CVE-2025-58436

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.(CVE-2025-58436)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.(CVE-2025-61915)

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.(CVE-2025-58436)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.(CVE-2025-61915)

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.(CVE-2025-58436)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.(CVE-2025-61915)

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.(CVE-2025-58436)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.(CVE-2025-61915)

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.(CVE-2025-58436)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.(CVE-2025-61915)

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.(CVE-2025-58436)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.(CVE-2025-61915)

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

• CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)

• cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

• CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)

• cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

• CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)

• cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Root has patched CVE-2025-58436 in the cups package for Root:Debian:12. Multiple fixed versions available.

Root has patched CVE-2025-58436 in the cups package for Root:Debian:13. Multiple fixed versions available.

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

• CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
• cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

• CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
• cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

• CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
• cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

• SECURITY UPDATE: Possible DoS attack caused by a slow client communication
  • debian/patches/CVE-2025-58436.patch: fix unresponsive cupsd process caused by a slow client
  • CVE-2025-58436

• SECURITY UPDATE: Possible DoS attack caused by a slow client communication
  • debian/patches/CVE-2025-58436.patch: fix unresponsive cupsd process caused by a slow client
  • CVE-2025-58436

• SECURITY UPDATE: fix DoS by a client that connect to cupsd sends slow messages.
  • debian/patches/CVE-2025-58436.patch: fix unresponsive cupsd process caused by a slow client.
  • CVE-2025-58436.
• Fix test/run-stp-tests.sh
  • debian/patches/waiting-limit.patch: limit the waiting for a server dunring tests

• CVE-2025-58436: fix unresponsive cupsd process caused by a slow client

• CVE-2025-58436: fix unresponsive cupsd process caused by a slow client

• CVE-2025-58436: fix issue where slow messages could delay cupsd

• CVE-2025-58436: fix issue where slow messages could delay cupsd

• SECURITY UPDATE: cupsd DoS via slow client connections

• debian/patches/CVE-2025-58436.patch: implement non-blocking I/O and connection timeouts to prevent slow clients from blocking cupsd.
• CVE-2025-58436

• CVE-2025-58436: fix issue where slow messages could delay cupsd

The updated packages fix security vulnerabilities and a regression with GTK+ apps caused by the fix for CVE-2025-58436: OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack. (CVE-2025-58436) OpenPrinting CUPS vulnerable to stack based out-of-bound write. (CVE-2025-61915)

These are all security issues fixed in the cups-2.4.16-1.1 package on the GA media of openSUSE Tumbleweed.

This update for cups fixes the following issues:

Update to version 2.4.16.

Security issues fixed:

• CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783).
• CVE-2025-58436: slow client communication leads to a possible DoS attack (bsc#1244057).
• CVE-2025-58364: unsafe deserialization and validation of printer attributes can cause a null dereference (bsc#1249128).
• CVE-2025-58060: authentication bypass with AuthType Negotiate (bsc#1249049).

Other updates and bugfixes:

• Version upgrade to 2.4.16:

  • 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences, potentially reading past the end of the source string (Issue #1438)
  • The web interface did not support domain usernames fully (Issue #1441)
  • Fixed an infinite loop issue in the GTK+ print dialog (Issue #1439 boo#1254353)
  • Fixed stopping scheduler on unknown directive in configuration (Issue #1443)
  • Fixed packages for Immutable Mode (jsc#PED-14775 from epic jsc#PED-14688)

• Version upgrade to 2.4.15:

  • Fixed potential crash in 'cups-driverd' when there are duplicate PPDs (Issue #1355)
  • Fixed error recovery when scanning for PPDs in 'cups-driverd' (Issue #1416)

• Version upgrade to 2.4.14.

