[ubuntu/jammy-updates] cups 2.4.1op1-1ubuntu4.16 (Accepted)

[Ubuntu Archive Robot]

cups (2.4.1op1-1ubuntu4.16) jammy-security; urgency=medium

  * SECURITY UPDATE: Slow client communication leads to a possible DoS
    attack
    - debian/patches/CVE-2025-58436-1.patch: fix unresponsive cupsd process
      caused by a slow client in cups/http-private.h, cups/http.c,
      scheduler/client.c, scheduler/client.h, scheduler/select.c.
    - debian/patches/CVE-2025-58436-2.patch: fix an infinite loop issue in
      GTK+ in cups/http.c.
    - CVE-2025-58436
  * SECURITY REGRESSION: issue with invalid configuration (LP: #2133207)
    - debian/patches/lp2133207.patch: fix stopping scheduler on unknown
      directive in scheduler/conf.c.

Date: 2025-12-04 12:24:11.166533+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.16
-------------- next part --------------
Sorry, changesfile not available.