-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 07 Sep 2025 19:45:05 +0200 Source: cups Architecture: source Version: 2.4.2-3+deb12u9 Distribution: bookworm-security Urgency: high Maintainer: Debian Printing Team Changed-By: Thorsten Alteholz Changes: cups (2.4.2-3+deb12u9) bookworm-security; urgency=high . * CVE-2025-58060 fix authentication bypass with AuthType Negotiate * CVE-2025-58364 fix remote DoS via null dereference Checksums-Sha1: a7e38fee92792e971644cf0c8459a921f2a3915f 3389 cups_2.4.2-3+deb12u9.dsc 45055a7acb8da7cf743b6c572a601418a89f994f 8128785 cups_2.4.2.orig.tar.gz 96713b90c9bb51b3f69ccc4e49913a7781d3ffe5 228 cups_2.4.2.orig.tar.gz.asc 2784b9e680145e824bda13849a346869c7448cc1 391124 cups_2.4.2-3+deb12u9.debian.tar.xz 85de6d10ddbc35503d9b1078d38d2b1845ef8302 14478 cups_2.4.2-3+deb12u9_amd64.buildinfo Checksums-Sha256: 6474d31542a44084f27e82c780a9874d923517e495487949b517da6c3e7b08dd 3389 cups_2.4.2-3+deb12u9.dsc f03ccb40b087d1e30940a40e0141dcbba263f39974c20eb9f2521066c9c6c908 8128785 cups_2.4.2.orig.tar.gz 1c116a5fb52e013f4569c3e4cb09a9934ea5e498b9e9d3b823bc2ae09066555b 228 cups_2.4.2.orig.tar.gz.asc 7cdfaf0d9339a16723ee25e940e65172cd446baf35c476a2fa6de6f4730080c2 391124 cups_2.4.2-3+deb12u9.debian.tar.xz dfc93f6746aafba5527a535d96078a7a024ee7e39225c2f497ba763ea4c1c8a4 14478 cups_2.4.2-3+deb12u9_amd64.buildinfo Files: 951babdd45558b4e043cd8ab3e7ba4eb 3389 net optional cups_2.4.2-3+deb12u9.dsc be5241e2c165eeb83b58aa32de26fb16 8128785 net optional cups_2.4.2.orig.tar.gz eb60d5853f5988a4a91e3db1203fe508 228 net optional cups_2.4.2.orig.tar.gz.asc 908481a808d2244c34c0fc331b65e8d5 391124 net optional cups_2.4.2-3+deb12u9.debian.tar.xz ddbf758e5373f710f9f968944f399697 14478 net optional cups_2.4.2-3+deb12u9_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmjCv1NfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR+L3D/4oEv7LsJVtvQlRUO+sZRA7Uln9XuyE nxacTicMeePN2cpAwDbUUFeFoRnQcKqSLAHnRj1uXOxnzYOMvqqc/ppDyJktagv4 yuH6bnpf80Y+y4XIH2ILCSB8TgucoeRhx7t3QJ9w0Jbffpkv05Ljv4sjsViPS1lU e9QQ2SulUSOfTgeyt9ZNotSMfLX3j/MRiUmGsbsZ9fJeDUV/P9TnezZLmgrlXbry fRYTVMLNTl+uJZMGA+sYFB8HFmzTCYbeZf6Jq0FSAnxA3x0Ldvd1PfRhGz0g9zzW JfXFjSrbAE+zQrk50e+JbVEUIcsRgHT7HU4M70M+8U7vgBe2gI5wTcLFxAdzs4gU esqEG7GfIRhFVujGrTlKPbW3JVxs08u5JO+2VrMeZQXOuuPtxXPyM3qf/P1mxZy+ WT30qVFc64E45hcc05ft7oweoqYoo9QSnKULMKCqcJkPcDHJCqnT84rWoQW4F141 9jJ825846uQ624WpAYIA1FAPMbo3AVmNQT7RMJ/7OfkobfygIsDRx4ofK/yYD06V n+Lx6oMXPCUb2Ut6qn09LmPD8rT/urhUGRg5tBtzJgedkQuRMwvYazBwoI2zOnJT f6DsJc61agsN8/aRZBdfocj0aYo/fBE5Jg2FM7h7ZWDctezlHUwbegtVwEobCxXX ZMFWFVsnB8g29w== =dSI7 -----END PGP SIGNATURE-----