Security update for cups SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4290-1 Final 1 1 2025-11-28T09:04:34Z current 2025-11-28T09:04:34Z 2025-11-28T09:04:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for cups This update for cups fixes the following issues: - CVE-2025-61915: Fixed a local denial-of-service via cupsd.conf update and related issues. (bsc#1253783) - CVE-2025-58436: Fixed an issue where a slow client communication leads to a possible DoS attack. (bsc#1244057) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/kiosk/firefox-esr:latest-2025-4290,Container suse/samba-server:latest-2025-4290,SUSE-2025-4290,SUSE-SLE-Micro-5.3-2025-4290,SUSE-SLE-Micro-5.4-2025-4290,SUSE-SLE-Micro-5.5-2025-4290,SUSE-SLE-Module-Basesystem-15-SP6-2025-4290,SUSE-SLE-Module-Basesystem-15-SP7-2025-4290,SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-4290,SUSE-SLE-Module-Desktop-Applications-15-SP7-2025-4290,SUSE-SLE-Module-Development-Tools-15-SP6-2025-4290,SUSE-SLE-Module-Development-Tools-15-SP7-2025-4290,SUSE-SUSE-MicroOS-5.2-2025-4290,openSUSE-SLE-15.6-2025-4290 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254290-1/ Link for SUSE-SU-2025:4290-1 https://lists.suse.com/pipermail/sle-security-updates/2025-November/023424.html E-Mail link for SUSE-SU-2025:4290-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1234225 SUSE Bug 1234225 https://bugzilla.suse.com/1244057 SUSE Bug 1244057 https://bugzilla.suse.com/1253783 SUSE Bug 1253783 https://www.suse.com/security/cve/CVE-2025-58436/ SUSE CVE CVE-2025-58436 page https://www.suse.com/security/cve/CVE-2025-61915/ SUSE CVE CVE-2025-61915 page Container suse/kiosk/firefox-esr:latest Container suse/samba-server:latest SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 openSUSE Leap 15.6 cups-config-2.2.7-150000.3.77.1 libcups2-2.2.7-150000.3.77.1 cups-2.2.7-150000.3.77.1 cups-client-2.2.7-150000.3.77.1 cups-ddk-2.2.7-150000.3.77.1 cups-devel-2.2.7-150000.3.77.1 cups-devel-32bit-2.2.7-150000.3.77.1 cups-devel-64bit-2.2.7-150000.3.77.1 libcups2-32bit-2.2.7-150000.3.77.1 libcups2-64bit-2.2.7-150000.3.77.1 libcupscgi1-2.2.7-150000.3.77.1 libcupscgi1-32bit-2.2.7-150000.3.77.1 libcupscgi1-64bit-2.2.7-150000.3.77.1 libcupsimage2-2.2.7-150000.3.77.1 libcupsimage2-32bit-2.2.7-150000.3.77.1 libcupsimage2-64bit-2.2.7-150000.3.77.1 libcupsmime1-2.2.7-150000.3.77.1 libcupsmime1-32bit-2.2.7-150000.3.77.1 libcupsmime1-64bit-2.2.7-150000.3.77.1 libcupsppdc1-2.2.7-150000.3.77.1 libcupsppdc1-32bit-2.2.7-150000.3.77.1 libcupsppdc1-64bit-2.2.7-150000.3.77.1 cups-config-2.2.7-150000.3.77.1 as a component of Container suse/kiosk/firefox-esr:latest libcups2-2.2.7-150000.3.77.1 as a component of Container suse/kiosk/firefox-esr:latest cups-config-2.2.7-150000.3.77.1 as a component of Container suse/samba-server:latest libcups2-2.2.7-150000.3.77.1 as a component of Container suse/samba-server:latest cups-config-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.2 libcups2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.2 cups-config-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.3 libcups2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.3 cups-config-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.4 libcups2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.4 cups-config-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.5 libcups2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Micro 5.5 cups-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 cups-client-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 cups-config-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 cups-devel-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcups2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcupscgi1-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcupsimage2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcupsmime1-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcupsppdc1-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 cups-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 cups-client-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 cups-config-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 cups-devel-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcups2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcupscgi1-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcupsimage2-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcupsmime1-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcupsppdc1-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcups2-32bit-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libcups2-32bit-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 cups-ddk-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 cups-ddk-2.2.7-150000.3.77.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 cups-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 cups-client-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 cups-config-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 cups-ddk-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 cups-devel-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 cups-devel-32bit-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcups2-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcups2-32bit-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupscgi1-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupscgi1-32bit-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupsimage2-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupsimage2-32bit-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupsmime1-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupsmime1-32bit-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupsppdc1-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 libcupsppdc1-32bit-2.2.7-150000.3.77.1 as a component of openSUSE Leap 15.6 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15. CVE-2025-58436 Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.77.1 Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.77.1 Container suse/samba-server:latest:cups-config-2.2.7-150000.3.77.1 Container suse/samba-server:latest:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.2:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.2:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.3:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.3:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.4:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.4:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.5:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.5:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-client-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-devel-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupscgi1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupsimage2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupsmime1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupsppdc1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-client-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-devel-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupscgi1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupsimage2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupsmime1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupsppdc1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libcups2-32bit-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libcups2-32bit-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:cups-ddk-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:cups-ddk-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-client-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-config-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-ddk-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-devel-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-devel-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcups2-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcups2-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupscgi1-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupscgi1-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsimage2-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsimage2-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsmime1-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsmime1-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsppdc1-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsppdc1-32bit-2.2.7-150000.3.77.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254290-1/ https://www.suse.com/security/cve/CVE-2025-58436.html CVE-2025-58436 https://bugzilla.suse.com/1244057 SUSE Bug 1244057 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15. CVE-2025-61915 Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.77.1 Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.77.1 Container suse/samba-server:latest:cups-config-2.2.7-150000.3.77.1 Container suse/samba-server:latest:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.2:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.2:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.3:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.3:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.4:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.4:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.5:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Micro 5.5:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-client-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-devel-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupscgi1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupsimage2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupsmime1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcupsppdc1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-client-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-config-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-devel-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcups2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupscgi1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupsimage2-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupsmime1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcupsppdc1-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libcups2-32bit-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libcups2-32bit-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:cups-ddk-2.2.7-150000.3.77.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:cups-ddk-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-client-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-config-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-ddk-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-devel-2.2.7-150000.3.77.1 openSUSE Leap 15.6:cups-devel-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcups2-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcups2-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupscgi1-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupscgi1-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsimage2-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsimage2-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsmime1-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsmime1-32bit-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsppdc1-2.2.7-150000.3.77.1 openSUSE Leap 15.6:libcupsppdc1-32bit-2.2.7-150000.3.77.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254290-1/ https://www.suse.com/security/cve/CVE-2025-61915.html CVE-2025-61915 https://bugzilla.suse.com/1253783 SUSE Bug 1253783