{"schemaVersion":3,"id":"RHSA-2026:8814","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","dates":{"published":"2026-04-20T10:12:14.000Z","modified":"2026-10-14T10:33:09.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","exploitability":6.4,"impact":9.2,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"cups","name":"cups","label":"cups","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-client","name":"cups-client","label":"cups-client","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-client","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-devel","name":"cups-devel","label":"cups-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-devel","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-filesystem","name":"cups-filesystem","label":"cups-filesystem","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-filesystem","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-ipptool","name":"cups-ipptool","label":"cups-ipptool","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-ipptool","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-libs","name":"cups-libs","label":"cups-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-libs","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-lpd","name":"cups-lpd","label":"cups-lpd","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-lpd","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"cups-printerapp","name":"cups-printerapp","label":"cups-printerapp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cups-printerapp","purlType":"rpm","versions":[{"text":"< 0:2.4.17-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.4.17-1.hum1","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:8814","label":"access.redhat.com/errata/RHSA-2026:8814","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://images.redhat.com/","label":"images.redhat.com","hostname":"images.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58364","label":"access.redhat.com/security/cve/CVE-2025-58364","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58060","label":"access.redhat.com/security/cve/CVE-2025-58060","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-64503","label":"access.redhat.com/security/cve/CVE-2025-64503","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58436","label":"access.redhat.com/security/cve/CVE-2025-58436","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-57812","label":"access.redhat.com/security/cve/CVE-2025-57812","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39316","label":"access.redhat.com/security/cve/CVE-2026-39316","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39314","label":"access.redhat.com/security/cve/CVE-2026-39314","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34990","label":"access.redhat.com/security/cve/CVE-2026-34990","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34980","label":"access.redhat.com/security/cve/CVE-2026-34980","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34979","label":"access.redhat.com/security/cve/CVE-2026-34979","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34978","label":"access.redhat.com/security/cve/CVE-2026-34978","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27447","label":"access.redhat.com/security/cve/CVE-2026-27447","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8814.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8814.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414632","label":"bugzilla.redhat.com/show_bug.cgi?id=2414632","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-57812","label":"www.cve.org/CVERecord?id=CVE-2025-57812","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57812","label":"nvd.nist.gov/vuln/detail/CVE-2025-57812","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups-filters/blob/3c58463e341b12c9d30d7d3807d2bac1bc595a78/cupsfilters/image-tiff.c#L34","label":"github.com/OpenPrinting/…","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/cups-filters/blob/3c58463e341b12c9d30d7d3807d2bac1bc595a78/filter/imagetoraster.c#L613","label":"github.com/OpenPrinting/…","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/libcupsfilters/blob/33421982e10f6a14bc0bab03b80c9cf4660e8d7d/cupsfilters/image-tiff.c#L32","label":"github.com/OpenPrinting/…","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/libcupsfilters/commit/b69dfacec7f176281782e2f7ac44f04bf9633cfa","label":"github.com/OpenPrinting/libcupsfilters/commit/b69dfacec7f176281782e2f7ac44f04bf9633cfa","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4","label":"github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392595","label":"bugzilla.redhat.com/show_bug.cgi?id=2392595","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58060","label":"www.cve.org/CVERecord?id=CVE-2025-58060","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58060","label":"nvd.nist.gov/vuln/detail/CVE-2025-58060","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393078","label":"bugzilla.redhat.com/show_bug.cgi?id=2393078","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58364","label":"www.cve.org/CVERecord?id=CVE-2025-58364","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58364","label":"nvd.nist.gov/vuln/detail/CVE-2025-58364","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416040","label":"bugzilla.redhat.com/show_bug.cgi?id=2416040","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58436","label":"www.cve.org/CVERecord?id=CVE-2025-58436","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58436","label":"nvd.nist.gov/vuln/detail/CVE-2025-58436","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414705","label":"bugzilla.redhat.com/show_bug.cgi?id=2414705","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-64503","label":"www.cve.org/CVERecord?id=CVE-2025-64503","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64503","label":"nvd.nist.gov/vuln/detail/CVE-2025-64503","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/11/12/2","label":"www.openwall.com/lists/oss-security/2025/11/12/2","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1620","label":"github.com/OpenPrinting/…","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1880","label":"github.com/OpenPrinting/…","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865","label":"github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9","label":"github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/libcupsfilters/blob/1dd86d835b27ed149b66aee1a4853d1db8a1f44c/cupsfilters/pdftoraster.cxx#L1790","label":"github.com/OpenPrinting/…","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454949","label":"bugzilla.redhat.com/show_bug.cgi?id=2454949","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27447","label":"www.cve.org/CVERecord?id=CVE-2026-27447","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27447","label":"nvd.nist.gov/vuln/detail/CVE-2026-27447","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/commit/88516bf6d9e34cef7a64a704b856b837f70cd220","label":"github.com/OpenPrinting/cups/commit/88516bf6d9e34cef7a64a704b856b837f70cd220","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-v987-m8hp-phj9","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-v987-m8hp-phj9","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454957","label":"bugzilla.redhat.com/show_bug.cgi?id=2454957","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34978","label":"www.cve.org/CVERecord?id=CVE-2026-34978","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34978","label":"nvd.nist.gov/vuln/detail/CVE-2026-34978","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcr","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcr","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454946","label":"bugzilla.redhat.com/show_bug.cgi?id=2454946","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34979","label":"www.cve.org/CVERecord?id=CVE-2026-34979","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34979","label":"nvd.nist.gov/vuln/detail/CVE-2026-34979","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-6qxf-7jx6-86fh","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-6qxf-7jx6-86fh","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454954","label":"bugzilla.redhat.com/show_bug.cgi?id=2454954","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34980","label":"www.cve.org/CVERecord?id=CVE-2026-34980","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34980","label":"nvd.nist.gov/vuln/detail/CVE-2026-34980","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-4852-v58g-6cwf","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-4852-v58g-6cwf","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454947","label":"bugzilla.redhat.com/show_bug.cgi?id=2454947","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34990","label":"www.cve.org/CVERecord?id=CVE-2026-34990","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34990","label":"nvd.nist.gov/vuln/detail/CVE-2026-34990","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456107","label":"bugzilla.redhat.com/show_bug.cgi?id=2456107","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39314","label":"www.cve.org/CVERecord?id=CVE-2026-39314","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39314","label":"nvd.nist.gov/vuln/detail/CVE-2026-39314","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-pp8w-2g52-7vj7","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-pp8w-2g52-7vj7","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456120","label":"bugzilla.redhat.com/show_bug.cgi?id=2456120","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39316","label":"www.cve.org/CVERecord?id=CVE-2026-39316","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39316","label":"nvd.nist.gov/vuln/detail/CVE-2026-39316","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-pjv5-prqp-46rg","label":"github.com/OpenPrinting/cups/security/advisories/GHSA-pjv5-prqp-46rg","hostname":"github.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2025-57812","CVE-2025-58060","CVE-2025-58364","CVE-2025-58436","CVE-2025-64503","CVE-2026-27447","CVE-2026-34978","CVE-2026-34979","CVE-2026-34980","CVE-2026-34990","CVE-2026-39314","CVE-2026-39316"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-04-20T10:12:14.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T10:33:09.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:34:50.480Z","stale":false,"partial":false}}