ELBA-2025-21007

ELBA-2025-21007 - cups bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2025-12-02

Description

[1:2.4.10-12]
- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	cups-2.4.10-12.el10_1.src.rpm	b2828b527bdde68f1f91b04065a76506a653bedf162f41038bb02b9f7e1bda83	-	ol10_aarch64_appstream
	cups-2.4.10-12.el10_1.src.rpm	b2828b527bdde68f1f91b04065a76506a653bedf162f41038bb02b9f7e1bda83	-	ol10_aarch64_baseos_latest
	cups-2.4.10-12.el10_1.src.rpm	b2828b527bdde68f1f91b04065a76506a653bedf162f41038bb02b9f7e1bda83	-	ol10_aarch64_u1_baseos_patch
	cups-2.4.10-12.el10_1.aarch64.rpm	64336ec32e4ff17ff9635ac638a1ce32ad272e421fcfc9668e9ed2aa8d616ad9	-	ol10_aarch64_appstream
	cups-client-2.4.10-12.el10_1.aarch64.rpm	3a20c7235aa344a90e2dbcd163435f68f1b6356b62bd606d657e4c3f367bf295	-	ol10_aarch64_appstream
	cups-devel-2.4.10-12.el10_1.aarch64.rpm	d739d378979d6f074e0170f13af610f2f39777704eb7d8c701a6e858d2807106	-	ol10_aarch64_appstream
	cups-filesystem-2.4.10-12.el10_1.noarch.rpm	1efe7c0f4399e104c5fa35bda4321b31f7cf362a0cdd79fb236211dfae38ca20	-	ol10_aarch64_baseos_latest
	cups-filesystem-2.4.10-12.el10_1.noarch.rpm	1efe7c0f4399e104c5fa35bda4321b31f7cf362a0cdd79fb236211dfae38ca20	-	ol10_aarch64_u1_baseos_patch
	cups-ipptool-2.4.10-12.el10_1.aarch64.rpm	8987ee36406839466320add590c2105660a51888987a26edbb8fe25b0977b850	-	ol10_aarch64_appstream
	cups-libs-2.4.10-12.el10_1.aarch64.rpm	3d36ad43d4bb32388cb6150cb22a4f98170852099cbc60be185be720f86ccd4d	-	ol10_aarch64_baseos_latest
	cups-libs-2.4.10-12.el10_1.aarch64.rpm	3d36ad43d4bb32388cb6150cb22a4f98170852099cbc60be185be720f86ccd4d	-	ol10_aarch64_u1_baseos_patch
	cups-lpd-2.4.10-12.el10_1.aarch64.rpm	89f9b9d8fa22a084804344578aef3a45b628c0fdd8984fed8aab86e107feef11	-	ol10_aarch64_appstream
	cups-printerapp-2.4.10-12.el10_1.aarch64.rpm	a242f6f9a6fe51fb555c3bd449d77baaa1e6e656437a8a97ae4fe58d8827dbce	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	cups-2.4.10-12.el10_1.src.rpm	b2828b527bdde68f1f91b04065a76506a653bedf162f41038bb02b9f7e1bda83	-	ol10_x86_64_appstream
	cups-2.4.10-12.el10_1.src.rpm	b2828b527bdde68f1f91b04065a76506a653bedf162f41038bb02b9f7e1bda83	-	ol10_x86_64_baseos_latest
	cups-2.4.10-12.el10_1.src.rpm	b2828b527bdde68f1f91b04065a76506a653bedf162f41038bb02b9f7e1bda83	-	ol10_x86_64_u1_baseos_patch
	cups-2.4.10-12.el10_1.x86_64.rpm	8b2e912fbde60aa0bc4400e6fa2fab38e27e6e72ce562a6d137e851494dd76d4	-	ol10_x86_64_appstream
	cups-client-2.4.10-12.el10_1.x86_64.rpm	2014cd15aa0c78ef3ca4454ffcfb5e32cd286c3bc29c626f01ac93cf1d2ec386	-	ol10_x86_64_appstream
	cups-devel-2.4.10-12.el10_1.x86_64.rpm	700a6a4e895956b1134b163aadfbf07d65bd767a62c8c1d25e3a0e81ee60b6fc	-	ol10_x86_64_appstream
	cups-filesystem-2.4.10-12.el10_1.noarch.rpm	1efe7c0f4399e104c5fa35bda4321b31f7cf362a0cdd79fb236211dfae38ca20	-	ol10_x86_64_baseos_latest
	cups-filesystem-2.4.10-12.el10_1.noarch.rpm	1efe7c0f4399e104c5fa35bda4321b31f7cf362a0cdd79fb236211dfae38ca20	-	ol10_x86_64_u1_baseos_patch
	cups-ipptool-2.4.10-12.el10_1.x86_64.rpm	215c70b988554b4a3023fbcaedad38644bfefe8649af611348a0c8810fe3b4cb	-	ol10_x86_64_appstream
	cups-libs-2.4.10-12.el10_1.x86_64.rpm	5c12db39b041aa76b693468f99c79a030d37bb3665e3488dc856e96efa97897c	-	ol10_x86_64_baseos_latest
	cups-libs-2.4.10-12.el10_1.x86_64.rpm	5c12db39b041aa76b693468f99c79a030d37bb3665e3488dc856e96efa97897c	-	ol10_x86_64_u1_baseos_patch
	cups-lpd-2.4.10-12.el10_1.x86_64.rpm	06bbc299ecb29d294038a5095d86b1c332cc1ab0d0de0fd08b24a333295ede86	-	ol10_x86_64_appstream
	cups-printerapp-2.4.10-12.el10_1.x86_64.rpm	8c98dc17a6baab8f3ea51dbfbe139a658cd588ec66171eb1fb75b48f9c2b132d	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team