CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

CVE-2025-58060 is fixed in 29 products on 1 platform, first by DLA-4298-1, released September 11, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.0
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0100
63rd percentile

OpenPrinting CUPS is an open source printing system for Linux and otherUnix-like operating systems. In versions 2.4.12 and earlier, when the`AuthType` is set to anything but `Basic`, if the request contains an`Authorization: Basic ...` header, the password is not checked. Thisresults in authentication bypass. Any configuration that allows an`AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

Where it's fixed

ProductFixed inFixReleased
Linux
cups · Debian 11.6 (bullseye) 2.3.3op2-3+deb11u10 DLA-4298-1 Sep 11, 2025
cups · Debian 12.15 (bookworm) 2.4.2-3+deb12u9 DSA-5998-1 Sep 11, 2025
cups · Debian 13.5 (trixie) 2.4.10-3+deb13u1 DSA-5998-1 Sep 11, 2025
cups · Debian 14 2.4.10-4 DEBIAN-CVE-2025-58060 Sep 11, 2025
cups · RHEL 10 2.4.10-11.el10_0.1 RHSA-2025:15701 Sep 11, 2025
cups · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups 2.4.12-0ubuntu1.1 Jan 16, 2026
cups · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups · opensuse-leap 15.6 2.2.7-150000.3.72.1 SUSE-SU-2025:03261-1 Sep 18, 2025
cups · opensuse-leap 16.0 2.4.16-160000.1.1 OPENSUSE-SU-2026:20172-1 Feb 4, 2026
cups · rocky 10 1:2.4.10-11.el10_0.1 RLSA-2025:15701 Oct 3, 2025
cups · rocky 8 1:2.2.6-63.el8_10 RLSA-2025:15702 Oct 3, 2025
cups · rocky 9 1:2.3.3op2-33.el9_6.1 RLSA-2025:15700 Oct 10, 2025
cups · sles 15.6 2.2.7-150000.3.72.1 SUSE-SU-2025:03261-1 Sep 18, 2025
cups · sles 15.7 2.2.7-150000.3.72.1 SUSE-SU-2025:03261-1 Sep 18, 2025
cups · sles 16.0 2.4.16-160000.1.1 SUSE-SU-2026:20231-1 Feb 4, 2026
cups-bsd · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-bsd 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-bsd · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-bsd 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-bsd · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-bsd 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-bsd · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-bsd 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-bsd · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-bsd 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-client · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups-client · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-client · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-client 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-client · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-client 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-client · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-client 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-client · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-client 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-client · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-client 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-client · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups-client · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-client · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-client · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-client · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups-client · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-client-debuginfo · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-common · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-common 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-common · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-common 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-common · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-common 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-common · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-common 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-common · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-common 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-core-drivers · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-core-drivers 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-core-drivers · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-core-drivers 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-core-drivers · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-core-drivers 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-core-drivers · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-core-drivers 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-core-drivers · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-core-drivers 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-daemon · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-daemon 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-daemon · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-daemon 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-daemon · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-daemon 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-daemon · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-daemon 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-daemon · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-daemon 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-debuginfo · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-debugsource · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-devel · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups-devel · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-devel · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups-devel · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-devel · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-devel · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-devel · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups-devel · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-filesystem · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups-filesystem · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-filesystem · almalinux 10 1:2.4.10-11.el10_0.1 ALSA-2025:15701 Sep 11, 2025
cups-filesystem · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups-filesystem · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-filesystem · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-filesystem · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-filesystem · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups-filesystem · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-ipp-utils · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-ipp-utils 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-ipp-utils · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-ipp-utils 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-ipp-utils · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-ipp-utils 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-ipp-utils · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-ipp-utils 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-ipp-utils · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-ipp-utils 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-ipptool · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups-ipptool · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-ipptool · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups-ipptool · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-ipptool · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-ipptool · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-ipptool · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups-ipptool · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-ipptool-debuginfo · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-libs · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups-libs · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-libs · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups-libs · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-libs · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-libs · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-libs · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups-libs · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-libs-debuginfo · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-lpd · RHEL 8 1:2.2.6-63.el8_10 RHSA-2025:15702 Sep 11, 2025
cups-lpd · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-lpd · almalinux 8 1:2.2.6-63.el8_10 ALSA-2025:15702 Sep 11, 2025
cups-lpd · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-lpd · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-lpd · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-lpd · ol 8 1:2.2.6-63.el8_10 ELSA-2025-15702 Sep 11, 2025
cups-lpd · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-lpd-debuginfo · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-ppdc · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-ppdc 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-ppdc · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-ppdc 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-ppdc · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-ppdc 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-ppdc · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-ppdc 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-ppdc · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-ppdc 2.4.12-0ubuntu1.1 Jan 16, 2026
cups-printerapp · RHEL 9 1:2.3.3op2-33.el9_6.1 RHSA-2025:15700 Sep 11, 2025
cups-printerapp · almalinux 9 1:2.3.3op2-33.el9_6.1 ALSA-2025:15700 Sep 11, 2025
cups-printerapp · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-printerapp · ol 10 1:2.4.10-11.el10_0.1 ELSA-2025-15701 Sep 12, 2025
cups-printerapp · ol 9 1:2.3.3op2-33.el9_6.1 ELSA-2025-15700 Sep 11, 2025
cups-printerapp-debuginfo · amzn 2023 1:2.4.14-1.amzn2023.0.1 ALAS2023-2025-1205 Sep 22, 2025
cups-server-common · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 cups-server-common 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
cups-server-common · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 cups-server-common 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
cups-server-common · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 cups-server-common 2.4.1op1-1ubuntu4.12 Sep 11, 2025
cups-server-common · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 cups-server-common 2.4.7-1.2ubuntu7.4 Sep 11, 2025
cups-server-common · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 cups-server-common 2.4.12-0ubuntu1.1 Jan 16, 2026
libcups2 · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 libcups2 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
libcups2 · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 libcups2 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
libcups2 · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 libcups2 2.4.1op1-1ubuntu4.12 Sep 11, 2025
libcups2t64 · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 libcups2t64 2.4.7-1.2ubuntu7.4 Sep 11, 2025
libcups2t64 · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 libcups2t64 2.4.12-0ubuntu1.1 Jan 16, 2026
libcupscgi1 · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 libcupscgi1 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
libcupsimage2 · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 libcupsimage2 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
libcupsimage2 · Ubuntu 20.04 LTS (focal) 2.3.1-9ubuntu1.9+esm1 libcupsimage2 2.3.1-9ubuntu1.9+esm1 Sep 11, 2025
libcupsimage2 · Ubuntu 22.04.1 LTS (jammy) 2.4.1op1-1ubuntu4.12 libcupsimage2 2.4.1op1-1ubuntu4.12 Sep 11, 2025
libcupsimage2t64 · Ubuntu 24.04.5 LTS (noble) 2.4.7-1.2ubuntu7.4 libcupsimage2t64 2.4.7-1.2ubuntu7.4 Sep 11, 2025
libcupsimage2t64 · Ubuntu 25.04 (plucky) 2.4.12-0ubuntu1.1 libcupsimage2t64 2.4.12-0ubuntu1.1 Jan 16, 2026
libcupsmime1 · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 libcupsmime1 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025
libcupsppdc1 · Ubuntu 18.04.6 LTS (bionic) 2.2.7-1ubuntu2.10+esm7 libcupsppdc1 2.2.7-1ubuntu2.10+esm7 Sep 11, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.