Every CVE Search/ Get API key

CVE-2025-43023

HP Linux Imaging and Printing Software - Use of DSA Key

5.9 Medium

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
Low

Exploit likelihood

0.29%Up 0.3 points since Jul 29, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.9

HP Linux Imaging and Printing Software - Use of DSA Key

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Record
CVE-2025-43023
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-347
Updated
2026-11-02
EUVDEUVD-2025-22936 5.9

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Record
EUVD-2025-22936
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-f9vh-cwpr-5m8f 5.9

A potential security vulnerability has been identified in the HP Linux Imaging and Printing...

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Record
GHSA-f9vh-cwpr-5m8f
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-347
Updated
2026-11-02
NVD 5.9

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Record
CVE-2025-43023
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-347
Updated
2026-11-02
OSVOESA-2026-2483 9.3

hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.

Security Fix(es):

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).(CVE-2025-43023)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.(CVE-2026-8631)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.(CVE-2026-8632)

Record
OESA-2026-2483
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:82882 8.8

Red Hat Security Advisory: hplip security, bug fix, and enhancement update

Record
RHSA-2026:82882
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 14 moreShow less
OSVRHSA-2026:82883 8.8

Red Hat Security Advisory: hplip security, bug fix, and enhancement update

Record
RHSA-2026:82883
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:82295 8.8

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • hplip: potential memory buffer overflow (CVE-2020-6923)

  • hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

  • hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

  • hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

  • hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

  • hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

  • hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

  • HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:82295
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:82882 8.8

Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

  • hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

  • hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

  • hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

  • hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

  • hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

  • HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

  • [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:Rocky Linux-257310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:82882
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:82883 8.8

Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

  • hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

  • hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

  • hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

  • hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

  • hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

  • HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

  • [IMAGE-MODE] missing /var/lib/hp on image-mode [rhel-10] (JIRA:Rocky Linux-266547)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:82883
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-43023 5.9

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Record
UBUNTU-CVE-2025-43023
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVALSA-2026:82295 No score

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • hplip: potential memory buffer overflow (CVE-2020-6923)
  • hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)
  • hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)
  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)
  • hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)
  • hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)
  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)
  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)
  • hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)
  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)
  • hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)
  • HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:82295
Updated
2026-11-02
OSVALSA-2026:82882 No score

Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)
  • hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)
  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)
  • hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)
  • hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)
  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)
  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)
  • hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)
  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)
  • hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)
  • HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

  • [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:82882
Updated
2026-11-02
OSVALSA-2026:82883 No score

Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)
  • hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)
  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)
  • hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)
  • hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)
  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)
  • hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)
  • hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)
  • hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)
  • hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)
  • HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

  • [IMAGE-MODE] missing /var/lib/hp on image-mode [almalinux-10] (JIRA:AlmaLinux-266547)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:82883
Updated
2026-11-02
OSVopenSUSE-SU-2026:10860-1 No score

hplip-3.26.4-1.1 on GA media

These are all security issues fixed in the hplip-3.26.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10860-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20858-1 No score

Security update for hplip

This update for hplip fixes the following issues:

Changes in hplip:

  • Update to HPLIP 3.26.4

    • CVE-2026-8631: Fixed privileges escalation and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023)
    • CVE-2026-8632: Fixed privileges escalation and/or arbitrary code execution via operating system command injection (bsc#1266024)

  • Add support for the following new printers:

    • HP LaserJet Pro MFP 3106sdw
    • HP LaserJet Pro MFP 3105sdw
    • HP Envy 6500e series
    • HP Envy 6500 series
    • HP OfficeJet Pro 9730 Series
    • HP OfficeJet Pro 9730e Series
    • HP OfficeJet Pro 9720 Series
    • HP OfficeJet Pro 9720e Series
    • HP OfficeJet Pro 8130e All-in-One series
    • HP OfficeJet Pro 8130 All-in-One series
    • HP OfficeJet 8130e All-in-One series
    • HP OfficeJet 8130 All-in-One series
    • HP OfficeJet Pro 8120e All-in-One series
    • HP OfficeJet Pro 8120 All-in-One series
    • HP OfficeJet 8120e All-in-One series
    • HP OfficeJet 8120 All-in-One series
    • HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
    • HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
    • HP DeskJet 4300e All-in-One Printer series
    • HP DeskJet Ink Advantage 4300 All-in-One Printer series
    • HP DeskJet 4300 All-in-One Printer series
    • HP DeskJet 2900e All-in-One Printer series
    • HP DeskJet Ink Advantage 2900 All-in-One Printer series
    • HP DeskJet 2900 All-in-One Printer series

