Red Hat Security Advisory

RHSA-2026:0312

cups security update

Released 2026-01-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) cups-1:2.3.3op2-34.el9_7.2, cups-client-1:2.3.3op2-34.el9_7.2, cups-devel-1:2.3.3op2-34.el9_7.2 +4
Red Hat Enterprise Linux BaseOS (v. 9) cups-1:2.3.3op2-34.el9_7.2, cups-libs-1:2.3.3op2-34.el9_7.2

TI-2025-38265 CVE-2025-61915

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00496 Published 2025-11-29 Partial fix · 2.4.15 CWE-124

TI-2025-36195 CVE-2025-58436

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-29 Partial fix · 2.4.15 CWE-400

TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27

LOW 20

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00443 Published 2025-10-29 Partial fix · 1.24.8, 1.25.2