Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 448
Alerts This Week
Warning Icon 1 448

openSUSE: cups Important Vuln CVE-2025-58436 Advisory 2025:4319-1

opensuse
Calendar Grey December 3, 2025
Dist Opensuse Esm H88
Installation instructions for the important security update for cups on openSUSE to resolve CVE-2025-58436 issues.
An update that solves one vulnerability can now be installed.

Description

This update for cups fixes the following issues:

* The fix for CVE-2025-58436 causes a regression where GTK applications will

hang. (bsc#1254353)

See also https://github.com/OpenPrinting/cups/issues/1429

The fix has been temporary disabled.

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.6

zypper in -t patch openSUSE-SLE-15.6-2025-4319=1

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2025-4319=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2025-4319=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2025-4319=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2025-4319=1

* SUSE Linux Enterprise Micro 5.5

zypper in -t patch SUSE-SLE-Micro-5.5-2025-4319=1

* Basesystem Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-4319=1

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4319=1

* Desktop Applications Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-4319=1

*...

Read the Full Advisory

Package List

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* cups-2.2.7-150000.3.80.1

* cups-config-2.2.7-150000.3.80.1

* cups-ddk-debuginfo-2.2.7-150000.3.80.1

* libcupscgi1-debuginfo-2.2.7-150000.3.80.1

* cups-client-debuginfo-2.2.7-150000.3.80.1

* cups-client-2.2.7-150000.3.80.1

* cups-debuginfo-2.2.7-150000.3.80.1

* libcupsimage2-2.2.7-150000.3.80.1

* libcups2-2.2.7-150000.3.80.1

* libcupscgi1-2.2.7-150000.3.80.1

* libcups2-debuginfo-2.2.7-150000.3.80.1

* libcupsmime1-debuginfo-2.2.7-150000.3.80.1

* libcupsmime1-2.2.7-150000.3.80.1

* libcupsppdc1-2.2.7-150000.3.80.1

* libcupsimage2-debuginfo-2.2.7-150000.3.80.1

* cups-devel-2.2.7-150000.3.80.1

* libcupsppdc1-debuginfo-2.2.7-150000.3.80.1

* cups-debugsource-2.2.7-150000.3.80.1

* cups-ddk-2.2.7-150000.3.80.1

* openSUSE Leap 15.6 (x86_64)

* libcupsmime1-32bit-debuginfo-2.2.7-150000.3.80.1

* libcupsimage2-32bit-2.2.7-150000.3.80.1

* cups-devel-32bit-2.2.7-150000.3.80.1

* libcupscgi1-32bit-2.2.7-150000.3.80.1

* libcupsmime1-32bit-2.2.7-150000.3.80.1

*...

Read the Full Advisory

References

* bsc#1254353

## References:

* https://www.suse.com/security/cve/CVE-2025-58436.html

* https://bugzilla.suse.com/show_bug.cgi?id=1254353

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:4319-1
Release Date: 2025-12-03T12:34:37Z
Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP6 * Desktop Applications Module 15-SP7 * Development Tools Module 15-SP6 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.