Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Ubuntu: CUPS Critical Denial of Service Issue USN-7897-1 CVE-2025-61915

ubuntu
Calendar Grey November 27, 2025
Dist Ubuntu Esm H88
Critical security update for Ubuntu CUPS to prevent potential crashes or unauthorized program execution.
CUPS could be made to crash or run programs as an administrator if it opened a specially crafted file.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: CUPS could be made to crash or run programs as an administrator if it opened a specially crafted file. Software Description: - cups: Common UNIX Printing System(tm) Details: It was discovered that CUPS incorrectly handled input from users in the web configuration settings. An attacker could use this issue to insert malicious configuration options, causing a denial of service or possibly executing arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu cups

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 cups 2.4.12-0ubuntu3.3 cups-daemon 2.4.12-0ubuntu3.3 Ubuntu 25.04 cups 2.4.12-0ubuntu1.4 cups-daemon 2.4.12-0ubuntu1.4 Ubuntu 24.04 LTS cups 2.4.7-1.2ubuntu7.7 cups-daemon 2.4.7-1.2ubuntu7.7 Ubuntu 22.04 LTS cups 2.4.1op1-1ubuntu4.15 cups-daemon 2.4.1op1-1ubuntu4.15 Ubuntu 20.04 LTS cups 2.3.1-9ubuntu1.9+esm3 Available with Ubuntu Pro cups-daemon 2.3.1-9ubuntu1.9+esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS cups 2.2.7-1ubuntu2.10+esm9 Available with Ubuntu Pro cups-daemon 2.2.7-1ubuntu2.10+esm9 Available with Ubuntu Pro Ubuntu 16.04 LTS cups 2.1.3-4ubuntu0.11+esm11 Available with Ubuntu Pro cups-daemon 2.1.3-4ubuntu0.11+esm11 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7897-1

CVE-2025-61915

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7897-1

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu cups

Package Information

https://launchpad.net/ubuntu/+source/cups/2.4.12-0ubuntu3.3 https://launchpad.net/ubuntu/+source/cups/2.4.12-0ubuntu1.4 https://launchpad.net/ubuntu/+source/cups/2.4.7-1.2ubuntu7.7 https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.15

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here