Skip to content
OpenAdvisories
High ELSA-2025-15701 2 CVEs

Important: cups security update (Oracle Linux 10)

Published Sep 12, 2025 · Updated Sep 12, 2025

Ecosystem: Oracle Linux

Summary

[-1:2.4.10-11.1]
- CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 10 cups 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-client 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-devel 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-filesystem 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-ipptool 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-libs 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-lpd 1:2.4.10-11.el10_0.1
Oracle Linux · 10 cups-printerapp 1:2.4.10-11.el10_0.1

Vulnerabilities 2

  • High 8.0
    CVE-2025-58060 Public exploit

    cups has Authentication bypass with AuthType Negotiate

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2025-58364

    cups: Remote DoS via null dereference

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remot…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine