Skip to content
OpenAdvisories
High DSA-5998-1 2 CVEs

cups - security update

Published Sep 11, 2025 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 12 cups 2.4.2-3+deb12u9
Debian · 13 cups 2.4.10-3+deb13u1

Vulnerabilities 2

  • High 8.0
    CVE-2025-58060 Public exploit

    cups has Authentication bypass with AuthType Negotiate

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…

  • Medium 6.5

    cups: Remote DoS via null dereference

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remot…