Описание
Security update for cups
This update for cups fixes the following issues:
- CVE-2024-47175: no validation of IPP attributes in
ppdCreatePPDFromIPP2when writing to a temporary PPD file allows for the injection of attacker-controlled data to the resulting PPD (bsc#1230932). - CVE-2025-58060: no password check when
AuthTypeis set to anything butBasicand a request is made with anAuthorization: Basicheader (bsc#1249049). - CVE-2025-58364: unsafe deserialization and validation of printer attributes leads to NULL pointer dereference (bsc#1249128).
Список пакетов
Container suse/kiosk/firefox-esr:latest
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-Hardened
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-Hardened-GCE
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAPCAL
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAPCAL-GCE
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
SUSE Enterprise Storage 7.1
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Micro 5.2
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
SUSE Linux Enterprise Micro 5.3
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
SUSE Linux Enterprise Micro 5.4
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
SUSE Linux Enterprise Micro 5.5
cups-config-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6
libcups2-32bit-2.2.7-150000.3.72.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
libcups2-32bit-2.2.7-150000.3.72.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
cups-ddk-2.2.7-150000.3.72.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
cups-ddk-2.2.7-150000.3.72.1
SUSE Linux Enterprise Server 15 SP3-LTSS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Server 15 SP4-LTSS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Server 15 SP5-LTSS
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Manager Proxy LTS 4.3
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
SUSE Manager Server LTS 4.3
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
openSUSE Leap 15.6
cups-2.2.7-150000.3.72.1
cups-client-2.2.7-150000.3.72.1
cups-config-2.2.7-150000.3.72.1
cups-ddk-2.2.7-150000.3.72.1
cups-devel-2.2.7-150000.3.72.1
cups-devel-32bit-2.2.7-150000.3.72.1
libcups2-2.2.7-150000.3.72.1
libcups2-32bit-2.2.7-150000.3.72.1
libcupscgi1-2.2.7-150000.3.72.1
libcupscgi1-32bit-2.2.7-150000.3.72.1
libcupsimage2-2.2.7-150000.3.72.1
libcupsimage2-32bit-2.2.7-150000.3.72.1
libcupsmime1-2.2.7-150000.3.72.1
libcupsmime1-32bit-2.2.7-150000.3.72.1
libcupsppdc1-2.2.7-150000.3.72.1
libcupsppdc1-32bit-2.2.7-150000.3.72.1
Ссылки
- Link for SUSE-SU-2025:03261-1
- E-Mail link for SUSE-SU-2025:03261-1
- SUSE Security Ratings
- SUSE Bug 1230932
- SUSE Bug 1246533
- SUSE Bug 1249049
- SUSE Bug 1249128
- SUSE CVE CVE-2024-47175 page
- SUSE CVE CVE-2025-58060 page
- SUSE CVE CVE-2025-58364 page
Описание
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.
Затронутые продукты
Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.72.1
Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE:cups-config-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE:libcups2-2.2.7-150000.3.72.1
Ссылки
- CVE-2024-47175
- SUSE Bug 1230932
Описание
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.
Затронутые продукты
Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.72.1
Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE:cups-config-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE:libcups2-2.2.7-150000.3.72.1
Ссылки
- CVE-2025-58060
- SUSE Bug 1249049
Описание
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local subnet in default configurations. It can cause the cups & cups-browsed to crash, on all the machines in local network who are listening for printers (so by default for all regular linux machines). On systems where the vulnerability CVE-2024-47176 (cups-filters 1.x/cups-browsed 2.x vulnerability) was not fixed, and the firewall on the machine does not reject incoming communication to IPP port, and the machine is set to be available to public internet, attack vector "Network" is possible. The current versions of CUPS and cups-browsed projects have the attack vector "Adjacent" in their default configurations. Version 2.4.13 contains a patch for CVE-2025-58364.
Затронутые продукты
Container suse/kiosk/firefox-esr:latest:cups-config-2.2.7-150000.3.72.1
Container suse/kiosk/firefox-esr:latest:libcups2-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE:cups-config-2.2.7-150000.3.72.1
Image SLES15-SP6-SAP-GCE:libcups2-2.2.7-150000.3.72.1
Ссылки
- CVE-2025-58364
- SUSE Bug 1249128