Red Hat Security Advisory

RHSA-2026:8814

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images cups-2.4.17-1.hum1@aarch64, cups-2.4.17-1.hum1@src, cups-2.4.17-1.hum1@x86_64 +14

Fixes 12 records

TI-2025-35903 CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

HIGH 70

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.01001 Published 2025-09-11 Partial fix · 2.4.13 CWE-287

TI-2026-27200 CVE-2026-34978

Path traversal in OpenPrinting cups

HIGH 68

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00422 Published 2026-04-03 Partial fix CWE-22

TI-2026-27201 CVE-2026-34979

OpenPrinting CUPS: Heap overflow in `get_options()`

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00409 Published 2026-04-03 Partial fix CWE-122

TI-2025-36152 CVE-2025-58364

cups: Remote DoS via null dereference

MEDIUM 62

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0116 Published 2025-09-11 Partial fix · 2.4.13 CWE-20

TI-2026-28306 CVE-2026-39316

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-04-07 Partial fix CWE-416

TI-2026-28304 CVE-2026-39314

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-04-07 Partial fix CWE-191

TI-2026-21858 CVE-2026-27447

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-863

TI-2026-27202 CVE-2026-34980

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

MEDIUM 60

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.01652 Published 2026-04-03 Partial fix CWE-20

TI-2026-27212 CVE-2026-34990

OpenPrinting CUPS: Local print admin token disclosure using temporary printers

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-287

TI-2025-36195 CVE-2025-58436

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-29 Partial fix · 2.4.15 CWE-400

TI-2025-39895 CVE-2025-64503

[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster

MEDIUM 52

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00228 Published 2025-11-12 Partial fix CWE-787

TI-2025-35695 CVE-2025-57812

[BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`

LOW 18

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks need…

CVSS 3.1LOW 3.7 Adjacent network Low privileges No interaction EPSS 0.00478 Published 2025-11-12 Partial fix CWE-125