Ubuntu: CUPS Critical Denial of Service Issue USN-7897-1 CVE-2025-61915

ubuntu

November 27, 2025

CUPS could be made to crash or run programs as an administrator if it opened a specially crafted file.

Summary

CUPS could be made to crash or run programs as an administrator if it

opened a specially crafted file.

Software Description:

- cups: Common UNIX Printing System(tm)

Details:

It was discovered that CUPS incorrectly handled input from users in the web

configuration settings. An attacker could use this issue to insert

malicious configuration options, causing a denial of service or possibly

executing arbitrary code.

Topics Covered

security advisory denial of service critical Ubuntu cups

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  cups                            2.4.12-0ubuntu3.3
  cups-daemon                     2.4.12-0ubuntu3.3

Ubuntu 25.04
  cups                            2.4.12-0ubuntu1.4
  cups-daemon                     2.4.12-0ubuntu1.4

Ubuntu 24.04 LTS
  cups                            2.4.7-1.2ubuntu7.7
  cups-daemon                     2.4.7-1.2ubuntu7.7

Ubuntu 22.04 LTS
  cups                            2.4.1op1-1ubuntu4.15
  cups-daemon                     2.4.1op1-1ubuntu4.15

Ubuntu 20.04 LTS
  cups                            2.3.1-9ubuntu1.9+esm3
                                  Available with Ubuntu Pro
  cups-daemon                     2.3.1-9ubuntu1.9+esm3
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  cups                            2.2.7-1ubuntu2.10+esm9
                                  Available with Ubuntu Pro
  cups-daemon                     2.2.7-1ubuntu2.10+esm9
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  cups                            2.1.3-4ubuntu0.11+esm11
                                  Available with Ubuntu Pro
  cups-daemon                     2.1.3-4ubuntu0.11+esm11
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.