File cups-1.7.5-CVE-2025-58060.patch of Package cups.40433

--- scheduler/auth.c.orig	2014-01-06 23:21:15.000000000 +0100
+++ scheduler/auth.c	2025-09-03 16:39:39.137489307 +0200
@@ -635,6 +635,16 @@ cupsdAuthorize(cupsd_client_t *con)	/* I
     int	userlen;			/* Username:password length */
 
 
+   /*
+    * Only allow Basic if enabled...
+    */
+
+    if (type != CUPSD_AUTH_BASIC && type != CUPSD_AUTH_BASICDIGEST)
+    {
+      cupsdLogMessage(CUPSD_LOG_ERROR, "Basic authentication is not enabled.");
+      return;
+    }
+
     authorization += 5;
     while (isspace(*authorization & 255))
       authorization ++;
@@ -943,6 +953,16 @@ cupsdAuthorize(cupsd_client_t *con)	/* I
   else if (!strncmp(authorization, "Digest", 6))
   {
    /*
+    * Only allow Digest if enabled...
+    */
+
+    if (type != CUPSD_AUTH_DIGEST)
+    {
+      cupsdLogMessage(CUPSD_LOG_ERROR, "Digest authentication is not enabled.");
+      return;
+    }
+
+   /*
     * Get the username, password, and nonce from the Digest attributes...
     */
 
@@ -1030,6 +1050,15 @@ cupsdAuthorize(cupsd_client_t *con)	/* I
 					/* Output token for username */
     gss_name_t		client_name;	/* Client name */
 
+   /*
+    * Only allow Kerberos if enabled...
+    */
+
+    if (type != CUPSD_AUTH_NEGOTIATE)
+    {
+      cupsdLogMessage(CUPSD_LOG_ERROR, "Kerberos authentication is not enabled.");
+      return;
+    }
 
 #  ifdef __APPLE__
    /*