{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"Low"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"cups-filters security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for cups-filters is now available for openEuler-24.03-LTS",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\n\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for cups-filters is now available for openEuler-24.03-LTS.\n\nopenEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"Low",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"cups-filters",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-1122",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1122"
			},
			{
				"summary":"CVE-2025-64524",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-64524&packageName=cups-filters"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64524"
			},
			{
				"summary":"openEuler-SA-2026-1122 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-1122.json"
			}
		],
		"title":"An update for cups-filters is now available for openEuler-24.03-LTS",
		"tracking":{
			"initial_release_date":"2026-01-22T09:58:35+08:00",
			"revision_history":[
				{
					"date":"2026-01-22T09:58:35+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-01-22T09:58:35+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-01-22T09:58:35+08:00",
			"id":"openEuler-SA-2026-1122",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"openEuler-24.03-LTS",
									"name":"openEuler-24.03-LTS"
								},
								"name":"openEuler-24.03-LTS",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-1.28.15-6.oe2403.aarch64.rpm",
									"name":"cups-filters-1.28.15-6.oe2403.aarch64.rpm"
								},
								"name":"cups-filters-1.28.15-6.oe2403.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-debuginfo-1.28.15-6.oe2403.aarch64.rpm",
									"name":"cups-filters-debuginfo-1.28.15-6.oe2403.aarch64.rpm"
								},
								"name":"cups-filters-debuginfo-1.28.15-6.oe2403.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-debugsource-1.28.15-6.oe2403.aarch64.rpm",
									"name":"cups-filters-debugsource-1.28.15-6.oe2403.aarch64.rpm"
								},
								"name":"cups-filters-debugsource-1.28.15-6.oe2403.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-devel-1.28.15-6.oe2403.aarch64.rpm",
									"name":"cups-filters-devel-1.28.15-6.oe2403.aarch64.rpm"
								},
								"name":"cups-filters-devel-1.28.15-6.oe2403.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-1.28.15-6.oe2403.src.rpm",
									"name":"cups-filters-1.28.15-6.oe2403.src.rpm"
								},
								"name":"cups-filters-1.28.15-6.oe2403.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-1.28.15-6.oe2403.x86_64.rpm",
									"name":"cups-filters-1.28.15-6.oe2403.x86_64.rpm"
								},
								"name":"cups-filters-1.28.15-6.oe2403.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-debuginfo-1.28.15-6.oe2403.x86_64.rpm",
									"name":"cups-filters-debuginfo-1.28.15-6.oe2403.x86_64.rpm"
								},
								"name":"cups-filters-debuginfo-1.28.15-6.oe2403.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-debugsource-1.28.15-6.oe2403.x86_64.rpm",
									"name":"cups-filters-debugsource-1.28.15-6.oe2403.x86_64.rpm"
								},
								"name":"cups-filters-debugsource-1.28.15-6.oe2403.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-devel-1.28.15-6.oe2403.x86_64.rpm",
									"name":"cups-filters-devel-1.28.15-6.oe2403.x86_64.rpm"
								},
								"name":"cups-filters-devel-1.28.15-6.oe2403.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"cups-filters-help-1.28.15-6.oe2403.noarch.rpm",
									"name":"cups-filters-help-1.28.15-6.oe2403.noarch.rpm"
								},
								"name":"cups-filters-help-1.28.15-6.oe2403.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-1.28.15-6.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.aarch64",
					"name":"cups-filters-1.28.15-6.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-debuginfo-1.28.15-6.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.aarch64",
					"name":"cups-filters-debuginfo-1.28.15-6.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-debugsource-1.28.15-6.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.aarch64",
					"name":"cups-filters-debugsource-1.28.15-6.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-devel-1.28.15-6.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.aarch64",
					"name":"cups-filters-devel-1.28.15-6.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-1.28.15-6.oe2403.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.src",
					"name":"cups-filters-1.28.15-6.oe2403.src as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-1.28.15-6.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.x86_64",
					"name":"cups-filters-1.28.15-6.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-debuginfo-1.28.15-6.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.x86_64",
					"name":"cups-filters-debuginfo-1.28.15-6.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-debugsource-1.28.15-6.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.x86_64",
					"name":"cups-filters-debugsource-1.28.15-6.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-devel-1.28.15-6.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.x86_64",
					"name":"cups-filters-devel-1.28.15-6.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"cups-filters-help-1.28.15-6.oe2403.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:cups-filters-help-1.28.15-6.oe2403.noarch",
					"name":"cups-filters-help-1.28.15-6.oe2403.noarch as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2025-64524",
			"notes":[
				{
					"text":"cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.aarch64",
					"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.aarch64",
					"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.aarch64",
					"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.aarch64",
					"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.src",
					"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.x86_64",
					"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.x86_64",
					"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.x86_64",
					"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.x86_64",
					"openEuler-24.03-LTS:cups-filters-help-1.28.15-6.oe2403.noarch"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.src",
						"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-help-1.28.15-6.oe2403.noarch"
					],
					"details":"cups-filters security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1122"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"LOW",
						"baseScore":3.3,
						"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.aarch64",
						"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.src",
						"openEuler-24.03-LTS:cups-filters-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-debuginfo-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-debugsource-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-devel-1.28.15-6.oe2403.x86_64",
						"openEuler-24.03-LTS:cups-filters-help-1.28.15-6.oe2403.noarch"
					]
				}
			],
			"threats":[
				{
					"details":"Low",
					"category":"impact"
				}
			],
			"title":"CVE-2025-64524"
		}
	]
}