Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux cups-filters can crash on malformed PNG files
published 2 months ago
Summary
The cups-filters software used for printing on AlmaLinux systems may stop working if it receives a specially crafted PNG image. This could interrupt printing services and require a restart of the printing system. Update the cups-filters packages to the latest versions to prevent the crash.
What to do
- Update almalinux cups-filters to version 1.20.0-36.el8_10.1.
- Update almalinux cups-filters-devel to version 1.20.0-36.el8_10.1.
- Update almalinux cups-filters-libs to version 1.20.0-36.el8_10.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | cups-filters |
< 1.20.0-36.el8_10.1 Fix: upgrade to 1.20.0-36.el8_10.1
|
| AlmaLinux:8 | almalinux | cups-filters-devel |
< 1.20.0-36.el8_10.1 Fix: upgrade to 1.20.0-36.el8_10.1
|
| AlmaLinux:8 | almalinux | cups-filters-libs |
< 1.20.0-36.el8_10.1 Fix: upgrade to 1.20.0-36.el8_10.1
|
Original advisory text
Moderate: cups-filters security update
The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently.
Security Fix(es):
* libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG (CVE-2026-64612)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG (CVE-2026-64612)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:57451 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-64612 Third Party Advisory
- https://bugzilla.redhat.com/2502801 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-57451.html Vendor Advisory
Timeline
Published20 Aug 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2026:57451 · OSV
Track software like this
Free during beta