Red Hat Enterprise Linux 9/rhel9/cups

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)CVE-2026-21441 · GHSA-38JV-5279-WG99Version ranges need review.	urllib3 External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
cups: cups: Arbitrary file overwrite via insecure temporary file handlingCVE-2026-55480	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length boundCVE-2026-87875	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Medium	No fix reported	Not recorded
cups: OpenPrinting CUPS: Remaining case-insensitive username matching in scheduler side paths (CVE-2026-27447 follow-up)CVE-2026-87876	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 6/cups	Red Hat	Low	No fix reported	Not recorded
cups: cups: argument injection in mailto notifier via notify-recipient-uriCVE-2026-105326	Red Hat Enterprise Linux 10/cups Red Hat Enterprise Linux 8/cups	Red Hat	Low	No fix reported	Not recorded