• Version upgrade to 2.4.13:

  • Added 'print-as-raster' printer and job attributes for forcing rasterization (Issue #1282)
  • Updated documentation (Issue #1086)
  • Updated IPP backend to try a sanitized user name if the printer/server does not like the value (Issue #1145)
  • Updated the scheduler to send the "printer-added" or "printer-modified" events whenever an IPP Everywhere PPD is installed (Issue #1244)
  • Updated the scheduler to send the "printer-modified" event whenever the system default printer is changed (Issue #1246)
  • Fixed a memory leak in 'httpClose' (Issue #1223)
  • Fixed missing commas in 'ippCreateRequestedArray' (Issue #1234)
  • Fixed subscription issues in the scheduler and D-Bus notifier (Issue #1235)
  • Fixed media-default reporting for custom sizes (Issue #1238)
  • Fixed support for IPP/PPD options with periods or underscores (Issue #1249)
  • Fixed parsing of real numbers in PPD compiler source files (Issue #1263)
  • Fixed scheduler freezing with zombie clients (Issue #1264)
  • Fixed support for the server name in the ErrorLog filename (Issue #1277)
  • Fixed job cleanup after daemon restart (Issue #1315)
  • Fixed handling of buggy DYMO USB printer serial numbers (Issue #1338)
  • Fixed unreachable block in IPP backend (Issue #1351)
  • Fixed memory leak in _cupsConvertOptions (Issue #1354)

• Version upgrade to 2.4.12:

  • GnuTLS follows system crypto policies now (Issue #1105)
  • Added NoSystem SSLOptions value (Issue #1130)
  • Now we raise alert for certificate issues (Issue #1194)
  • Added Kyocera USB quirk (Issue #1198)
  • The scheduler now logs a job's debugging history if the backend fails (Issue #1205)
  • Fixed a potential timing issue with cupsEnumDests (Issue #1084)
  • Fixed a potential "lost PPD" condition in the scheduler (Issue #1109)
  • Fixed a compressed file error handling bug (Issue #1070)
  • Fixed a bug in the make-and-model whitespace trimming code (Issue #1096)
  • Fixed a removal of IPP Everywhere permanent queue if installation failed (Issue #1102)
  • Fixed ServerToken None in scheduler (Issue #1111)
  • Fixed invalid IPP keyword values created from PPD option names (Issue #1118)
  • Fixed handling of "media" and "PageSize" in the same print request (Issue #1125)
  • Fixed client raster printing from macOS (Issue #1143)
  • Fixed the default User-Agent string.
  • Fixed a recursion issue in ippReadIO.
  • Fixed handling incorrect radix in scan_ps() (Issue #1188)
  • Fixed validation of dateTime values with time zones more than UTC+11 (Issue #1201)
  • Fixed attributes returned by the Create-Xxx-Subscriptions requests (Issue…

This update for cups fixes the following issues:

• CVE-2025-61915: Fixed a local denial-of-service via cupsd.conf update and related issues. (bsc#1253783)
• CVE-2025-58436: Fixed an issue where a slow client communication leads to a possible DoS attack. (bsc#1244057)

This update for cups fixes the following issues:

• The fix for CVE-2025-58436 causes a regression where GTK applications will hang. (bsc#1254353)

  See also https://github.com/OpenPrinting/cups/issues/1429

  The fix has been temporary disabled.

This update for cups fixes the following issues:

Security issues fixed:

• CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057).

Other issues fixed:

• Update the CVE-2025-58436 patch to fix a regression that causes GTK applications to hang (bsc#1254353).

This update for cups fixes the following issues:

Update to version 2.4.16.

Security issues fixed:

• CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783).
• CVE-2025-58436: slow client communication leads to a possible DoS attack (bsc#1244057).
• CVE-2025-58364: unsafe deserialization and validation of printer attributes can cause a null dereference (bsc#1249128).
• CVE-2025-58060: authentication bypass with AuthType Negotiate (bsc#1249049).

