Skip to content
OpenAdvisories
High ELSA-2025-15700 2 CVEs

Important: cups security update (Oracle Linux 9)

Published Sep 11, 2025 · Updated Sep 11, 2025

Ecosystem: Oracle Linux

Summary

[1.2.3.3op2-33.1]
- RHEL-113077 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

[1.2.3.3op2-33.1]
- RHEL-112438 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 9 cups 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-client 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-devel 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-filesystem 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-ipptool 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-libs 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-lpd 1:2.3.3op2-33.el9_6.1
Oracle Linux · 9 cups-printerapp 1:2.3.3op2-33.el9_6.1

Vulnerabilities 2

  • High 8.0
    CVE-2025-58060 Public exploit

    cups has Authentication bypass with AuthType Negotiate

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2025-58364

    cups: Remote DoS via null dereference

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remot…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine