{"id":"CVE-2025-43023","aliases":["ALSA-2026:82295","ALSA-2026:82882","ALSA-2026:82883","EUVD-2025-22936","GHSA-f9vh-cwpr-5m8f","OESA-2026-2483","RHSA-2026:82882","RHSA-2026:82883","RLSA-2026:82295","RLSA-2026:82882","RLSA-2026:82883","SUSE-SU-2026:2222-1","SUSE-SU-2026:2228-1","SUSE-SU-2026:2229-1","SUSE-SU-2026:2380-1","UBUNTU-CVE-2025-43023","openSUSE-SU-2026:10860-1","openSUSE-SU-2026:20858-1"],"status":"published","title":"HP Linux Imaging and Printing Software - Use of DSA Key","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).","severity":{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00286,"percentile":0.21343,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-347"],"published":"2025-07-28T17:46:46Z","modified":"2026-11-11T09:39:13Z","affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.15.7-0ubuntu4","3.15.7-0ubuntu5","3.15.11-0ubuntu1","3.15.11+repack0-1","3.15.11+repack0-1ubuntu1","3.16.2+repack0-1","3.16.2+repack0-1ubuntu1","3.16.2+repack0-3","3.16.3+repack0-1","3.16.3+repack0-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.17.7+repack0-3","3.17.10+repack0-1","3.17.10+repack0-2","3.17.10+repack0-3","3.17.10+repack0-4","3.17.10+repack0-5","3.17.10+repack0-5ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.19.6+dfsg0-1ubuntu1","3.19.8+dfsg0-7","3.19.11+dfsg0-1","3.19.12+dfsg0-1","3.19.12+dfsg0-2","3.19.12+dfsg0-3","3.19.12+dfsg0-3ubuntu1","3.19.12+dfsg0-4ubuntu1","3.20.3+dfsg0-1","3.20.3+dfsg0-2","3.20.3+dfsg0-2ubuntu0.1","3.20.3+dfsg0-2ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.21.6+dfsg0-0ubuntu1","3.21.8+dfsg0-2","3.21.12+dfsg0-1","3.21.12+dfsg0-1ubuntu0.1","3.21.12+dfsg0-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-2ubuntu1","3.22.10+dfsg0-2ubuntu2","3.23.12+dfsg0-0ubuntu4","3.23.12+dfsg0-0ubuntu5","3.23.12+dfsg0-0ubuntu5.1","3.23.12+dfsg0-0ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.24.4+dfsg0-0ubuntu5","3.24.4+dfsg0-0ubuntu5.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.1"}]}],"bundled":3}],"products":[{"vendor":"hp","product":"linux_imaging_and_printing"},{"vendor":"hp, inc.","product":"hp linux imaging and printing software"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033","tags":["Vendor Advisory","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2025/08/22/4","tags":["Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43023","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f9vh-cwpr-5m8f"},{"url":"https://access.redhat.com/errata/RHSA-2026:82295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-6923","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43023","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91097","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91098","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91099","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91100","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91101","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91102","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91103","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91104","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91105","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91106","tags":["report"]},{"url":"https://bugzilla.redhat.com/2384011","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535600","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535603","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535607","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535613","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535614","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535615","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535617","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535618","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535621","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535622","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-82295.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82882","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-82882.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82883","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-82883.html","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8632","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2384011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535622","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-257310","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82882.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43023","tags":["advisory","report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/08/22/4","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91097","tags":["advisory"]},{"url":"https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91098","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91099","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91100","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91101","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91102","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91103","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91104","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91105","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91106","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91106","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82883.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82295","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333390","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82882","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82883","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262222-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209401","tags":["report"]},{"url":"https://bugzilla.suse.com/1234745","tags":["report"]},{"url":"https://bugzilla.suse.com/1245358","tags":["report"]},{"url":"https://bugzilla.suse.com/1250481","tags":["report"]},{"url":"https://bugzilla.suse.com/1257529","tags":["report"]},{"url":"https://bugzilla.suse.com/1266023","tags":["report"]},{"url":"https://bugzilla.suse.com/1266024","tags":["report"]},{"url":"https://bugzilla.suse.com/1266031","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8632","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262228-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262229-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262380-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-43023","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-43023","title":"HP