Other updates and bugfixes:

• Version upgrade to 2.4.16:

  • 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences, potentially reading past the end of the source string (Issue #1438)
  • The web interface did not support domain usernames fully (Issue #1441)
  • Fixed an infinite loop issue in the GTK+ print dialog (Issue #1439 boo#1254353)
  • Fixed stopping scheduler on unknown directive in configuration (Issue #1443)
  • Fixed packages for Immutable Mode (jsc#PED-14775 from epic jsc#PED-14688)

• Version upgrade to 2.4.15:

  • Fixed potential crash in 'cups-driverd' when there are duplicate PPDs (Issue #1355)
  • Fixed error recovery when scanning for PPDs in 'cups-driverd' (Issue #1416)

• Version upgrade to 2.4.14.

• Version upgrade to 2.4.13:

  • Added 'print-as-raster' printer and job attributes for forcing rasterization (Issue #1282)
  • Updated documentation (Issue #1086)
  • Updated IPP backend to try a sanitized user name if the printer/server does not like the value (Issue #1145)
  • Updated the scheduler to send the "printer-added" or "printer-modified" events whenever an IPP Everywhere PPD is installed (Issue #1244)
  • Updated the scheduler to send the "printer-modified" event whenever the system default printer is changed (Issue #1246)
  • Fixed a memory leak in 'httpClose' (Issue #1223)
  • Fixed missing commas in 'ippCreateRequestedArray' (Issue #1234)
  • Fixed subscription issues in the scheduler and D-Bus notifier (Issue #1235)
  • Fixed media-default reporting for custom sizes (Issue #1238)
  • Fixed support for IPP/PPD options with periods or underscores (Issue #1249)
  • Fixed parsing of real numbers in PPD compiler source files (Issue #1263)
  • Fixed scheduler freezing with zombie clients (Issue #1264)
  • Fixed support for the server name in the ErrorLog filename (Issue #1277)
  • Fixed job cleanup after daemon restart (Issue #1315)
  • Fixed handling of buggy DYMO USB printer serial numbers (Issue #1338)
  • Fixed unreachable block in IPP backend (Issue #1351)
  • Fixed memory leak in _cupsConvertOptions (Issue #1354)

• Version upgrade to 2.4.12:

  • GnuTLS follows system crypto policies now (Issue #1105)
  • Added NoSystem SSLOptions value (Issue #1130)
  • Now we raise alert for certificate issues (Issue #1194)
  • Added Kyocera USB quirk (Issue #1198)
  • The scheduler now logs a job's debugging history if the backend fails (Issue #1205)
  • Fixed a potential timing issue with cupsEnumDests (Issue #1084)
  • Fixed a potential "lost PPD" condition in the scheduler (Issue #1109)
  • Fixed a compressed file error handling bug (Issue #1070)
  • Fixed a bug in the make-and-model whitespace trimming code (Issue #1096)
  • Fixed a removal of IPP Everywhere permanent queue if installation failed (Issue #1102)
  • Fixed ServerToken None in scheduler (Issue #1111)
  • Fixed invalid IPP keyword values created from PPD option names (Issue #1118)
  • Fixed handling of "media" and "PageSize" in the same print request (Issue #1125)
  • Fixed client raster printing from macOS (Issue #1143)
  • Fixed the default User-Agent string.
  • Fixed a recursion issue in ippReadIO.
  • Fixed handling incorrect radix in scan_ps() (Issue #1188)
  • Fixed validation of dateTime values with time zones more than UTC+11 (Issue #1201)
  • Fixed attributes returned by the Create-Xxx-Subscriptions requests (Issue…

This update for cups fixes the following issues:

Update to version 2.4.16.

Security issues fixed:

• CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783).
• CVE-2025-58436: slow client communication leads to a possible DoS attack (bsc#1244057).
• CVE-2025-58364: unsafe deserialization and validation of printer attributes can cause a null dereference (bsc#1249128).
• CVE-2025-58060: authentication bypass with AuthType Negotiate (bsc#1249049).