  • Update to HPLIP 3.25.8

  • Added support for the following new Printers:

    • HP LaserJet Enterprise Flow MFP 8601z
    • HP LaserJet Enterprise 5501
    • HP LaserJet Enterprise MFP 5601dn
    • HP LaserJet Enterprise 6500dn
    • HP LaserJet Enterprise 5501n
    • HP LaserJet Enterprise MFP 5601
    • HP LaserJet Enterprise 6500
    • HP LaserJet Enterprise 5502dn
    • HP LaserJet Enterprise MFP 5602dn
    • HP LaserJet Enterprise 6500n
    • HP LaserJet Enterprise 5502
    • HP LaserJet Enterprise MFP 5602f
    • HP LaserJet Enterprise 6501dn
    • HP LaserJet Enterprise X50452dn
    • HP LaserJet Enterprise Flow MFP 5602zfw
    • HP LaserJet Enterprise 6501
    • HP LaserJet Enterprise X50452
    • HP LaserJet Enterprise MFP 5602
    • HP LaserJet Enterprise X60257dn
    • HP LaserJet Enterprise MFP X53052dn
    • HP LaserJet Enterprise Flow MFP X530
    • HP LaserJet Enterprise X60257
    • HP LaserJet Enterprise MFP X53052
    • HP LaserJet Enterprise X60357dn
    • HP LaserJet Enterprise X60357
    • HP LaserJet Enterprise MFP 6600dn
    • HP LaserJet Enterprise Flow MFP 6600zfw
    • HP LaserJet Enterprise MFP 6600
    • HP LaserJet Enterprise Flow MFP 6600zfsw
    • HP LaserJet Enterprise MFP X62757dn
    • HP LaserJet Enterprise Flow MFP X62757zs
    • HP LaserJet Enterprise MFP X62757
    • DEX D50452dn
    • DEX MFP D53052dn

  • Fix handling of readfp() and read_filke() for ConfigParser objects, avoiding confusing error messages (lp#2139771)

  • Fix compiler warnings on SLE15

  • Fix "Found No Section" error with python (lp#2095776)

  • Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax to manufacturer-PPDs/hplip/fax etc (boo#1257529)

  • Move more utilities from hplip-utils to hplip-base.

    • hplip-base now contains all utilities that are not totally useless and can run without the Qt GUI.

  • Update fix for support of new GPG key, as the key has now been uploaded to GPG keyservers (lp#2120738)

  • This fixes CVE-2025-43023 (bsc#1266031)

  • Drop dependency on cups-ppdc. It isn't necessary, as PPD generation on target system is done by cups-driverd.

  • The old and outdated 'hpijs' driver support is finally dropped (the 'hpcups' driver is the default driver since 2009) so that there is no need for foomatic-filters (boo#1250481)

  • Continue refactoring:

    • move GUI tools to "hplip-utils" subpackage
    • convert "hplip" into an empty metapackage that pulls in hplip-utils and all drivers / PPDs (except hpijs PPDs).

  • Refactor package structure:

    • hplip: full set of utilities. Pulls in almost all subpackages to deliver the…
Record
openSUSE-SU-2026:20858-1
Updated
2026-11-02
OSVSUSE-SU-2026:2222-1 No score

Security update for hplip

This update for hplip fixes the following issues

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)
  • URI parameter injection via unsanitized USB serial number. (bsc#1209401)

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).
  • Update to HPLIP 3.26.4
Record
SUSE-SU-2026:2222-1
Updated
2026-11-02
OSVSUSE-SU-2026:2228-1 No score

Security update for hplip

This update for hplip fixes the following issues

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • hplip: unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).
  • Update to HPLIP 3.26.4.
Record
SUSE-SU-2026:2228-1
Updated
2026-11-02
OSVSUSE-SU-2026:2229-1 No score

Security update for hplip

This update for hplip fixes the following issues

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)
  • URI parameter injection via unsanitized USB serial number. (bsc#1209401)

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).
  • Update to HPLIP 3.26.4
Record
SUSE-SU-2026:2229-1
Updated
2026-11-02
OSVSUSE-SU-2026:2380-1 No score

Security update for hplip

This update for hplip fixes the following issues

Update to HPLIP 3.26.4:

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).
  • URI parameter injection via unsanitized USB serial number (bsc#1209401).

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).

