The Common UNIX Printing System (CUPS) on Red Hat Enterprise Linux 8 contains two vulnerabilities: CVE-2025-61915 allows local denial-of-service via updates to the cupsd.conf configuration file, and CVE-2025-58436 involves slow client communication that may cause a denial-of-service. These issues have been addressed in a security update released by Red Hat, which is rated as having a moderate impact. The advisory references Red Hat Enterprise Linux 8 packages updated to cups version 2.2.6-66.el8_10 to remediate these vulnerabilities.

Successful exploitation of these vulnerabilities could cause denial-of-service conditions on affected systems by disrupting the CUPS printing service. The impact is limited to service availability and does not indicate privilege escalation or remote code execution. The severity is rated moderate by Red Hat.

Red Hat has released an official security update for Red Hat Enterprise Linux 8 that addresses these vulnerabilities. Users should apply the updated CUPS packages (e.g., cups-2.2.6-66.el8_10) as provided by Red Hat to remediate the issues. Refer to the Red Hat advisory RHSA-2026:0596 and the update instructions at https://access.redhat.com/articles/11258 for detailed guidance. No additional mitigation steps are indicated by the vendor.