{"id":"CLSA-2025-1759329269","summary":"cups: Fix of 2 CVEs","details":"- CVE-2023-4504: validate length of attacker-crafted PPD PostScript documents to\n  prevent heap-based buffer overflow and possible code execution\n- CVE-2025-58060: fix authentication bypass issue caused by not checking\n  password when AuthType is not Basic.","modified":"2026-05-27T11:18:28.280088302Z","published":"2025-10-01T14:34:46Z","upstream":["CVE-2023-4504","CVE-2025-58060"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1759329269.html"}],"affected":[{"package":{"name":"cups","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}},{"package":{"name":"cups-client","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups-client?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}},{"package":{"name":"cups-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}},{"package":{"name":"cups-filesystem","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups-filesystem?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}},{"package":{"name":"cups-ipptool","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups-ipptool?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}},{"package":{"name":"cups-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}},{"package":{"name":"cups-lpd","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/cups-lpd?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.6-40.el8.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1759329269.json"}}],"schema_version":"1.7.5"}