OESA-2025-2334

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2334

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2025-2334.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2025-2334

Upstream

CVE-2025-58060

CVE-2025-58364

Published

2025-09-26T13:08:47Z

Modified

2025-09-26T14:17:07.292702Z

Summary

cups security update

Details

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.

Security Fix(es):

'Hi all,\n\nthere is important security vulnerability in CUPS:\n\n\n\xa0\xa0 Description\n\n\n\xa0\xa0\xa0\xa0 Summary', 'Details', 'PoC\n\n- Configure CUPS with |DefaultAuthType Negotiate|.\n- Start CUPS', '- cat /etc/cups/cupsd.conf\nhaha\n\n\n\xa0\xa0\xa0\xa0 Impact', 'Patch', 'Have a nice day,\n\n\nZdenek Dohnal\n\n--\nZdenek Dohnal\nSenior Software Engineer\nRed Hat, BRQ-TPBC'

'Hi all!', 'Description\n\n\n\xa0\xa0\xa0\xa0 Summary', 'Details\n\nThe combination of:', 'Is shown in two places in OpenPrinting:\n\n|cups/scheduler/ipp.c libcupsfilters/cupsfilters/ipp.c |', 'PoC', 'Impact', 'Metrics:\n\n\n\xa0\xa0\xa0\xa0\xa0\xa0 CVSS v3 base metrics\n\nAttack vector Adjacent\nAttack complexity Low\nPrivileges required None\nUser interaction None\nScope Unchanged\nConfidentiality None\nIntegrity None\nAvailability High\n\nCredit -', 'Patch', 'Have a nice day!\n\n\nZdenek\n\n--\nZdenek Dohnal\nSenior Software Engineer\nRed Hat, BRQ-TPBC'

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP4

cups

Package

Name: cups
Purl: pkg:rpm/openEuler/cups&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.13-22.oe2003sp4

Ecosystem specific

{
    "noarch": [
        "cups-help-2.2.13-22.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "cups-2.2.13-22.oe2003sp4.aarch64.rpm",
        "cups-debuginfo-2.2.13-22.oe2003sp4.aarch64.rpm",
        "cups-debugsource-2.2.13-22.oe2003sp4.aarch64.rpm",
        "cups-devel-2.2.13-22.oe2003sp4.aarch64.rpm",
        "cups-libs-2.2.13-22.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "cups-2.2.13-22.oe2003sp4.x86_64.rpm",
        "cups-debuginfo-2.2.13-22.oe2003sp4.x86_64.rpm",
        "cups-debugsource-2.2.13-22.oe2003sp4.x86_64.rpm",
        "cups-devel-2.2.13-22.oe2003sp4.x86_64.rpm",
        "cups-libs-2.2.13-22.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "cups-2.2.13-22.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS-SP3

cups

Package

Name: cups
Purl: pkg:rpm/openEuler/cups&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.0-15.oe2203sp3

Ecosystem specific

{
    "noarch": [
        "cups-filesystem-2.4.0-15.oe2203sp3.noarch.rpm",
        "cups-help-2.4.0-15.oe2203sp3.noarch.rpm"
    ],
    "aarch64": [
        "cups-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-client-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-debuginfo-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-debugsource-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-devel-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-ipptool-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-libs-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-lpd-2.4.0-15.oe2203sp3.aarch64.rpm",
        "cups-printerapp-2.4.0-15.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "cups-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-client-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-debuginfo-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-debugsource-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-devel-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-ipptool-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-libs-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-lpd-2.4.0-15.oe2203sp3.x86_64.rpm",
        "cups-printerapp-2.4.0-15.oe2203sp3.x86_64.rpm"
    ],
    "src": [
        "cups-2.4.0-15.oe2203sp3.src.rpm"
    ]
}

openEuler:22.03-LTS-SP4

cups

Package

Name: cups
Purl: pkg:rpm/openEuler/cups&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.0-15.oe2203sp4

