ELBA-2025-6642

ELBA-2025-6642 - cups bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2025-06-09

Description

[1:2.4.10-11]
- provide a way how to opt-out from system crypto policy if needed

[1:2.4.10-10]
- RHEL-68415 Inability to disable weak ciphers in CUPS configuration

[1:2.4.10-9]
- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails

[1:2.4.10-8]
- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file

[1:2.4.10-8]
- RHEL-54579 [rhel-10] Do not look into /root/.cups/lpoptions when using cupsGetNamedDest as root

[1:2.4.10-7]
- RHEL-67580 Move /etc/cups/ssl into cups-filesystem and require filesystem in libs

[1:2.4.10-6]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018

[1:2.4.10-5]
- RHEL-54297 lspp caused memory leakage

[1:2.4.10-4]
- RHEL-54345 Creating IPP Everywhere printer fails due race condition

[1:2.4.10-4]
- RHEL-54297 cups source rpm doesn't actually build lspp support
- RHEL-49447 Fix garbage uri when adding discovered print in web ui

[1:2.4.10-3]
- RHEL-49449 Fix checkbox support in web ui

[1:2.4.10-2]
- Bump release for June 2024 mass rebuild

[1:2.4.10-1]
- Rebase cups to upstream version 2.4.10

[1:2.4.9-1]
- CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
- RHEL-25804 Rebase CUPS to next upstream version - 2.4.9

[1:2.4.7-12]
- RHEL-35695 Remove additional license tags

[1:2.4.7-11]
- add epochs into conflicts

[1:2.4.7-10]
- RHEL-31887 cups doesn't send Content-Type header back to client when Set-Cookie is seen first

[1:2.4.7-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.4.7-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.4.7-7]
- 2257981 - /var/cache/cups is not owned by any package

[1:2.4.7-6]
- add weak dependency on cups-filters-driverless for F40+

[1:2.4.7-5]
- 2254578 - cupsGetJobs() failes because libcups fails to connect to domain socket

[1:2.4.7-4]
- make a weak dep on cups-browsed to prevent cups-browsed disappearing
during upgrade

[1:2.4.7-3]
- use pkgconfig in macros.cups and add new macros

[1:2.4.7-2]
- fix memory leaks when unloading job

[1:2.4.7-1]
- 2239982 - cups-2.4.7 is available

[1:2.4.6-6]
- use unified __python macro

[1:2.4.6-5]
- comply the upgrade script with python2 as well if needed

[1:2.4.6-4]
- add upgrade script for setting authentication for CUPS-Get-Document operation

[1:2.4.6-3]
- SPDX migration completed

[1:2.4.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1:2.4.6-1]
- 2218124 - The command 'cancel -x ' does not remove job files
- 2218123 - Delays printing to lpd when reserved ports are exhausted
- CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
- 2217043 - cups-2.4.6 is available

[1:2.4.5-1]
- 2214860 - cups-2.4.5 is available

[1:2.4.4-1]
- fixes CVE-2023-32324
- 2211834 - cups-2.4.4 is available
- 1985917 - Cups ignores black and white setting
- 2094530 - After upgrade 35 to 36 process rastertokpsl (Kyocera cups-filter driver) segfaulted

[1:2.4.2-11]
- Drop unnecessary LDFLAGS addition.

[1:2.4.2-10]
- fix loading ippeveps in ippeveprinter if only the command name is provided
- don't override color settings from print dialog
- save the color settings between restarts
- check for cmyk when figuring out default options

[1:2.4.2-9]
- move /etc/cups into cups-filesystem, since cups-browsed needs it

[1:2.4.2-8]
- 2165612 - IPP-USB as a weak dependency of CUPS and sane-airscan

[1:2.4.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

Updated Packages

Release/Architecture

Filename

sha256

Superseded By Advisory

Channel Label

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team