Description
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenPrinting | cups-filters | <= 2.0.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups-filters | 1.28.17-7 | — |
| Debian 13 | cups-filters | 1.28.17-6+deb13u1 | — |
| Debian 12 | cups-filters | 1.28.17-3+deb12u2 | — |
| Debian 11 | cups-filters | 1.28.7-1+deb11u4 | DLA-4380-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | cups-filters | 2.0.1-0ubuntu3.25.10.1 | USN-7878-1 |
| Ubuntu 25.04 | cups-filters | 2.0.1-0ubuntu3.25.04.1 | USN-7878-2 |
| Ubuntu 24.04 LTS | cups-filters | 2.0.0-0ubuntu4.1 | USN-7878-1 |
| Ubuntu 22.04 LTS | cups-filters | 1.28.15-0ubuntu1.5 | USN-7878-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | cups-filters | 1.27.4-1ubuntu0.4+esm1 | USN-7878-1 |
| Ubuntu Pro 18.04 LTS | cups-filters | 1.20.2-0ubuntu3.3+esm2 | USN-7878-1 |
| Ubuntu Pro 16.04 LTS | cups-filters | 1.8.3-2ubuntu3.5+esm3 | USN-7878-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | cups-filters | 1.25.0-150200.3.25.1 | SUSE-SU-2025:4158-1 |
| SLES 15 SP6 | cups-filters | 1.25.0-150200.3.25.1 | SUSE-SU-2025:4158-1 |
| SLES 12 SP5 | cups-filters | 1.0.58-19.35.1 | SUSE-SU-2025:4198-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | cups-filters | 1.25.0-150200.3.25.1 | SUSE-SU-2025:4158-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | cups-filters +2 | 1.28.16-3.amzn2023.0.5 | ALAS2023-2025-1291 |
| Amazon Linux 2 | cups-filters +2 | 1.0.35-26.amzn2.0.2 | ALAS2-2025-3082 |
Advisories 9
- WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
- USN-7878-1 cups-filters vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- SUSE-SU-2025:4198-1 Security update for cups-filters SUSE / openSUSE Security Updates · Mar 23, 2026
- USN-7878-2 cups-filters vulnerabilities Ubuntu Security Notices (USN) · Feb 4, 2026
- SUSE-SU-2025:4158-1 Security update for cups-filters SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-2655 CUPS-Filters: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Dec 8, 2025
- ALAS2023-2025-1291 Moderate: cups-filters security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Dec 8, 2025
- ALAS2-2025-3082 Moderate: cups-filters security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Dec 8, 2025
- DLA-4380-1 cups-filters - security update Debian Security (DSA / DLA) · Nov 25, 2025