[CLSA-2026:1786033252] Fix CVE(s): CVE-2025-58060
Type:
security
Severity:
Important
Release date:
2026-08-06 16:21:02 UTC
Description:
* SECURITY UPDATE: fix authentication bypass in cupsd caused by dispatching on the client-supplied Authorization scheme without checking it against the configured AuthType. - debian/patches/CVE-2025-58060.patch: reject "Authorization: Basic" unless the effective AuthType is CUPSD_AUTH_BASIC and "Authorization: Negotiate" unless it is CUPSD_AUTH_NEGOTIATE in cupsdAuthorize() in scheduler/auth.c. - CVE-2025-58060. * Fix cupsd failing to start with "cupsdDoSelect() failed - Bad address!" on hosts whose RLIMIT_NOFILE hard limit is very large but not RLIM_INFINITY, where the epoll event array allocation fails. - debian/patches/maxfds-limit.patch: cap MaxFDs at 65535 in scheduler/main.c, backported from upstream Issue #989.
CVEs fixed:
Updated packages:
  • cups_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:52feda24496e030d0e3d58620706256939a6e35e
  • cups-bsd_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:6b37ff6af095e729426ff3a718f95902b7043f06
  • cups-client_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:822f24005075fd320ec58f73eaea4ee5f218e158
  • cups-common_2.2.10-6+deb10u10+tuxcare.els4_all.deb
    sha:0a3c749c35873c74399181d4b6eadddc98025bd7
  • cups-core-drivers_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:e3872c0314d5480adb2abb395199c741c2f51ff6
  • cups-daemon_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:9f1b09ee19b84a54680c8a3ef39761fb1b270ecd
  • cups-ipp-utils_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:8859f5ca8e5cbee09db6fd0471360c690b4da83c
  • cups-ppdc_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:7b3985abe9f1bc4e10df0a9daf83dc745114e73d
  • cups-server-common_2.2.10-6+deb10u10+tuxcare.els4_all.deb
    sha:c55f08ab4de5ed90e4388810c5b41f6da458431a
  • libcups2_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:611140c394894e4bc805ee935be02152abf26179
  • libcups2-dev_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:acd7675f9748fcc412a3cb610965a6e0083115ed
  • libcupsimage2_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:43aea40402813faaafe0a1c3485049e2b591f88b
  • libcupsimage2-dev_2.2.10-6+deb10u10+tuxcare.els4_amd64.deb
    sha:e3b139d9b06f097342ab3ebb135013ee6a4958e5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.