[ubuntu/questing-proposed] cups 2.4.12-0ubuntu2 (Accepted)

[Eduardo Barretto]

cups (2.4.12-0ubuntu2) questing; urgency=medium

  * SECURITY UPDATE: authorization bypass
    - d/p/CVE-2025-58060.patch: only allow basic and kerberos authentication
      if it is enabled.
    - CVE-2025-58060
  * SECURITY UPDATE: remote DoS
    - d/p/CVE-2025-58364.patch: fix null dereference in ipp_read_io().
    - CVE-2025-58364

Date: Fri, 05 Sep 2025 17:13:12 +0200
Changed-By: Eduardo Barretto <eduardo.barretto at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/cups/2.4.12-0ubuntu2
-------------- next part --------------
Format: 1.8
Date: Fri, 05 Sep 2025 17:13:12 +0200
Source: cups
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.12-0ubuntu2
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Eduardo Barretto <eduardo.barretto at canonical.com>
Changes:
 cups (2.4.12-0ubuntu2) questing; urgency=medium
 .
   * SECURITY UPDATE: authorization bypass
     - d/p/CVE-2025-58060.patch: only allow basic and kerberos authentication
       if it is enabled.
     - CVE-2025-58060
   * SECURITY UPDATE: remote DoS
     - d/p/CVE-2025-58364.patch: fix null dereference in ipp_read_io().
     - CVE-2025-58364
Checksums-Sha1:
 35bfa44ca8792bcb97da641572fa47f376832475 3203 cups_2.4.12-0ubuntu2.dsc
 fea987330e24efd8b2eda23c4275650c8fd072a5 398936 cups_2.4.12-0ubuntu2.debian.tar.xz
 a7da330ae2e547acc8f13a823896309635bed92c 11576 cups_2.4.12-0ubuntu2_source.buildinfo
Checksums-Sha256:
 545a9ae96868b7c7a88c01e64731a2308ba352560b029319e23b2175d0134368 3203 cups_2.4.12-0ubuntu2.dsc
 2412c0f8843d2923180a5eda7a70f133f0d3994d655330dd5da806444c84f648 398936 cups_2.4.12-0ubuntu2.debian.tar.xz
 412d558fd00b2b5307b90192cc0733caa6c5d9df3da52fd952ec17ae488ed857 11576 cups_2.4.12-0ubuntu2_source.buildinfo
Files:
 c8531183964bd9d165733bc1099c2b09 3203 net optional cups_2.4.12-0ubuntu2.dsc
 ebd32ca1be5540ddfb6bc343e89fbd71 398936 net optional cups_2.4.12-0ubuntu2.debian.tar.xz
 4f67b1d4578ca4f86deb5083ac7dfba5 11576 net optional cups_2.4.12-0ubuntu2_source.buildinfo
Original-Maintainer: Debian Printing Team <debian-printing at lists.debian.org>