[El-errata] ELSA-2026-0596 Moderate: Oracle Linux 8 cups security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-0596

http://linux.oracle.com/errata/ELSA-2026-0596.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
cups-2.2.6-66.el8_10.x86_64.rpm
cups-client-2.2.6-66.el8_10.x86_64.rpm
cups-devel-2.2.6-66.el8_10.i686.rpm
cups-devel-2.2.6-66.el8_10.x86_64.rpm
cups-filesystem-2.2.6-66.el8_10.noarch.rpm
cups-ipptool-2.2.6-66.el8_10.x86_64.rpm
cups-libs-2.2.6-66.el8_10.i686.rpm
cups-libs-2.2.6-66.el8_10.x86_64.rpm
cups-lpd-2.2.6-66.el8_10.x86_64.rpm

aarch64:
cups-2.2.6-66.el8_10.aarch64.rpm
cups-client-2.2.6-66.el8_10.aarch64.rpm
cups-devel-2.2.6-66.el8_10.aarch64.rpm
cups-filesystem-2.2.6-66.el8_10.noarch.rpm
cups-ipptool-2.2.6-66.el8_10.aarch64.rpm
cups-libs-2.2.6-66.el8_10.aarch64.rpm
cups-lpd-2.2.6-66.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/cups-2.2.6-66.el8_10.src.rpm

Related CVEs:

CVE-2025-58436
CVE-2025-61915




Description of changes:

[1:2.2.6-66]
- fix use-after-free reported by OSH

[1:2.2.6-65]
- RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues