Summary
The Common UNIX Printing System (CUPS) provides a portable printing layer for
Linux, UNIX, and similar operating systems.
Security Fix(es):
* cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | cups | 1:2.2.6-63.el8_10 |
| AlmaLinux · 8 | cups-client | 1:2.2.6-63.el8_10 |
| AlmaLinux · 8 | cups-devel | 1:2.2.6-63.el8_10 |
| AlmaLinux · 8 | cups-filesystem | 1:2.2.6-63.el8_10 |
| AlmaLinux · 8 | cups-ipptool | 1:2.2.6-63.el8_10 |
| AlmaLinux · 8 | cups-libs | 1:2.2.6-63.el8_10 |
| AlmaLinux · 8 | cups-lpd | 1:2.2.6-63.el8_10 |
Vulnerabilities 1
-
High 8.0CVE-2025-58060 Public exploit
cups has Authentication bypass with AuthType Negotiate
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…