RHSA-2026:84421HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
October 17, 2026
Last Modified
October 30, 2026

🔗 CVE IDs covered (4)

CVE-2026-55453 →CVE-2026-55467 →CVE-2026-55480 →CVE-2026-61702 →

📋 Description

CVE-2026-55453 — cups: cups: Arbitrary code execution via newline injection in printer status messages CVE-2026-55467 — cups: cups: Denial of Service via unsanitized fax job attributes CVE-2026-55480 — cups: cups: Arbitrary file overwrite via insecure temporary file handling CVE-2026-61702 — cups: cups: Information disclosure via path traversal in banner processing

🎯 Affected products26

  • Red Hat Hardened Images
  • cups-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-0:2.4.19-4.6.hum1@src as a component of Red Hat Hardened Images
  • cups-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images
  • cups-client-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-client-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-client-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images
  • cups-devel-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-devel-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-devel-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images
  • cups-filesystem-0:2.4.19-4.6.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • cups-filesystem-0:2.4.19-4.6.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • cups-filesystem-0:2.4.19-4.6.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • cups-ipptool-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-ipptool-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-ipptool-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images
  • cups-libs-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-libs-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-libs-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images
  • cups-lpd-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-lpd-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-lpd-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images
  • cups-printerapp-0:2.4.19-4.6.hum1@aarch64 as a component of Red Hat Hardened Images
  • cups-printerapp-0:2.4.19-4.6.hum1@s390x as a component of Red Hat Hardened Images
  • cups-printerapp-0:2.4.19-4.6.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Restrict access to the lp administrative group and ensure the CUPS TempDir points to a private directory with restricted permissions (0700) owned strictly by root.

🔗 References (8)