Ubuntu alert USN-7878-2 (cups-filters)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7878-2] cups-filters vulnerabilities
Date:
             
 
Mon, 24 Nov 2025 13:19:52 +0000
Message-ID:
             
 
<E1vNWTw-0002Ld-Jt@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7878-2
November 24, 2025

cups-filters vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04

Summary:

Several security issues were fixed in cups-filters.

Software Description:
- cups-filters: OpenPrinting CUPS Filters

Details:

USN-7878-1 fixed vulnerabilities in cups-filters, This update provides the
corresponding update for CVE-2025-64524 for Ubuntu 25.04.

Original advisory details:

 It was discovered that cups-filters incorrectly handled certain malformed
 TIFF image files. A remote attacker could use this issue to cause
 cups-filters to crash, resulting in a denial of service, or possibly
 execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
 Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)

 It was discovered that cups-filters incorrectly handled certain malformed
 PDF document files. A remote attacker could use this issue to cause
 cups-filters to crash, resulting in a denial of service, or possibly
 execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
 Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)

 It was discovered that cups-filters incorrectly handled certain malformed
 CUPS Raster files. A remote attacker could use this issue to cause
 cups-filters to crash, resulting in a denial of service, or possibly
 execute arbitrary code. (CVE-2025-64524)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  cups-filters                    2.0.1-0ubuntu3.25.04.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7878-2
  https://ubuntu.com/security/notices/USN-7878-1
  CVE-2025-64524

Package Information:
  https://launchpad.net/ubuntu/+source/cups-filters/2.0.1-0...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Pjdl
-----END PGP SIGNATURE-----