Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.0
CUPS Print Server Leaves System Vulnerable to Remote Attack
published 1 year ago
Summary
A security issue was found in the CUPS print server software. If exploited, it could allow an attacker to take control of the system and execute malicious code. Update your CUPS software to the latest version to fix this vulnerability.
What to do
- Update redhat cups to version 1:2.2.6-63.el8_10.
- Update redhat cups-client to version 1:2.2.6-63.el8_10.
- Update redhat cups-client-debuginfo to version 1:2.2.6-63.el8_10.
- Update redhat cups-debuginfo to version 1:2.2.6-63.el8_10.
- Update redhat cups-debugsource to version 1:2.2.6-63.el8_10.
- Update redhat cups-devel to version 1:2.2.6-63.el8_10.
- Update redhat cups-filesystem to version 1:2.2.6-63.el8_10.
- Update redhat cups-ipptool to version 1:2.2.6-63.el8_10.
- Update redhat cups-ipptool-debuginfo to version 1:2.2.6-63.el8_10.
- Update redhat cups-libs to version 1:2.2.6-63.el8_10.
- Update redhat cups-libs-debuginfo to version 1:2.2.6-63.el8_10.
- Update redhat cups-lpd to version 1:2.2.6-63.el8_10.
- Update redhat cups-lpd-debuginfo to version 1:2.2.6-63.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:8::appstream | redhat | cups |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-client |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-client-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-debugsource |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-devel |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-filesystem |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-ipptool |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-ipptool-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-libs |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-libs-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-lpd |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::appstream | redhat | cups-lpd-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-client |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-client-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-debugsource |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-devel |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-filesystem |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-ipptool |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-ipptool-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-libs |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-libs-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-lpd |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | cups-lpd-debuginfo |
< 1:2.2.6-63.el8_10 Fix: upgrade to 1:2.2.6-63.el8_10
|
Original advisory text
Red Hat Security Advisory: cups security update
References
- https://access.redhat.com/errata/RHSA-2025:15702 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2392595 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15702.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-58060 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-58060 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-58060 Vendor Advisory
- https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published12 Sep 2025
Updated25 Mar 2026
First seen25 Mar 2026
Sources
RHSA-2025:15702 · OSV
Track software like this
Free during beta