ0RHbBUTqM1HZNz+N0JKrGaiKcf/Z8YoJq6BhcniA42t1/JCX/zusL
nSlV+8YC7+oKp+UGp4SDanEOynMoIrjY1hhlQhvzRv0rYO/ySf9B+tTH7IboN+V2
J8AoDW+1KWLhuZfNA6yTVq6I6ilpV4Wf5vY5H6miAOBCdkXl7+psY6sPQyAJ+ov5
3E/oNqV6e8YblsLvSSMuXrvGiUbx92DdsmRFZWFqP4186Jl2ciG2uyuacTC6bcRF
aQV8I2mhfZEcbg4t3TibF3p7hMms18ztQerjbWtSBY61DtSi7DU10/LCLuJHEkP8
2pUnc1aj2QhzDbDUQC5OI9o4pyZFd5Ty/Ri0RC+s9QS4VxAGDIY=
=YP/T
-----END PGP SIGNATURE-----