Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory addresses vulnerabilities in the CUPS packages included in Red Hat Hardened Images RPMs. The update provides new versions of multiple CUPS RPMs (version 2.4.19-4.5.hum1) for architectures aarch64, s390x, and x86_64. The advisory lists four CVEs (CVE-2026-107885, CVE-2026-107886, CVE-2026-107888, CVE-2026-107890) as fixed by this update. The advisory does not provide detailed technical descriptions or CVSS scores for these vulnerabilities. The update is available via Red Hat's image repository and is intended to address these security issues in the hardened images.

The vulnerabilities affect the CUPS printing system components in Red Hat Hardened Images RPMs. The advisory classifies the severity as medium but does not provide detailed impact descriptions or known exploit information. No known exploits in the wild have been reported. The vulnerabilities could potentially affect printing services on affected systems if not updated.

Red Hat has released updated CUPS RPM packages (version 2.4.19-4.5.hum1) that address the listed CVEs. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the vulnerabilities. Since this is an RPM update, standard package management tools should be used to apply the fix. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified.