Ubuntu alert USN-7877-1 (libcupsfilters)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7877-1] libcupsfilters vulnerabilities
Date:
             
 
Thu, 20 Nov 2025 18:04:09 +0000
Message-ID:
             
 
<E1vM90r-0007CW-Gm@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7877-1
November 20, 2025

libcupsfilters vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 25.04
- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in libcupsfilters.

Software Description:
- libcupsfilters: OpenPrinting libcupsfilters

Details:

It was discovered that libcupsfilters incorrectly handled certain malformed
TIFF image files. A remote attacker could use this issue to cause
libcupsfilters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-57812)

It was discovered that libcupsfilters incorrectly handled certain malformed
PDF document files. A remote attacker could use this issue to cause
libcupsfilters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-64503)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  libcupsfilters2t64              2.1.1-0ubuntu3.1

Ubuntu 25.04
  libcupsfilters2t64              2.1.1-0ubuntu2.1

Ubuntu 24.04 LTS
  libcupsfilters2t64              2.0.0-0ubuntu7.2

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7877-1
  CVE-2025-57812, CVE-2025-64503

Package Information:
  https://launchpad.net/ubuntu/+source/libcupsfilters/2.1.1...
  https://launchpad.net/ubuntu/+source/libcupsfilters/2.1.1...
  https://launchpad.net/ubuntu/+source/libcupsfilters/2.0.0...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=KiPG
-----END PGP SIGNATURE-----