Changes:

  • Add support for the following new printers:
  • HP LaserJet Pro MFP 3106sdw
  • HP LaserJet Pro MFP 3105sdw
  • HP Envy 6500e series
  • HP Envy 6500 series
  • HP OfficeJet Pro 9730 Series
  • HP OfficeJet Pro 9730e Series
  • HP OfficeJet Pro 9720 Series
  • HP OfficeJet Pro 9720e Series
  • HP OfficeJet Pro 8130e All-in-One series
  • HP OfficeJet Pro 8130 All-in-One series
  • HP OfficeJet 8130e All-in-One series
  • HP OfficeJet 8130 All-in-One series
  • HP OfficeJet Pro 8120e All-in-One series
  • HP OfficeJet Pro 8120 All-in-One series
  • HP OfficeJet 8120e All-in-One series
  • HP OfficeJet 8120 All-in-One series
  • HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  • HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  • HP DeskJet 4300e All-in-One Printer series
  • HP DeskJet Ink Advantage 4300 All-in-One Printer series
  • HP DeskJet 4300 All-in-One Printer series
  • HP DeskJet 2900e All-in-One Printer series
  • HP DeskJet Ink Advantage 2900 All-in-One Printer series
  • HP DeskJet 2900 All-in-One Printer series
  • HP LaserJet Enterprise Flow MFP 8601z
  • HP LaserJet Enterprise 5501
  • HP LaserJet Enterprise MFP 5601dn
  • HP LaserJet Enterprise 6500dn
  • HP LaserJet Enterprise 5501n
  • HP LaserJet Enterprise MFP 5601
  • HP LaserJet Enterprise 6500
  • HP LaserJet Enterprise 5502dn
  • HP LaserJet Enterprise MFP 5602dn
  • HP LaserJet Enterprise 6500n
  • HP LaserJet Enterprise 5502
  • HP LaserJet Enterprise MFP 5602f
  • HP LaserJet Enterprise 6501dn
  • HP LaserJet Enterprise X50452dn
  • HP LaserJet Enterprise Flow MFP 5602zfw
  • HP LaserJet Enterprise 6501
  • HP LaserJet Enterprise X50452
  • HP LaserJet Enterprise MFP 5602
  • HP LaserJet Enterprise X60257dn
  • HP LaserJet Enterprise MFP X53052dn
  • HP LaserJet Enterprise Flow MFP X530
  • HP LaserJet Enterprise X60257
  • HP LaserJet Enterprise MFP X53052
  • HP LaserJet Enterprise X60357dn
  • HP LaserJet Enterprise X60357
  • HP LaserJet Enterprise MFP 6600dn
  • HP LaserJet Enterprise Flow MFP 6600zfw
  • HP LaserJet Enterprise MFP 6600
  • HP LaserJet Enterprise Flow MFP 6600zfsw
  • HP LaserJet Enterprise MFP X62757dn
  • HP LaserJet Enterprise Flow MFP X62757zs
  • HP LaserJet Enterprise MFP X62757
  • DEX D50452dn
  • DEX MFP D53052dn
  • HP LaserJet Pro MFP M126a plus
  • HP LaserJet Pro MFP M126nw plus
  • HP LaserJet Pro MFP M126snw plus
  • HP Envy Photo 7200 series
  • HP Envy Photo 7900 series
  • HP OfficeJet Pro 9110 Series
  • HP OfficeJet 9120 Series
  • HP OfficeJet Pro 9120 Series
  • HP OfficeJet Pro 9130 Series
  • HP LaserJet Enterprise Flow MFP 8601z+
  • HP LaserJet Enterprise MFP 8601dn
  • HP Color LaserJet Enterprise MFP 8801dn
  • HP Color LaserJet Enterprise Flow MFP 8801z
  • HP Color LaserJet Enterprise Flow MFP 8801z+
  • HP LaserJet Enterprise 8501dn
  • HP LaserJet Enterprise 8501x
  • HP LaserJet Enterprise 8501x+
  • DEX MFP D826
  • DEX MFP D82640
  • DEX MFP D82650
  • DEX MFP D82660
  • DEX D50145
  • DEX MFP D42540
  • DEX MFP D52645
  • DEX Color D55745
  • DEX Color MFP D57945
  • DEX Color MFP D677
  • DEX Color MFP D67755
  • DEX Color MFP D67765
  • DEX Color MFP D877
  • DEX Color MFP D87740
  • DEX Color MFP…
Record
SUSE-SU-2026:2380-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
hplip
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.6-3.el8_10
3.26.6-3.el8_10
hplip-common
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.6-3.el8_10
3.26.6-3.el8_10
hplip-gui
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.6-3.el8_10
3.26.6-3.el8_10
hplip-libs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.6-3.el8_10
3.26.6-3.el8_10
libsane-hpaio
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.6-3.el8_10
