Threats Tagged 'cve-2026-64612'

This update for cups-filters fixes the following issues: Changes in cups-filters: - CVE-2026-64611: Fixed Infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field. A user who controls an IEEE-1284 device ID consumed by `cfIEEE1284GetMakeModel` can drive `cfIEEE1284NormalizeMakeModel` into an infinite loop. (bsc#1273145,GHSA-rcq7-rv5g-j3r4) - CVE-2026-64612: Fixed Malformed PNG aborts CUPS image filter process (missing libpng setjmp recovery) A authenticated client that can submit an image print job can abort the CUPS filter process by supplying a malformed PNG. (bsc#1273146,GHSA-7mxj-cfq5-84ch) - Provide cups-browsed as separated cups-filters-cups-browsed sub-package so users can uninstall this sub-package to completely avoid the generic security risk of cups-browsed. cups-browsed auto-creates local print queues for printers which are announced via DNS-SD. It is a generic security risk when a service (cups-browsed.service) accepts any (possibly malicious) incoming information from any host in the local network (i.e. any DNS-SD announcements) and from that information it auto-creates print queue configurations for CUPS (where its server program cupsd runs as root). For more information see the openSUSE support database article https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings - Fixed a regression "Error about PPD file during 'driverless' printer setup" (boo#1256868) and "ppd pull out from [driverless] printer feature broken" (bsc#1256977) - unbreak qpdf [bsc#1253678] - CVE-2024-47176: Fixed cups-browsed binds to UDP INADDR_ANY:631 (bsc#1230939) and to avoid CVE-2024-47850 "cups-browsed can be abused to initiate remote DDoS against third-party targets" (bsc#1231294) by removing legacy CUPS Browsing support in cups-browsed (introduced 2012) which is no longer needed nowadays. CUPS browsing was removed from CUPS since version 1.6. Legacy CUPS Browsing is a generic security risk, see the section "Automated print queue setup via cups-browsed" in https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings - CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 (bsc#1230937) - CVE-2024-47175: Fixed lack of input sanitization in _ppdCreateFromIPP() (bsc#1230932) - In general regarding CUPS and cups-browsed security issues see https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings

This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field (bsc#1273145). - CVE-2026-64612: malformed PNG aborts CUPS image filter process (bsc#1273146).

Two vulnerabilities in libcupsfilters affect Red Hat Enterprise Linux 10 and SUSE products. CVE-2026-64611 is an infinite-loop CPU exhaustion denial-of-service triggered by an empty MDL field in the cfIEEE1284NormalizeMakeModel function. CVE-2026-64612 causes the CUPS image filter process to abort when processing a malformed PNG file. Security updates addressing these issues have been released by Red Hat and SUSE.

A vulnerability in libcupsfilters and cups-filters allows an unauthenticated attacker to cause a denial of service by submitting a specially crafted PNG print job. The flaw arises because the PNG image reading function creates a libpng reader without an error recovery handler, causing the CUPS image filter process to abort on malformed PNG files. This results in the termination of the in-flight print job. The issue has a CVSS score of 7.5 (medium severity).

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.

Multiple security vulnerabilities have been identified and fixed in cups-filters and cups-browsed packages affecting SUSE and Red Hat Enterprise Linux 9 platforms. These include infinite-loop CPU exhaustion, denial of service via malformed PNG images, lack of input sanitization in printer attribute handling, and remote command injection through PPD files. The update also addresses legacy CUPS browsing security risks and fixes regressions in printer setup. A security update is available to remediate these issues.