Other updates and bugfixes:

• Version upgrade to 2.4.16:

  • 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences, potentially reading past the end of the source string (Issue #1438)
  • The web interface did not support domain usernames fully (Issue #1441)
  • Fixed an infinite loop issue in the GTK+ print dialog (Issue #1439 boo#1254353)
  • Fixed stopping scheduler on unknown directive in configuration (Issue #1443)
  • Fixed packages for Immutable Mode (jsc#PED-14775 from epic jsc#PED-14688)

• Version upgrade to 2.4.15:

  • Fixed potential crash in 'cups-driverd' when there are duplicate PPDs (Issue #1355)
  • Fixed error recovery when scanning for PPDs in 'cups-driverd' (Issue #1416)

• Version upgrade to 2.4.14.

• Version upgrade to 2.4.13:

  • Added 'print-as-raster' printer and job attributes for forcing rasterization (Issue #1282)
  • Updated documentation (Issue #1086)
  • Updated IPP backend to try a sanitized user name if the printer/server does not like the value (Issue #1145)
  • Updated the scheduler to send the "printer-added" or "printer-modified" events whenever an IPP Everywhere PPD is installed (Issue #1244)
  • Updated the scheduler to send the "printer-modified" event whenever the system default printer is changed (Issue #1246)
  • Fixed a memory leak in 'httpClose' (Issue #1223)
  • Fixed missing commas in 'ippCreateRequestedArray' (Issue #1234)
  • Fixed subscription issues in the scheduler and D-Bus notifier (Issue #1235)
  • Fixed media-default reporting for custom sizes (Issue #1238)
  • Fixed support for IPP/PPD options with periods or underscores (Issue #1249)
  • Fixed parsing of real numbers in PPD compiler source files (Issue #1263)
  • Fixed scheduler freezing with zombie clients (Issue #1264)
  • Fixed support for the server name in the ErrorLog filename (Issue #1277)
  • Fixed job cleanup after daemon restart (Issue #1315)
  • Fixed handling of buggy DYMO USB printer serial numbers (Issue #1338)
  • Fixed unreachable block in IPP backend (Issue #1351)
  • Fixed memory leak in _cupsConvertOptions (Issue #1354)

• Version upgrade to 2.4.12:

  • GnuTLS follows system crypto policies now (Issue #1105)
  • Added NoSystem SSLOptions value (Issue #1130)
  • Now we raise alert for certificate issues (Issue #1194)
  • Added Kyocera USB quirk (Issue #1198)
  • The scheduler now logs a job's debugging history if the backend fails (Issue #1205)
  • Fixed a potential timing issue with cupsEnumDests (Issue #1084)
  • Fixed a potential "lost PPD" condition in the scheduler (Issue #1109)
  • Fixed a compressed file error handling bug (Issue #1070)
  • Fixed a bug in the make-and-model whitespace trimming code (Issue #1096)
  • Fixed a removal of IPP Everywhere permanent queue if installation failed (Issue #1102)
  • Fixed ServerToken None in scheduler (Issue #1111)
  • Fixed invalid IPP keyword values created from PPD option names (Issue #1118)
  • Fixed handling of "media" and "PageSize" in the same print request (Issue #1125)
  • Fixed client raster printing from macOS (Issue #1143)
  • Fixed the default User-Agent string.
  • Fixed a recursion issue in ippReadIO.
  • Fixed handling incorrect radix in scan_ps() (Issue #1188)
  • Fixed validation of dateTime values with time zones more than UTC+11 (Issue #1201)
  • Fixed attributes returned by the Create-Xxx-Subscriptions requests (Issue…

This update for cups fixes the following issues:

Update to version 2.4.16.

Security issues fixed:

• CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057).
• CVE-2025-58060: authentication bypass with AuthType negotiate (bsc#1249049).
• CVE-2025-58364: unsafe deserialization and validation of printer attributes can lead to null dereference (bsc#1249128).
• CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783).

