CUPS needs to be updated to fix two CVEs:

- (high severity) https://www.cve.org/CVERecord?id=CVE-2025-58060

- https://www.cve.org/CVERecord?id=CVE-2025-58364

The NixOS PR to watch is https://github.com/NixOS/nixpkgs/pull/442076

#nixos