Ecosystem specific

{
    "noarch": [
        "cups-filesystem-2.4.0-15.oe2203sp4.noarch.rpm",
        "cups-help-2.4.0-15.oe2203sp4.noarch.rpm"
    ],
    "aarch64": [
        "cups-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-client-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-debuginfo-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-debugsource-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-devel-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-ipptool-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-libs-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-lpd-2.4.0-15.oe2203sp4.aarch64.rpm",
        "cups-printerapp-2.4.0-15.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "cups-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-client-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-debuginfo-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-debugsource-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-devel-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-ipptool-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-libs-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-lpd-2.4.0-15.oe2203sp4.x86_64.rpm",
        "cups-printerapp-2.4.0-15.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "cups-2.4.0-15.oe2203sp4.src.rpm"
    ]
}

openEuler:24.03-LTS

cups

Package

Name: cups
Purl: pkg:rpm/openEuler/cups&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.7-7.oe2403sp1

Ecosystem specific

{
    "noarch": [
        "cups-filesystem-2.4.7-7.oe2403sp2.noarch.rpm",
        "cups-help-2.4.7-7.oe2403sp2.noarch.rpm",
        "cups-filesystem-2.4.7-7.oe2403.noarch.rpm",
        "cups-help-2.4.7-7.oe2403.noarch.rpm",
        "cups-filesystem-2.4.7-7.oe2403sp1.noarch.rpm",
        "cups-help-2.4.7-7.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "cups-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-client-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-devel-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-libs-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-2.4.7-7.oe2403.aarch64.rpm",
        "cups-client-2.4.7-7.oe2403.aarch64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403.aarch64.rpm",
        "cups-debugsource-2.4.7-7.oe2403.aarch64.rpm",
        "cups-devel-2.4.7-7.oe2403.aarch64.rpm",
        "cups-ipptool-2.4.7-7.oe2403.aarch64.rpm",
        "cups-libs-2.4.7-7.oe2403.aarch64.rpm",
        "cups-lpd-2.4.7-7.oe2403.aarch64.rpm",
        "cups-printerapp-2.4.7-7.oe2403.aarch64.rpm",
        "cups-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-client-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-devel-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-libs-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "cups-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-client-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-devel-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-libs-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-2.4.7-7.oe2403.x86_64.rpm",
        "cups-client-2.4.7-7.oe2403.x86_64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403.x86_64.rpm",
        "cups-debugsource-2.4.7-7.oe2403.x86_64.rpm",
        "cups-devel-2.4.7-7.oe2403.x86_64.rpm",
        "cups-ipptool-2.4.7-7.oe2403.x86_64.rpm",
        "cups-libs-2.4.7-7.oe2403.x86_64.rpm",
        "cups-lpd-2.4.7-7.oe2403.x86_64.rpm",
        "cups-printerapp-2.4.7-7.oe2403.x86_64.rpm",
        "cups-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-client-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-devel-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-libs-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "cups-2.4.7-7.oe2403sp2.src.rpm",
        "cups-2.4.7-7.oe2403.src.rpm",
        "cups-2.4.7-7.oe2403sp1.src.rpm"
    ]
}

openEuler:24.03-LTS-SP1

cups

Package

Name: cups
Purl: pkg:rpm/openEuler/cups&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.7-7.oe2403sp1

Ecosystem specific

{
    "noarch": [
        "cups-filesystem-2.4.7-7.oe2403sp1.noarch.rpm",
        "cups-help-2.4.7-7.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "cups-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-client-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-devel-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-libs-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp1.aarch64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "cups-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-client-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-devel-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-libs-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp1.x86_64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "cups-2.4.7-7.oe2403sp1.src.rpm"
    ]
}

openEuler:24.03-LTS-SP2

cups

Package

Name: cups
Purl: pkg:rpm/openEuler/cups&distro=openEuler-24.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.7-7.oe2403sp2

Ecosystem specific

{
    "noarch": [
        "cups-filesystem-2.4.7-7.oe2403sp2.noarch.rpm",
        "cups-help-2.4.7-7.oe2403sp2.noarch.rpm"
    ],
    "aarch64": [
        "cups-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-client-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-devel-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-libs-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp2.aarch64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp2.aarch64.rpm"
    ],
    "x86_64": [
        "cups-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-client-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-debuginfo-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-debugsource-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-devel-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-ipptool-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-libs-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-lpd-2.4.7-7.oe2403sp2.x86_64.rpm",
        "cups-printerapp-2.4.7-7.oe2403sp2.x86_64.rpm"
    ],
    "src": [
        "cups-2.4.7-7.oe2403sp2.src.rpm"
    ]
}