Skip to content
OpenAdvisories
High ELSA-2025-15702 1 CVE

Important: cups security update (Oracle Linux 8)

Published Sep 11, 2025 · Updated Sep 11, 2025

Ecosystem: Oracle Linux

Summary

[1:2.2.6-63]
- RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 8 cups 1:2.2.6-63.el8_10
Oracle Linux · 8 cups-client 1:2.2.6-63.el8_10
Oracle Linux · 8 cups-devel 1:2.2.6-63.el8_10
Oracle Linux · 8 cups-filesystem 1:2.2.6-63.el8_10
Oracle Linux · 8 cups-ipptool 1:2.2.6-63.el8_10
Oracle Linux · 8 cups-libs 1:2.2.6-63.el8_10
Oracle Linux · 8 cups-lpd 1:2.2.6-63.el8_10

Vulnerabilities 1

  • High 8.0
    CVE-2025-58060 Public exploit

    cups has Authentication bypass with AuthType Negotiate

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine