Skip to content
OpenAdvisories
High RHSA-2026:8814 12 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 cups 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-client 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-devel 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-filesystem 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-ipptool 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-libs 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-lpd 0:2.4.17-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 cups-printerapp 0:2.4.17-1.hum1

Vulnerabilities 12

  • High 8.0
    CVE-2025-58060 Public exploit

    cups has Authentication bypass with AuthType Negotiate

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2025-58364

    cups: Remote DoS via null dereference

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remot…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2026-34978

    OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri (e.g., rss:///../job.cache), letting a remote IPP client write…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2026-34980 Public exploit

    OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript que…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2026-34979

    OpenPrinting CUPS: Heap overflow in `get_options()`

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of p…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 5.1
    CVE-2025-58436

    OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 5.0
    CVE-2026-34990 Public exploit

    OpenPrinting CUPS: Local print admin token disclosure using temporary printers

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable A…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 4.8
    CVE-2026-27447

    OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorizat…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 4.0
    CVE-2025-64503

    [BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster

    cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause …

    OpenPrinting cups-filters cups-filters cups-filters Debian Ubuntu
  • Medium 4.0
    CVE-2026-39314

    CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer underflow vulnerability in _ppdCreateFromIPP() (cups/ppd-cache.c) allows any unprivileged local user to crash the cup…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 4.0
    CVE-2026-39316

    CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler (cupsd) when temporary printers are automatically deleted. cupsdDele…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Low 3.7
    CVE-2025-57812

    [BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`

    CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Fil…

    OpenPrinting libcupsfilters cups-filters cups-filters Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2025-58364
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2025-58060
  • report
    https://access.redhat.com/security/cve/CVE-2025-64503
  • report
    https://access.redhat.com/security/cve/CVE-2025-58436
  • report
    https://access.redhat.com/security/cve/CVE-2025-57812
  • report
    https://access.redhat.com/security/cve/CVE-2026-39316
  • report
    https://access.redhat.com/security/cve/CVE-2026-39314
  • report
    https://access.redhat.com/security/cve/CVE-2026-34990
  • report
    https://access.redhat.com/security/cve/CVE-2026-34980
  • report
    https://access.redhat.com/security/cve/CVE-2026-34979
  • report
    https://access.redhat.com/security/cve/CVE-2026-34978
  • report
    https://access.redhat.com/security/cve/CVE-2026-27447
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8814.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414632
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-57812
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-57812
  • article
    https://github.com/OpenPrinting/cups-filters/blob/3c58463e341b12c9d30d7d3807d2bac1bc595a78/cupsfilters/image-tiff.c#L34
  • article
    https://github.com/OpenPrinting/cups-filters/blob/3c58463e341b12c9d30d7d3807d2bac1bc595a78/filter/imagetoraster.c#L613
  • article
    https://github.com/OpenPrinting/libcupsfilters/blob/33421982e10f6a14bc0bab03b80c9cf4660e8d7d/cupsfilters/image-tiff.c#L32
  • article
    https://github.com/OpenPrinting/libcupsfilters/commit/b69dfacec7f176281782e2f7ac44f04bf9633cfa
  • article
    https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2392595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-58060
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-58060
  • article
    https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393078
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-58364
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-58364
  • article
    https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2416040
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-58436
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-58436
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414705
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-64503
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-64503
  • article
    http://www.openwall.com/lists/oss-security/2025/11/12/2
  • article
    https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1620