Back Linuxsecurity

openSUSE: cups Important Vuln CVE-2025-58436 Advisory 2025:4319

Linuxsecurity •LinuxSecurity Advisories • December 3, 2025

This update for cups fixes the following issues: * The fix for CVE-2025-58436 causes a regression where GTK applications will hang. (bsc#1254353) See also The fix has been temporary disabled.

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4319=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-4319=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-4319=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-4319=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-4319=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-4319=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-4319=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4319=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-4319=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2025-4319=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-4319=1 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2025-4319=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-4319=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-4319=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cups-2.2.7-150000.3.80.1 * cups-config-2.2.7-150000.3.80.1 * cups-ddk-debuginfo-2.2.7-150000.3.80.1 * libcupscgi1-debuginfo-2.2.7-150000.3.80.1 * cups-client-debuginfo-2.2.7-150000.3.80.1 * cups-client-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcupsimage2-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcupscgi1-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * libcupsmime1-debuginfo-2.2.7-150000.3.80.1 * libcupsmime1-2.2.7-150000.3.80.1 * libcupsppdc1-2.2.7-150000.3.80.1 * libcupsimage2-debuginfo-2.2.7-150000.3.80.1 * cups-devel-2.2.7-150000.3.80.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * cups-ddk-2.2.7-150000.3.80.1 * openSUSE Leap 15.6 (x86_64) * libcupsmime1-32bit-debuginfo-2.2.7-150000.3.80.1 * libcupsimage2-32bit-2.2.7-150000.3.80.1 * cups-devel-32bit-2.2.7-150000.3.80.1 * libcupscgi1-32bit-2.2.7-150000.3.80.1 * libcupsmime1-32bit-2.2.7-150000.3.80.1 * libcupsimage2-32bit-debuginfo-2.2.7-150000.3.80.1 * libcups2-32bit-debuginfo-2.2.7-150000.3.80.1 * libcupsppdc1-32bit-2.2.7-150000.3.80.1 * libcupsppdc1-32bit-debuginfo-2.2.7-150000.3.80.1 * libcups2-32bit-2.2.7-150000.3.80.1 * libcupscgi1-32bit-debuginfo-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cups-2.2.7-150000.3.80.1 * cups-config-2.2.7-150000.3.80.1 * libcupscgi1-debuginfo-2.2.7-150000.3.80.1 * cups-client-debuginfo-2.2.7-150000.3.80.1 * cups-client-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcupsimage2-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcupscgi1-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * libcupsmime1-debuginfo-2.2.7-150000.3.80.1 * libcupsmime1-2.2.7-150000.3.80.1 * libcupsppdc1-2.2.7-150000.3.80.1 * libcupsimage2-debuginfo-2.2.7-150000.3.80.1 * cups-devel-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.80.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cups-2.2.7-150000.3.80.1 * cups-config-2.2.7-150000.3.80.1 * libcupscgi1-debuginfo-2.2.7-150000.3.80.1 * cups-client-debuginfo-2.2.7-150000.3.80.1 * cups-client-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcupsimage2-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcupscgi1-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * libcupsmime1-debuginfo-2.2.7-150000.3.80.1 * libcupsmime1-2.2.7-150000.3.80.1 * libcupsppdc1-2.2.7-150000.3.80.1 * libcupsimage2-debuginfo-2.2.7-150000.3.80.1 * cups-devel-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * libcupsppdc1-debuginfo-2.2.7-150000.3.80.1 * Desktop Applications Module 15-SP6 (x86_64) * libcups2-32bit-debuginfo-2.2.7-150000.3.80.1 * libcups2-32bit-2.2.7-150000.3.80.1 * Desktop Applications Module 15-SP7 (x86_64) * libcups2-32bit-debuginfo-2.2.7-150000.3.80.1 * libcups2-32bit-2.2.7-150000.3.80.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cups-ddk-debuginfo-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * cups-ddk-2.2.7-150000.3.80.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cups-ddk-debuginfo-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * cups-ddk-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * cups-config-2.2.7-150000.3.80.1 * cups-debuginfo-2.2.7-150000.3.80.1 * libcups2-2.2.7-150000.3.80.1 * libcups2-debuginfo-2.2.7-150000.3.80.1 * cups-debugsource-2.2.7-150000.3.80.1

* bsc#1254353 ## References: * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Address CUPS DoS Vulnerability CVE-2025-58436 SUSE has released an update addressing a denial-of-service (DoS) issue related to CUPS, specifically CVE-2025-58436. The fix has caused a regression where GTK applications may hang, leading to the temporary disabling of the patch. Users are advised to apply the update using recommended installation methods. 2 sources 31

Extracted Entities

openSUSE: cups Important Vuln CVE-2025-58436 Advisory 2025:4319

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (4)