CVE-2015-8560: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foo...

Security readout for executives and security teams

This flaw affects older Linux printing components. A specially crafted print job could bypass a blacklist and cause command execution through foomatic-rip. Business risk is highest where print services accept jobs from untrusted users or networks. The source bundle does not show active exploitation. Exposure is likely on older Linux systems running CUPS with vulnerable cups-filters or foomatic-filters packages, especially shared print servers or systems accepting remote print jobs. Modern patched distributions are less likely exposed, but legacy appliances and unmanaged servers should be checked. Treat this as a high-priority legacy exposure issue, not a current confirmed exploitation emergency. Patch or retire vulnerable print infrastructure, starting with network-accessible print servers and systems supporting shared print workflows. Mitigation focus: Apply vendor security updates from Debian, Ubuntu, Red Hat, or Oracle guidance.; Upgrade cups-filters to a fixed release, at least 1.4.0 where applicable.; Identify and update systems using Foomatic 4.0.x foomatic-filters..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.