RLSA-2026:82883
RLSA-2026:82883 · Important: hplip security, bug fix, and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023) * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099) * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098) * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097) * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103) * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106) * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100) * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101) * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104) * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105) * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102) Bug Fix(es) and Enhancement(s): * [IMAGE-MODE] missing /var/lib/hp on image-mode [rhel-10] (JIRA:Rocky Linux-266547) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
hplip Rocky Linux:10
- Affected ranges
- ECOSYSTEM: < 0:3.26.6-1.el10_2.3
Update to 0:3.26.6-1.el10_2.3
Original sources
- https://errata.rockylinux.org/RLSA-2026:82883
- https://bugzilla.redhat.com/show_bug.cgi?id=2384011
- https://bugzilla.redhat.com/show_bug.cgi?id=2535600
- https://bugzilla.redhat.com/show_bug.cgi?id=2535603
- https://bugzilla.redhat.com/show_bug.cgi?id=2535607
- https://bugzilla.redhat.com/show_bug.cgi?id=2535613
- https://bugzilla.redhat.com/show_bug.cgi?id=2535614
- https://bugzilla.redhat.com/show_bug.cgi?id=2535615
- https://bugzilla.redhat.com/show_bug.cgi?id=2535617
- https://bugzilla.redhat.com/show_bug.cgi?id=2535618
- https://bugzilla.redhat.com/show_bug.cgi?id=2535621
- https://bugzilla.redhat.com/show_bug.cgi?id=2535622
- https://access.redhat.com/errata/RHSA-2026:82883
- https://osv.dev/vulnerability/RLSA-2026:82883