Other updates and bugfixes:

• Version upgrade to 2.4.16:

  • 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences, potentially reading past the end of the source string (Issue #1438)
  • The web interface did not support domain usernames fully (Issue #1441)
  • Fixed an infinite loop issue in the GTK+ print dialog (Issue #1439 bsc#1254353)
  • Fixed stopping scheduler on unknown directive in configuration (Issue #1443)

• Version upgrade to 2.4.15:

  • Fixed potential crash in 'cups-driverd' when there are duplicate PPDs (Issue #1355)
  • Fixed error recovery when scanning for PPDs in 'cups-driverd' (Issue #1416)

• Fix packages for Immutable Mode - cups (jsc#PED-14775,jsc#PED-14688)

• Version upgrade to 2.4.14.

• Version upgrade to 2.4.13:

  • Added 'print-as-raster' printer and job attributes for forcing rasterization (Issue #1282)
  • Updated documentation (Issue #1086)
  • Updated IPP backend to try a sanitized user name if the printer/server does not like the value (Issue #1145)
  • Updated the scheduler to send the "printer-added" or "printer-modified" events whenever an IPP Everywhere PPD is installed (Issue #1244)
  • Updated the scheduler to send the "printer-modified" event whenever the system default printer is changed (Issue #1246)
  • Fixed a memory leak in 'httpClose' (Issue #1223)
  • Fixed missing commas in 'ippCreateRequestedArray' (Issue #1234)
  • Fixed subscription issues in the scheduler and D-Bus notifier (Issue #1235)
  • Fixed media-default reporting for custom sizes (Issue #1238)
  • Fixed support for IPP/PPD options with periods or underscores (Issue #1249)
  • Fixed parsing of real numbers in PPD compiler source files (Issue #1263)
  • Fixed scheduler freezing with zombie clients (Issue #1264)
  • Fixed support for the server name in the ErrorLog filename (Issue #1277)
  • Fixed job cleanup after daemon restart (Issue #1315)
  • Fixed handling of buggy DYMO USB printer serial numbers (Issue #1338)
  • Fixed unreachable block in IPP backend (Issue #1351)
  • Fixed memory leak in _cupsConvertOptions (Issue #1354)

• Version upgrade to 2.4.12:

  • GnuTLS follows system crypto policies now (Issue #1105)
  • Added NoSystem SSLOptions value (Issue #1130)
  • Now we raise alert for certificate issues (Issue #1194)
  • Added Kyocera USB quirk (Issue #1198)
  • The scheduler now logs a job's debugging history if the backend fails (Issue #1205)
  • Fixed a potential timing issue with cupsEnumDests (Issue #1084)
  • Fixed a potential "lost PPD" condition in the scheduler (Issue #1109)
  • Fixed a compressed file error handling bug (Issue #1070)
  • Fixed a bug in the make-and-model whitespace trimming code (Issue #1096)
  • Fixed a removal of IPP Everywhere permanent queue if installation failed (Issue #1102)
  • Fixed ServerToken None in scheduler (Issue #1111)
  • Fixed invalid IPP keyword values created from PPD option names (Issue #1118)
  • Fixed handling of "media" and "PageSize" in the same print request (Issue #1125)
  • Fixed client raster printing from macOS (Issue #1143)
  • Fixed the default User-Agent string.
  • Fixed a recursion issue in ippReadIO.
  • Fixed handling incorrect radix in scan_ps() (Issue #1188)
  • Fixed validation of dateTime values with time zones more than UTC+11 (Issue #1201)
  • Fixed attributes returned…

This update for cups fixes the following issues:

Update to version 2.4.16.

Security issues fixed:

• CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057).
• CVE-2025-58060: authentication bypass with AuthType negotiate (bsc#1249049).
• CVE-2025-58364: unsafe deserialization and validation of printer attributes can lead to null dereference (bsc#1249128).
• CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783).

