CUPS Image Filter Vulnerability in cups-filters Package: Security Update Required
Summary
ALSA-2026:58560: Moderate: cups-filters security update. Affects cups-filters versions < 1.28.7-27.el9_8. Fixed in 1.28.7-27.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cups-filters package is a crucial component of the Common UNIX Printing System (CUPS), providing back ends, filters, and other essential software for managing print jobs. It has been maintained independently to enhance its functionality and security. However, recent vulnerabilities have been identified that could compromise the integrity of the printing process, necessitating immediate attention from users and administrators.
Vulnerability Detail
The vulnerability identified as CVE-2026-64612 affects the libcupsfilters component of the cups-filters package. It allows an attacker to exploit a malformed PNG image, leading to an abort in the CUPS image filter process. This could result in denial of service, impacting the availability of printing services and potentially exposing sensitive information during the printing process.
How To Fix
Minimum fixed version
1.28.7-27.el9_8
This is the first release that contains the fix.
sudo dnf update cups-filtersTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the CUPS image filter process or avoid processing PNG images until the package is updated. However, this is not a permanent solution and should only be used until the update is applied.
Conclusion
The cups-filters package has a critical vulnerability that needs immediate attention. By updating to the latest patched version, users can protect their systems from potential exploitation. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the security of open-source software.
See every vulnerability recorded for cups-filters →
FAQ
CVE-2026-64612 is a security vulnerability in the libcupsfilters component of the cups-filters package that allows for denial of service through malformed PNG images.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Failure to address this vulnerability could lead to service interruptions and potential exposure of sensitive information during printing tasks.
Yes, Vulert provides a service that monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
If an immediate update is not possible, consider disabling the CUPS image filter process or avoiding the use of PNG images until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for cups-filters.
