Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: CUPS Important Update for Multiple Issues 2025:03261-1

suse
Calendar Grey September 18, 2025
Dist Suse Esm H88
A recent patch for cups resolves various security flaws, enhancing overall robustness and performance for end-users.
* bsc#1230932 * bsc#1246533 * bsc#1249049 * bsc#1249128

Summary

## This update for cups fixes the following issues: * CVE-2024-47175: no validation of IPP attributes in `ppdCreatePPDFromIPP2` when writing to a temporary PPD file allows for the injection of attacker- controlled data to the resulting PPD (bsc#1230932). * CVE-2025-58060: no password check when `AuthType` is set to anything but `Basic` and a request is made with an `Authorization: Basic` header (bsc#1249049). * CVE-2025-58364: unsafe deserialization and validation of printer attributes leads to NULL pointer dereference (bsc#1249128). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.3 LTS

Topics%20covered

Topics Covered

security advisory security issue SuSE important cups authentication

References

* bsc#1230932

* bsc#1246533

* bsc#1249049

* bsc#1249128

Cross-

* CVE-2024-47175

* CVE-2025-58060

* CVE-2025-58364

CVSS scores:

* CVE-2024-47175 ( SUSE ): 9.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

* CVE-2024-47175 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-47175 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

* CVE-2025-58060 ( SUSE ): 7.7

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-58060 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-58060 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

* CVE-2025-58364 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-58364 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03261-1
Release Date: 2025-09-18T04:36:38Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue SuSE important cups authentication

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here