Moderate Vulnerability in libcupsfilters: CPU Exhaustion and Image Filter Process Abort
Summary
ALSA-2026:56965: Moderate: libcupsfilters security update. Affects libcupsfilters versions < 1:2.0.0-13.el10_2. Fixed in 1:2.0.0-13.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Libcupsfilters is a library that implements common functions used in the cups-browsed daemon and printing filters. It provides essential functionalities for managing print jobs and printer applications, including banner templates and character sets. This package is integral to the CUPS (Common Unix Printing System) ecosystem, which facilitates printing on Unix-like operating systems. However, vulnerabilities in this package can lead to significant security risks, particularly in environments where printing services are critical.
Vulnerability Detail
The libcupsfilters package has been identified with two critical vulnerabilities. The first, CVE-2026-64611, allows for CPU exhaustion due to an infinite loop in the function cfIEEE1284NormalizeMakeModel(). This can lead to denial of service, as the affected system may become unresponsive. The second vulnerability, CVE-2026-64612, involves a process abort in the CUPS image filter when handling malformed PNG files, which can also disrupt printing services and lead to potential data loss.
How To Fix
Minimum fixed version
1:2.0.0-13.el10_2
This is the first release that contains the fix.
sudo dnf update libcupsfiltersTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may disable the cups-browsed service to mitigate the risk of exploitation until the package is updated. This can be done with the command:
sudo systemctl stop cups-browsed' and 'sudo systemctl disable cups-browsed
However, this may affect printing capabilities.
Conclusion
The identified vulnerabilities in the libcupsfilters package pose moderate risks that can significantly impact printing services. It is crucial to apply the necessary updates promptly to safeguard against potential exploits. Regular monitoring and maintenance of software packages are essential for maintaining system security.
See every vulnerability recorded for libcupsfilters →
FAQ
Libcupsfilters is a library used in the CUPS printing system that provides functions for managing print jobs and filters.
The vulnerabilities can lead to CPU exhaustion and process aborts, resulting in denial of service and potential disruptions in printing services.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, the vulnerabilities can lead to process aborts, which may result in data loss during print jobs.
It is recommended to regularly check for and apply updates to your packages to mitigate security risks.
Related vulnerabilities
Recent vulnerabilities recorded for libcupsfilters.
