Debian alert DLA-4380-1 (cups-filters)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4380-1] cups-filters security update
Date:
             
 
Tue, 25 Nov 2025 18:30:45 +0000
Message-ID:
             
 
<3c53997c-4e8f-768a-481c-20e2c7a9b4@alteholz.de>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4380-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
November 25, 2025                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : cups-filters
Version        : 1.28.7-1+deb11u4
CVE ID         : CVE-2025-57812 CVE-2025-64503 CVE-2025-64524


Several issues have been found in cups-filters, which provides additional 
CUPS filters, that are not part of the CUPS project.
All issues are related to out of bounds read or writes or a heap buffer 
overflow.


For Debian 11 bullseye, these problems have been fixed in version
1.28.7-1+deb11u4.

We recommend that you upgrade your cups-filters packages.

For the detailed security status of cups-filters please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/cups-filters

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=A2hK
-----END PGP SIGNATURE-----