-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Nov 2025 10:45:05 +0100 Source: cups-filters Binary: cups-browsed cups-browsed-dbgsym cups-filters cups-filters-core-drivers cups-filters-core-drivers-dbgsym cups-filters-dbgsym libcupsfilters-dev libcupsfilters1t64 libcupsfilters1t64-dbgsym libfontembed-dev libfontembed1t64 libfontembed1t64-dbgsym Architecture: riscv64 Version: 1.28.17-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Thorsten Alteholz Description: cups-browsed - OpenPrinting CUPS Filters - cups-browsed cups-filters - OpenPrinting CUPS Filters - Main Package cups-filters-core-drivers - OpenPrinting CUPS Filters - Driverless printing libcupsfilters-dev - OpenPrinting CUPS Filters - Development files for the library libcupsfilters1t64 - OpenPrinting CUPS Filters - Shared library libfontembed-dev - OpenPrinting CUPS Filters - Development files for font embed libr libfontembed1t64 - OpenPrinting CUPS Filters - Font Embed Shared library Closes: 1120698 1120704 Changes: cups-filters (1.28.17-6+deb13u1) trixie; urgency=medium . * CVE-2025-64503 fix an out of bounds write vulnerability when processing crafted PDF files containing a large 'Mediabox' value. (Closes: #1120698) . * CVE-2025-57812 fix an out of bounds read/write vulnerability in the processing of TIFF image files. (Closes: #1120704) . * CVE-2025-64524 fix infinite loop with crafted input raster file, that resuls into a heap buffer overflow Checksums-Sha1: e481e1ae07bcb09d43c68f95efb95679794e5fca 209664 cups-browsed-dbgsym_1.28.17-6+deb13u1_riscv64.deb dafa7060eccc3ea05e7aec11f7931627d0f9a399 137328 cups-browsed_1.28.17-6+deb13u1_riscv64.deb c2d482507c6a3570391946d4ec34aea4fd757fa8 1367200 cups-filters-core-drivers-dbgsym_1.28.17-6+deb13u1_riscv64.deb 78220d0d177cfa1552035a0058246bf029c31f58 199384 cups-filters-core-drivers_1.28.17-6+deb13u1_riscv64.deb 5101f072043f435ae819daf266a5fbdb28b258e7 606356 cups-filters-dbgsym_1.28.17-6+deb13u1_riscv64.deb ca2253aa5f289a791ea28e7c8bdd6340b6c32f67 15455 cups-filters_1.28.17-6+deb13u1_riscv64-buildd.buildinfo 72427369991f73df514167bee7898dbb1455dbc1 567496 cups-filters_1.28.17-6+deb13u1_riscv64.deb 2f39cdf0e8bcec42958117b43ca85a4a488560da 262040 libcupsfilters-dev_1.28.17-6+deb13u1_riscv64.deb 55b466f6f5896fdb4177f03cd4bb9f12d50289b4 215764 libcupsfilters1t64-dbgsym_1.28.17-6+deb13u1_riscv64.deb 94d1bd9f43544541e09f061fca1dc54532085b48 123296 libcupsfilters1t64_1.28.17-6+deb13u1_riscv64.deb 2d67ed25de21d2e70db51c34d8c30d76ea279d3b 88988 libfontembed-dev_1.28.17-6+deb13u1_riscv64.deb dd9528a1a9adbcba880e9899ef3051306c60f32c 56336 libfontembed1t64-dbgsym_1.28.17-6+deb13u1_riscv64.deb 457ea4bce63afde80b15c0adb8c338c7b915762d 55964 libfontembed1t64_1.28.17-6+deb13u1_riscv64.deb Checksums-Sha256: 8654ff2a77733010b95ea18fe37bedd8933ee96317a12443e1e03a1e301f3ac3 209664 cups-browsed-dbgsym_1.28.17-6+deb13u1_riscv64.deb f8eaa6ce3293e01454607d0c07ded30499be23cbdeb44193a87832cc3767c5ed 137328 cups-browsed_1.28.17-6+deb13u1_riscv64.deb 0e80f3127d54c5bbc70ff8c055db5a2b4ac48e56160780d479eabe735984685b 1367200 cups-filters-core-drivers-dbgsym_1.28.17-6+deb13u1_riscv64.deb 3cd52901f32928539bcd1b53d3cd4efdf13fc415bfac46f528d2f62613b65ce0 199384 cups-filters-core-drivers_1.28.17-6+deb13u1_riscv64.deb