CVE-2023-32360

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	unspecified – < 13.4, unspecified – < 12.6, unspecified – < 11.7	13.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	cups	2.4.2-6	—
Debian 13	cups	2.4.2-6	—
Debian 12	cups	2.4.2-3+deb12u2	—
Debian 10	cups	2.2.10-6+deb10u9	DLA-3594-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 22.04 LTS	cups	2.4.1op1-1ubuntu4.6	USN-6361-1
Ubuntu 20.04 LTS	cups	2.3.1-9ubuntu1.5	USN-6361-1

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 18.04 LTS	cups	2.2.7-1ubuntu2.10+esm3	USN-6361-2
Ubuntu Pro 16.04 LTS	cups	2.1.3-4ubuntu0.11+esm5	USN-6361-2

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	cups +7	1:2.3.3op2-16.el9_2.1	RHSA-2023:4838
RHEL 8	cups +6	1:2.2.6-51.el8_8.1	RHSA-2023:4864
RHEL 7	cups +6	1:1.6.3-52.el7_9	RHSA-2023:4766

Show 9 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 9.0 EUS	cups +7	1:2.3.3op2-13.el9_0.2	RHSA-2023:4769
RHEL 8.6 EUS	cups +6	1:2.2.6-45.el8_6.3	RHSA-2023:4770
RHEL 8.4 TUS	cups +6	1:2.2.6-38.el8_4.2	RHSA-2023:4768
RHEL 8.4 E4S	cups +6	1:2.2.6-38.el8_4.2	RHSA-2023:4768
RHEL 8.4 AUS	cups +6	1:2.2.6-38.el8_4.2	RHSA-2023:4768
RHEL 8.2 TUS	cups +6	1:2.2.6-33.el8_2.2	RHSA-2023:4771
RHEL 8.2 E4S	cups +6	1:2.2.6-33.el8_2.2	RHSA-2023:4771
RHEL 8.2 AUS	cups +6	1:2.2.6-33.el8_2.2	RHSA-2023:4771
RHEL 8.1 E4S	cups +6	1:2.2.6-28.el8_1.2	RHSA-2023:4765

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	cups +7	1:2.3.3op2-16.el9_2.1	ALSA-2023:4838
AlmaLinux 8	cups +6	1:2.2.6-51.el8_8.1	ALSA-2023:4864

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 9	cups	1:2.3.3op2-16.el9_2.1	RLSA-2023:4838
Rocky Linux 8	cups	1:2.2.6-51.el8_8.1	RLSA-2023:4864

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP5	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES 15 SP4	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES 15 SP3	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES 15 SP2	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES 15 SP1	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1

Show 21 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 12 SP5	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SLES 12 SP4	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SLES 12 SP2	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SLES for SAP 15 SP3	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES for SAP 15 SP2	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES for SAP 15 SP1	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLES for SAP 12 SP5	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SLES for SAP 12 SP4	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SLE Micro 6.0	cups	2.4.11-1.1	SUSE-SU-2025:20090-1
SLE Micro 5.5	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-2
SLE Micro 5.4	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLE Micro 5.3	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLE Micro 5.2	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLE HPC 15 SP3	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLE HPC 15 SP2	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SLE HPC 15 SP1	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SUSE OpenStack Cloud Crowbar 9	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SUSE OpenStack Cloud 9	cups	1.7.5-20.46.1	SUSE-SU-2023:3706-1
SUSE Manager Server 4.2	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SUSE Manager Proxy 4.2	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
SUSE Enterprise Storage 7.1	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	cups	2.4.2-7.1	openSUSE-SU-2024:13250-1
openSUSE Leap 15.5	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1
openSUSE Leap 15.4	cups	2.2.7-150000.3.51.2	SUSE-SU-2023:3707-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	cups +7	1:2.3.3op2-18.amzn2023.0.6	ALAS2023-2023-327
Amazon Linux 2	cups +6	1:1.6.3-51.amzn2.0.3	ALAS2-2023-2228

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	cups +7	1:2.3.3op2-16.el9_2.1	ELSA-2023-4838
Oracle Linux 8	cups +6	1:2.2.6-51.el8_8.1	ELSA-2023-4864
Oracle Linux 7	cups +6	1:1.6.3-52.el7_9	ELSA-2023-4766

Advisories 30

ALSA-2023:4838 Important: cups security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2023:4864 Important: cups security update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2023:4771 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4765 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4766 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4768 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4769 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4770 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4838 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2023:4864 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
USN-6361-2 cups vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
USN-6361-1 cups vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
SUSE-SU-2025:20090-1 Security update for cups SUSE / openSUSE Security Updates · Mar 23, 2026
DLA-3594-1 cups - security update Debian Security (DSA / DLA) · Mar 9, 2026
RLSA-2023:4864 Important: cups security update Rocky Linux Security Advisories · Feb 5, 2026
RLSA-2023:4838 Important: cups security update Rocky Linux Security Advisories · Feb 4, 2026
SUSE-SU-2023:3707-2 Security update for cups SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13250-1 cups-2.4.2-7.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:3706-1 Security update for cups SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:3707-1 Security update for cups SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2024-1086 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 19, 2025
WID-SEC-2024-0064 Juniper Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2025
WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
WID-SEC-2023-1251 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 19, 2024
WID-SEC-2023-2028 CUPS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 18, 2024
ALAS2023-2023-327 Moderate: cups security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 7, 2023
ALAS2-2023-2228 Moderate: cups security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 7, 2023
ELSA-2023-4864 Important: cups security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 30, 2023
ELSA-2023-4838 Important: cups security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 29, 2023
ELSA-2023-4766 Important: cups security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 29, 2023

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, m…

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Amazon Linux

Oracle Linux

Advisories 30

References