OESA-2026-3248

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3248
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3248.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3248
Upstream
  • CVE-2026-64612
Published
2026-08-07T02:41:54Z
Modified
2026-08-07T03:00:55.375742136Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
cups-filters security update
Details

This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.

Security Fix(es):

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.(CVE-2026-64612)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
cups-filters

Package

Name
cups-filters
Purl
pkg:rpm/openEuler/cups-filters&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.26.1-9.oe2003sp4

Ecosystem specific 

{
    "aarch64": [
        "cups-filters-1.26.1-9.oe2003sp4.aarch64.rpm",
        "cups-filters-debuginfo-1.26.1-9.oe2003sp4.aarch64.rpm",
        "cups-filters-debugsource-1.26.1-9.oe2003sp4.aarch64.rpm",
        "cups-filters-devel-1.26.1-9.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "cups-filters-1.26.1-9.oe2003sp4.x86_64.rpm",
        "cups-filters-debuginfo-1.26.1-9.oe2003sp4.x86_64.rpm",
        "cups-filters-debugsource-1.26.1-9.oe2003sp4.x86_64.rpm",
        "cups-filters-devel-1.26.1-9.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "cups-filters-1.26.1-9.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "cups-filters-help-1.26.1-9.oe2003sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3248.json"
openEuler:22.03-LTS-SP4
cups-filters

Package

Name
cups-filters
Purl
pkg:rpm/openEuler/cups-filters&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.28.9-8.oe2203sp4

Ecosystem specific 

{
    "aarch64": [
        "cups-filters-1.28.9-8.oe2203sp4.aarch64.rpm",
        "cups-filters-debuginfo-1.28.9-8.oe2203sp4.aarch64.rpm",
        "cups-filters-debugsource-1.28.9-8.oe2203sp4.aarch64.rpm",
        "cups-filters-devel-1.28.9-8.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "cups-filters-1.28.9-8.oe2203sp4.x86_64.rpm",
        "cups-filters-debuginfo-1.28.9-8.oe2203sp4.x86_64.rpm",
        "cups-filters-debugsource-1.28.9-8.oe2203sp4.x86_64.rpm",
        "cups-filters-devel-1.28.9-8.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "cups-filters-1.28.9-8.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "cups-filters-help-1.28.9-8.oe2203sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3248.json"
openEuler:24.03-LTS-SP1
cups-filters

Package

Name
cups-filters
Purl
pkg:rpm/openEuler/cups-filters&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.28.15-7.oe2403sp1

Ecosystem specific 

{
    "aarch64": [
        "cups-filters-1.28.15-7.oe2403sp1.aarch64.rpm",
        "cups-filters-debuginfo-1.28.15-7.oe2403sp1.aarch64.rpm",
        "cups-filters-debugsource-1.28.15-7.oe2403sp1.aarch64.rpm",
        "cups-filters-devel-1.28.15-7.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "cups-filters-1.28.15-7.oe2403sp1.x86_64.rpm",
        "cups-filters-debuginfo-1.28.15-7.oe2403sp1.x86_64.rpm",
        "cups-filters-debugsource-1.28.15-7.oe2403sp1.x86_64.rpm",
        "cups-filters-devel-1.28.15-7.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "cups-filters-1.28.15-7.oe2403sp1.src.rpm"
    ],
    "noarch": [
        "cups-filters-help-1.28.15-7.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3248.json"
openEuler:24.03-LTS-SP3
cups-filters

Package

Name
cups-filters
Purl
pkg:rpm/openEuler/cups-filters&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.28.15-7.oe2403sp3

Ecosystem specific 

{
    "aarch64": [
        "cups-filters-1.28.15-7.oe2403sp3.aarch64.rpm",
        "cups-filters-debuginfo-1.28.15-7.oe2403sp3.aarch64.rpm",
        "cups-filters-debugsource-1.28.15-7.oe2403sp3.aarch64.rpm",
        "cups-filters-devel-1.28.15-7.oe2403sp3.aarch64.rpm"
    ],
    "x86_64": [
        "cups-filters-1.28.15-7.oe2403sp3.x86_64.rpm",
        "cups-filters-debuginfo-1.28.15-7.oe2403sp3.x86_64.rpm",
        "cups-filters-debugsource-1.28.15-7.oe2403sp3.x86_64.rpm",
        "cups-filters-devel-1.28.15-7.oe2403sp3.x86_64.rpm"
    ],
    "src": [
        "cups-filters-1.28.15-7.oe2403sp3.src.rpm"
    ],
    "noarch": [
        "cups-filters-help-1.28.15-7.oe2403sp3.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3248.json"
openEuler:24.03-LTS-SP4
cups-filters

Package

Name
cups-filters
Purl
pkg:rpm/openEuler/cups-filters&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.28.17-2.oe2403sp4

Ecosystem specific 

{
    "aarch64": [
        "cups-filters-1.28.17-2.oe2403sp4.aarch64.rpm",
        "cups-filters-debuginfo-1.28.17-2.oe2403sp4.aarch64.rpm",
        "cups-filters-debugsource-1.28.17-2.oe2403sp4.aarch64.rpm",
        "cups-filters-devel-1.28.17-2.oe2403sp4.aarch64.rpm"
    ],
    "x86_64": [
        "cups-filters-1.28.17-2.oe2403sp4.x86_64.rpm",
        "cups-filters-debuginfo-1.28.17-2.oe2403sp4.x86_64.rpm",
        "cups-filters-debugsource-1.28.17-2.oe2403sp4.x86_64.rpm",
        "cups-filters-devel-1.28.17-2.oe2403sp4.x86_64.rpm"
    ],
    "src": [
        "cups-filters-1.28.17-2.oe2403sp4.src.rpm"
    ],
    "noarch": [
        "cups-filters-help-1.28.17-2.oe2403sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3248.json"