Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CUPS (Common Unix Printing System) Security Update for Unauthorized Access

published 1 year ago

Summary

A security update for CUPS has been released to prevent unauthorized access to the system. This update is important for all CUPS users to install to ensure the security of their printing systems. It's recommended to update to the latest version of CUPS as soon as possible.

What to do

Update redhat cups to version 1:2.2.6-33.el8_2.3.
Update redhat cups-client to version 1:2.2.6-33.el8_2.3.
Update redhat cups-client-debuginfo to version 1:2.2.6-33.el8_2.3.
Update redhat cups-debuginfo to version 1:2.2.6-33.el8_2.3.
Update redhat cups-debugsource to version 1:2.2.6-33.el8_2.3.
Update redhat cups-devel to version 1:2.2.6-33.el8_2.3.
Update redhat cups-filesystem to version 1:2.2.6-33.el8_2.3.
Update redhat cups-ipptool to version 1:2.2.6-33.el8_2.3.
Update redhat cups-ipptool-debuginfo to version 1:2.2.6-33.el8_2.3.
Update redhat cups-libs to version 1:2.2.6-33.el8_2.3.
Update redhat cups-libs-debuginfo to version 1:2.2.6-33.el8_2.3.
Update redhat cups-lpd to version 1:2.2.6-33.el8_2.3.
Update redhat cups-lpd-debuginfo to version 1:2.2.6-33.el8_2.3.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.2::appstream	redhat	cups	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-client	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-client-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-debugsource	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-devel	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-filesystem	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-ipptool	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-ipptool-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-libs	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-libs-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-lpd	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::appstream	redhat	cups-lpd-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-client	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-client-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-debugsource	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-devel	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-filesystem	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-ipptool	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-ipptool-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-libs	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-libs-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-lpd	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3
Red Hat:rhel_aus:8.2::baseos	redhat	cups-lpd-debuginfo	< 1:2.2.6-33.el8_2.3 Fix: upgrade to 1:2.2.6-33.el8_2.3

Original advisory text

Red Hat Security Advisory: cups security update

References

https://access.redhat.com/errata/RHSA-2025:17164 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2392595 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17164.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-58060 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-58060 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-58060 Vendor Advisory
https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

8.0 High

Timeline

Published2 Oct 2025

Updated25 Mar 2026

First seen25 Mar 2026

Sources

RHSA-2025:17164 · OSV

Track software like this

Free during beta