Public bug reported:
A new release of libcupsfilters is available for merging from Debian.
Ubuntu: 2.1.1-0ubuntu5
Debian Unstable: 2.1.1-2
### New Debian Changes ###
libcupsfilters (2.1.1-2) unstable; urgency=medium
* CVE-2025-64503
fix an out of bounds write vulnerability when processing crafted
PDF files containing a large 'Mediabox' value.
(Closes: #1120697)
* CVE-2025-57812
fix an out of bounds read/write vulnerability in the processing
of TIFF image files.
(Closes: #1120703)
-- Thorsten Alteholz <[email protected]> Thu, 20 Nov 2025 10:45:05
+0100
libcupsfilters (2.1.1-1) unstable; urgency=medium
* New upstream release.
* debian/control: bump standard to 4.7.2 (no changes)
* CVE-2024-47076.patch was applied upstream
* took care of quilt control dir (Closes: #1119722)
thanks to Bastian Germann for drawing attention to this
-- Thorsten Alteholz <[email protected]> Wed, 19 Nov 2025 15:50:33
+0100
libcupsfilters (2.0.0-3) unstable; urgency=medium
* CVE-2024-47076 (Closes: #1082821)
cfGetPrinterAttributes5(): Validate response attributes before return
* temporarily disable libcupsfilters-2-functionality for now
-- Thorsten Alteholz <[email protected]> Thu, 26 Sep 2024 23:45:05
+0200
libcupsfilters (2.0.0-2) unstable; urgency=medium
* debian/control: add proper Conflicts: for cups-filters packages
(Closes: #1069630)
* debian/tests: use dependencies for version 2
-- Thorsten Alteholz <[email protected]> Sat, 14 Sep 2024 22:45:05
+0200
libcupsfilters (2.0.0-1) unstable; urgency=medium
* first Debian upload
* do not use symbols file at the moment
* update debian/watch file
-- Thorsten Alteholz <[email protected]> Sat, 20 Apr 2024 22:45:05
+0200
### Old Ubuntu Delta ###
libcupsfilters (2.1.1-0ubuntu5) resolute; urgency=medium
* No-change rebuild for poppler 26.01
-- Alessandro Astone <[email protected]> Thu, 19 Feb
2026 12:44:56 +0000
libcupsfilters (2.1.1-0ubuntu4) resolute; urgency=medium
* SECURITY UPDATE: heap-buffer overflow write in cfImageLut
- debian/patches/CVE-2025-57812.patch: fix multiple issues in
cupsfilters/image-tiff.c.
- CVE-2025-57812
* SECURITY UPDATE: out-of-bounds write in cfFilterPDFToRaster()
- debian/patches/CVE-2025-64503.patch: validate page size in
cupsfilters/pdftoraster.cxx.
- CVE-2025-64503
-- Marc Deslauriers <[email protected]> Thu, 13 Nov 2025
10:13:59 -0500
libcupsfilters (2.1.1-0ubuntu3) questing; urgency=medium
* Update symbol file to fix FTBFS on RISC-V (LP: #2121937)
- Removed '#MISSING' lines
- Fix typo from 'ububtu' to 'ubuntu' in symbol versions
- Added missing symbol as optional, arch-only on riscv64
- Added missing symbol as optional, arch-only on armhf
-- Valentin Haudiquet <[email protected]> Tue, 09 Sep
2025 14:20:00 +0200
libcupsfilters (2.1.1-0ubuntu2) plucky; urgency=medium
* No-change rebuild to pick up the new qpdf library package.
-- Simon Quigley <[email protected]> Fri, 14 Mar 2025 23:00:37 -0500
libcupsfilters (2.1.1-0ubuntu1) plucky; urgency=medium
* New upstream release.
- Fixes of bugs discovered by static analyzer OpenScanHub (Thanks,
Zdenek Dohnal from Red Hat)
- Fixed manual duplex via "page-set=even/odd" option
- Capture error exit status when Ghostscript or MuPDF is called
* Removed sec-202409-1.patch, incorporated upstream.
* Updated debian/libcupsfilters2t64.symbols
-- Till Kamppeter <[email protected]> Wed, 19 Feb 2025 13:41:47
+0100
libcupsfilters (2.1~b1-0ubuntu4) plucky; urgency=medium
* Rebuild against latest poppler
-- Alessandro Astone <[email protected]> Fri, 17 Jan 2025 14:16:39
-0500
libcupsfilters (2.1~b1-0ubuntu3) oracular; urgency=medium
* SECURITY UPDATE: PPD injection issues (LP: #2082335)
- debian/patches/sec-202409-1.patch: validate response attributes
before return in cupsfilters/ipp.c.
- CVE-2024-47076
-- Marc Deslauriers <[email protected]> Thu, 26 Sep 2024
09:21:50 -0400
libcupsfilters (2.1~b1-0ubuntu2) oracular; urgency=medium
* Updated debian/libcupsfilters2t64.symbols for armhf and riscv64
-- Till Kamppeter <[email protected]> Thu, 15 Aug 2024 12:36:36
+0200
libcupsfilters (2.1~b1-0ubuntu1) oracular; urgency=medium
* New upstream release
- Near one year of bug fixes
- New CI/build/unit test program testing filter functions based on a
table of test cases.
* Updated debian/libcupsfilters2t64.symbols
-- Till Kamppeter <[email protected]> Thu, 15 Aug 2024 01:48:36
+0200
libcupsfilters (2.0.0-0ubuntu8) oracular; urgency=medium
* Rebuild against latest poppler
-- Jeremy Bícha <[email protected]> Fri, 21 Jun 2024 07:54:30 -0400
libcupsfilters (2.0.0-0ubuntu7) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <[email protected]> Sun, 31 Mar 2024
01:53:34 +0000
libcupsfilters (2.0.0-0ubuntu6) noble; urgency=medium
* Rename libraries for 64-bit time_t transition
-- Shengjing Zhu <[email protected]> Fri, 22 Mar 2024
17:08:47 +0800
libcupsfilters (2.0.0-0ubuntu5) noble; urgency=medium
* No-change rebuild against libpoppler-cpp0t64
-- Michael Hudson-Doyle <[email protected]> Thu, 21 Mar 2024
12:15:39 +1300
libcupsfilters (2.0.0-0ubuntu4) noble; urgency=medium
* No-change rebuild against libcups2t64.
-- Michael Hudson-Doyle <[email protected]> Wed, 20 Mar 2024
13:51:01 +1300
libcupsfilters (2.0.0-0ubuntu3) noble; urgency=medium
* Updated debian/libcupsfilters2.symbols (strlcpy() seems to be available
now)
-- Till Kamppeter <[email protected]> Thu, 7 Mar 2024 23:00:00
+0100
libcupsfilters (2.0.0-0ubuntu2) noble; urgency=medium
* No-change rebuild against libpng16-16t64
-- Steve Langasek <[email protected]> Thu, 29 Feb 2024
07:02:54 +0000
** Affects: libcupsfilters (Ubuntu)
Importance: Wishlist
Status: New
** Tags: dcr-merge
** Changed in: libcupsfilters (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: libcupsfilters (Ubuntu)
Milestone: None => ubuntu-26.11
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171222
Title:
Merge libcupsfilters 2.1.1-2 from Debian for tenacious cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libcupsfilters/+bug/2171222/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