3.26.6-3.el8_10
hplip
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.26.6-1.el9_8.3
3.26.6-1.el9_8.3
hplip-common
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.26.6-1.el9_8.3
3.26.6-1.el9_8.3
hplip-libs
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.26.6-1.el9_8.3
3.26.6-1.el9_8.3
libsane-hpaio
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.26.6-1.el9_8.3
3.26.6-1.el9_8.3
hplip
AlmaLinux:10
From an advisory covering 11 CVEs
 before 3.26.6-1.el10_2.3
3.26.6-1.el10_2.3
Show 32 moreShow less
Affected packages
PackageAffectedFixed
hplip-common
AlmaLinux:10
From an advisory covering 11 CVEs
 before 3.26.6-1.el10_2.3
3.26.6-1.el10_2.3
hplip-libs
AlmaLinux:10
From an advisory covering 11 CVEs
 before 3.26.6-1.el10_2.3
3.26.6-1.el10_2.3
libsane-hpaio
AlmaLinux:10
From an advisory covering 11 CVEs
 before 3.26.6-1.el10_2.3
3.26.6-1.el10_2.3
hplip
openEuler:24.03-LTS-SP3
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2403sp3
3.26.4-1.oe2403sp3
hplip
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2003sp4
3.26.4-1.oe2003sp4
hplip
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2203sp4
3.26.4-1.oe2203sp4
hplip
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2403sp1
3.26.4-1.oe2403sp1
hplip
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2403sp1
3.26.4-1.oe2403sp1
hplip
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el9_8.3
0:3.26.6-1.el9_8.3
hplip-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el9_8.3
0:3.26.6-1.el9_8.3
libsane-hpaio
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el9_8.3
0:3.26.6-1.el9_8.3
hplip
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el10_2.3
0:3.26.6-1.el10_2.3
hplip-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el10_2.3
0:3.26.6-1.el10_2.3
libsane-hpaio
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el10_2.3
0:3.26.6-1.el10_2.3
hplip
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.26.6-3.el8_10
0:3.26.6-3.el8_10
hplip
Rocky Linux:9
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el9_8.3
0:3.26.6-1.el9_8.3
hplip
Rocky Linux:10
From an advisory covering 11 CVEs
 before 0:3.26.6-1.el10_2.3
0:3.26.6-1.el10_2.3
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.15.7-0ubuntu43.15.7-0ubuntu53.15.11-0ubuntu13.15.11+repack0-13.15.11+repack0-1ubuntu1
Show 4 moreShow less
3.16.2+repack0-13.16.2+repack0-1ubuntu13.16.2+repack0-33.16.3+repack0-1
 None known
hplip
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.17.7+repack0-33.17.10+repack0-13.17.10+repack0-23.17.10+repack0-33.17.10+repack0-43.17.10+repack0-5
 None known
hplip
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.19.6+dfsg0-1ubuntu13.19.8+dfsg0-73.19.11+dfsg0-13.19.12+dfsg0-13.19.12+dfsg0-2
Show 6 moreShow less
3.19.12+dfsg0-33.19.12+dfsg0-3ubuntu13.19.12+dfsg0-4ubuntu13.20.3+dfsg0-13.20.3+dfsg0-23.20.3+dfsg0-2ubuntu0.1
 None known
hplip
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.21.6+dfsg0-0ubuntu13.21.8+dfsg0-23.21.12+dfsg0-13.21.12+dfsg0-1ubuntu0.1
 None known
hplip
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.22.10+dfsg0-2ubuntu13.22.10+dfsg0-2ubuntu23.23.12+dfsg0-0ubuntu43.23.12+dfsg0-0ubuntu53.23.12+dfsg0-0ubuntu5.1
 None known
hplip
Ubuntu:25.10
 All versions, plus listed versions
3.24.4+dfsg0-0ubuntu53.24.4+dfsg0-0ubuntu5.2
 None known
hplip
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 3.26.4-1.1
3.26.4-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-43023 is a medium vulnerability (CVSS 5.9) in Hp Linux Imaging And Printing, published July 28, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.

References

Show 87 moreShow less
This page doesn't list everything

Left out here: the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open