Other updates and bugfixes:

• Version upgrade to 2.4.16:

  • 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences, potentially reading past the end of the source string (Issue #1438)
  • The web interface did not support domain usernames fully (Issue #1441)
  • Fixed an infinite loop issue in the GTK+ print dialog (Issue #1439 bsc#1254353)
  • Fixed stopping scheduler on unknown directive in configuration (Issue #1443)

• Version upgrade to 2.4.15:

  • Fixed potential crash in 'cups-driverd' when there are duplicate PPDs (Issue #1355)
  • Fixed error recovery when scanning for PPDs in 'cups-driverd' (Issue #1416)

• Fix packages for Immutable Mode - cups (jsc#PED-14775,jsc#PED-14688)

• Version upgrade to 2.4.14.

• Version upgrade to 2.4.13:

  • Added 'print-as-raster' printer and job attributes for forcing rasterization (Issue #1282)
  • Updated documentation (Issue #1086)
  • Updated IPP backend to try a sanitized user name if the printer/server does not like the value (Issue #1145)
  • Updated the scheduler to send the "printer-added" or "printer-modified" events whenever an IPP Everywhere PPD is installed (Issue #1244)
  • Updated the scheduler to send the "printer-modified" event whenever the system default printer is changed (Issue #1246)
  • Fixed a memory leak in 'httpClose' (Issue #1223)
  • Fixed missing commas in 'ippCreateRequestedArray' (Issue #1234)
  • Fixed subscription issues in the scheduler and D-Bus notifier (Issue #1235)
  • Fixed media-default reporting for custom sizes (Issue #1238)
  • Fixed support for IPP/PPD options with periods or underscores (Issue #1249)
  • Fixed parsing of real numbers in PPD compiler source files (Issue #1263)
  • Fixed scheduler freezing with zombie clients (Issue #1264)
  • Fixed support for the server name in the ErrorLog filename (Issue #1277)
  • Fixed job cleanup after daemon restart (Issue #1315)
  • Fixed handling of buggy DYMO USB printer serial numbers (Issue #1338)
  • Fixed unreachable block in IPP backend (Issue #1351)
  • Fixed memory leak in _cupsConvertOptions (Issue #1354)

• Version upgrade to 2.4.12:

  • GnuTLS follows system crypto policies now (Issue #1105)
  • Added NoSystem SSLOptions value (Issue #1130)
  • Now we raise alert for certificate issues (Issue #1194)
  • Added Kyocera USB quirk (Issue #1198)
  • The scheduler now logs a job's debugging history if the backend fails (Issue #1205)
  • Fixed a potential timing issue with cupsEnumDests (Issue #1084)
  • Fixed a potential "lost PPD" condition in the scheduler (Issue #1109)
  • Fixed a compressed file error handling bug (Issue #1070)
  • Fixed a bug in the make-and-model whitespace trimming code (Issue #1096)
  • Fixed a removal of IPP Everywhere permanent queue if installation failed (Issue #1102)
  • Fixed ServerToken None in scheduler (Issue #1111)
  • Fixed invalid IPP keyword values created from PPD option names (Issue #1118)
  • Fixed handling of "media" and "PageSize" in the same print request (Issue #1125)
  • Fixed client raster printing from macOS (Issue #1143)
  • Fixed the default User-Agent string.
  • Fixed a recursion issue in ippReadIO.
  • Fixed handling incorrect radix in scan_ps() (Issue #1188)
  • Fixed validation of dateTime values with time zones more than UTC+11 (Issue #1201)
  • Fixed attributes returned…

Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients that send messages slowly. A remote attacker could possibly use this issue to cause CUPS to stop responding, resulting in a denial of service. (CVE-2025-58436)

In addition, this update fixes a regression introduced in USN-7897-1 which resulted in certain invalid configuration file directives to cause the CUPS daemon to fail to start.

USN-7912-1 fixed vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

Original advisory details:

Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients that send messages slowly. A remote attacker could possibly use this issue to cause CUPS to stop responding, resulting in a denial of service. (CVE-2025-58436)

In addition, this update fixes a regression introduced in USN-7897-1 which resulted in certain invalid configuration file directives to cause the CUPS daemon to fail to start.