Backport upstream commit 4b343522823403df01f6753082df83f07d18c217
to fix CVE-2026-64611 in libcupsfilters. The patch addresses three
issues in cupsfilters/ieee1284.c: early return when no key:value
pairs are found in a device ID, skipping empty keys/values during
parsing, and preventing an infinite loop in manufacturer name
deduplication by guarding the strncasecmp while loop with a
compare_len > 0 check.
CVE: CVE-2026-64611
Upstream patches:
-
|
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| 0001-bannertopdf.c-Fix-segfault-when-printing-banners-tes.patch | ||
| 0001-cfgetprinterattributes5-validate-response-attributes.patch | ||
| 0001-cfImageCMYKToCMY-Fixed-copy-and-paste-error.patch | ||
| 0001-configure.ac-Make-CJK-fonts-name-configurable.patch | ||
| 0001-Fix-issues-reported-by-OpenScanHub-79.patch | ||
| ci.fmf | ||
| gating.yaml | ||
| libcf-color-raster-printing.patch | ||
| libcupsfilters-2.0.0-CVE-2026-64611.patch | ||
| libcupsfilters-2.0.0-CVE-2026-64612.patch | ||
| libcupsfilters.spec | ||
| plans.fmf | ||
| README.md | ||
| sources | ||
libcupsfilters
The libcupsfilters package