e2037c61c05f1c4ce6738c5e083074437d0a203c4fd6e7bc99b5e48d12badd99 606356 cups-filters-dbgsym_1.28.17-6+deb13u1_riscv64.deb 19fa5b1303abd7553a88c3a2da3fb34bbeca54d0956fcd30a3506328dab6512b 15455 cups-filters_1.28.17-6+deb13u1_riscv64-buildd.buildinfo e3318f78a889a1d408780d2c7463e18d8a661367e049c54c9d7f884febde49e8 567496 cups-filters_1.28.17-6+deb13u1_riscv64.deb f09d132414e2c1a8a63ed21da90cd3002de4be1558618845c9814b91f040212f 262040 libcupsfilters-dev_1.28.17-6+deb13u1_riscv64.deb ba823a611aa94b2522ed107221e5e301c49b209f8188741f38976209cb427293 215764 libcupsfilters1t64-dbgsym_1.28.17-6+deb13u1_riscv64.deb f8ea3b39a3c5bd41972ea6cfc7fce03b5f8696748f6b1109794cadd90c57693d 123296 libcupsfilters1t64_1.28.17-6+deb13u1_riscv64.deb 0b6f774223bdb71b2d29aa636aebac2b759eebebd1b0faebabdf04c79a146a53 88988 libfontembed-dev_1.28.17-6+deb13u1_riscv64.deb 5b5e72f2ac9c9177273c45ce7f3e567e732665e4a7224f4aa7f09f2465c1832b 56336 libfontembed1t64-dbgsym_1.28.17-6+deb13u1_riscv64.deb 09530140c62736d4fd2a94d8ac3dd2c3ec2d2f91a499296cd965808d5a84aab6 55964 libfontembed1t64_1.28.17-6+deb13u1_riscv64.deb Files: 6826abdc32d3a19b1ed5fe7b9a9bae9c 209664 debug optional cups-browsed-dbgsym_1.28.17-6+deb13u1_riscv64.deb 709fe19f44b82ebd93b6a021df21b683 137328 net optional cups-browsed_1.28.17-6+deb13u1_riscv64.deb dc865fd1aa2108375ae81255faebfa69 1367200 debug optional cups-filters-core-drivers-dbgsym_1.28.17-6+deb13u1_riscv64.deb a7a2ddcf2144eee7506c53c8c56eec0e 199384 net optional cups-filters-core-drivers_1.28.17-6+deb13u1_riscv64.deb 778adc2abed31854e636cc57d9671ed3 606356 debug optional cups-filters-dbgsym_1.28.17-6+deb13u1_riscv64.deb 584d27b7fe49102e8a88bbee0d73bfdc 15455 net optional cups-filters_1.28.17-6+deb13u1_riscv64-buildd.buildinfo aa54c4f5e4a827cf8caca4237db1cb0e 567496 net optional cups-filters_1.28.17-6+deb13u1_riscv64.deb d79b2fc72b4d92343ebd0f1b5c9a0024 262040 libdevel optional libcupsfilters-dev_1.28.17-6+deb13u1_riscv64.deb c3894206b6c585acf3e41cb7a4592d45 215764 debug optional libcupsfilters1t64-dbgsym_1.28.17-6+deb13u1_riscv64.deb ec4fcbf17ddd5b35087126b7d03e71e3 123296 libs optional libcupsfilters1t64_1.28.17-6+deb13u1_riscv64.deb f05b24c6065f61177ccdbed203472572 88988 libdevel optional libfontembed-dev_1.28.17-6+deb13u1_riscv64.deb e0bbcdfcee0165e1b879571b9819bf1a 56336 debug optional libfontembed1t64-dbgsym_1.28.17-6+deb13u1_riscv64.deb 47d4647ffbc1e95c3880f3440195a27a 55964 libs optional libfontembed1t64_1.28.17-6+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmlGr2wACgkQ6ETk30hv xtncXhAAuLM2dw+MddFkN83/PAoqI8+wtPAwq4JrFwSuqJELUhRu4QEGnroba1hd alWnSM/WZ9+KJDRdOK2E2BxP7+Y+gOwGfDA6qQnGRE9Iib6pCmj6s9SoBJLOWSji uV6ArKGPszZ5q4odKroWZsOZ9txScKWjwC2wLOUNZhDQ9oGZRdkdJjk37lEFybyp EliikMkWawAmUCP4KKwttXaDn9PEwmtj+pPnszQbeK3JoY65mlCfEaFkHD6geV1d xykmAJmA6ZDMSFX/ZiQo3P/l42IySEMhTtCx6gb1jjKPGvaxDS8vIczRA724Vfk0 CoZR9dE9Uv8OeJ3pzeJ9ZqzpmjKpqbyj08n4QZ6h/AG5WsHH8F4plUO4Gr1nVdwf e8Lrb/aIvhJ2J4SKYUQUgNlcBKC2TJW3LH0Zjcp5wRoRaoe4+KhrdyOy9HBeSjd7 V6Qyw2QVXZkzzGv0swCuhAGDfoCQD6xV75v6XtXPfVfaCMwiFvcnK2JFNL47Ak+Y biwD8kcZAtjqWfv0Ly6eUO8+0XFkck24+6OhvLIDq5AT9HQW5g3GGD8YuvNzSKoo JyEH7YpvCNRWy6ryMIJNZ/JLwgOg4w30IHTJ6BquJbAM4CJSW/iBATQOnNZfTq3r XJdh1leqbieBUwhkAforaINT9DG3yjydFu/3S0KKZHv9a1cvMAU= =Ihlb -----END PGP SIGNATURE-----