Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory addresses a vulnerability identified as CVE-2026-87876 in the CUPS (Common UNIX Printing System) packages included in Red Hat Hardened Images RPMs. The update replaces several CUPS-related RPMs with version 2.4.19-4.2.hum1 across architectures including aarch64 and x86_64. The advisory does not provide detailed technical information about the nature of the vulnerability beyond referencing CWE-178 (Improper Neutralization of Input During Web Page Generation). The update is intended to mitigate this issue by providing patched RPMs.

The vulnerability is rated as low severity by Red Hat. The advisory does not specify the exact impact or exploitation details but implies a security fix is necessary to address the issue in the CUPS packages. There are no known exploits in the wild at the time of publication. The impact is limited to systems using the affected CUPS packages in Red Hat Hardened Images.

A security update is available and should be applied by updating the affected CUPS packages to version 2.4.19-4.2.hum1 as provided by Red Hat Hardened Images RPMs. Users should follow Red Hat's official update procedures as detailed in the advisory. No additional mitigation steps are indicated or required beyond applying this update.