Linux Imaging and Printing Software - Use of DSA Key","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).","status":"published","published":"2025-07-28T17:46:46.398Z","modified":"2025-11-04T21:10:27.277Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:32:26.64278Z"}],"euvd":[{"id":"EUVD-2025-22936","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).","status":"published","published":"2025-07-28T17:46:46Z","modified":"2025-11-04T21:10:27Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:49:21.143143Z"}],"ghsa":[{"id":"GHSA-f9vh-cwpr-5m8f","title":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing...","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).","status":"published","published":"2025-07-28T18:31:29Z","modified":"2026-01-16T15:31:23Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T15:05:38.741943Z"}],"nvd":[{"id":"CVE-2025-43023","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).","status":"published","published":"2025-07-28T18:15:25.03Z","modified":"2026-06-17T09:23:25.477Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:11:21.132141Z"}],"osv":[{"id":"OESA-2026-2483","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).(CVE-2025-43023)\n\nA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.(CVE-2026-8631)\n\nA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.(CVE-2026-8632)","status":"published","published":"2026-05-29T11:11:26Z","modified":"2026-08-18T01:20:00.846615455Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:82882","title":"Red Hat Security Advisory: hplip security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:28:46Z","modified":"2026-10-15T10:30:22.584787234Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:82883","title":"Red Hat Security Advisory: hplip security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:28:46Z","modified":"2026-10-15T10:32:55.450867852Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:82295","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* hplip: potential memory buffer overflow (CVE-2020-6923)\n\n* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n\n* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n\n* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n\n* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n\n* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n\n* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n\n* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:01:20.904461Z","modified":"2026-10-31T12:30:02.429395892Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:82882","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n\n* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n\n* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n\n* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n\n* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n\n* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n\n* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\nBug Fix(es) and Enhancement(s):\n\n* [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:Rocky Linux-257310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-16T12:05:26.574296Z","modified":"2026-10-16T12:45:02.664238401Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:82883","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n\n* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n\n* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n\n* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n\n* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n\n* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n\n* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\nBug Fix(es) and Enhancement(s):\n\n* [IMAGE-MODE] missing /var/lib/hp on image-mode [rhel-10] (JIRA:Rocky Linux-266547)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-15T12:20:13.898768Z","modified":"2026-10-15T12:45:59.152381388Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2025-43023","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).","status":"published","published":"2025-07-28T18:15:00Z","modified":"2026-11-11T09:39:13.840166366Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-11T10:01:07.920765Z"},{"id":"ALSA-2026:82295","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: potential memory buffer overflow (CVE-2020-6923)\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-13T00:00:00Z","modified":"2026-10-29T11:02:24.856874212Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:82882","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-14T00:00:00Z","modified":"2026-10-29T11:32:38.272974941Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:82883","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [IMAGE-MODE] missing /var/lib/hp on image-mode [almalinux-10] (JIRA:AlmaLinux-266547)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-14T00:00:00Z","modified":"2026-10-29T11:31:00.4441848Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"openSUSE-SU-2026:10860-1","title":"hplip-3.26.4-1.1 on GA media","description":"These are all security issues fixed in the hplip-3.26.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-05-27T08:15:29.536339516Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20858-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues:\n\nChanges in hplip:\n\n- Update to HPLIP 3.26.4\n  * CVE-2026-8631: Fixed privileges escalation and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023)\n  * CVE-2026-8632: Fixed privileges escalation and/or arbitrary code execution via operating system command injection (bsc#1266024)\n\n- Add support for the following new printers:\n\n  * HP LaserJet Pro MFP 3106sdw\n  * HP LaserJet Pro MFP 3105sdw\n  * HP Envy 6500e series\n  * HP Envy 6500 series\n  * HP OfficeJet Pro 9730 Series\n  * HP OfficeJet Pro 9730e Series\n  * HP OfficeJet Pro 9720 Series\n  * HP OfficeJet Pro 9720e Series\n  * HP OfficeJet Pro 8130e All-in-One series\n  * HP OfficeJet Pro 8130 All-in-One series\n  * HP OfficeJet 8130e All-in-One series\n  * HP OfficeJet 8130 All-in-One series\n  * HP OfficeJet Pro 8120e All-in-One series\n  * HP OfficeJet Pro 8120 All-in-One series\n  * HP OfficeJet 8120e All-in-One series\n  * HP OfficeJet 8120 All-in-One series\n  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series\n  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series\n  * HP DeskJet 4300e All-in-One Printer series\n  * HP DeskJet Ink Advantage 4300 All-in-One Printer series\n  * HP DeskJet 4300 All-in-One Printer series\n  * HP DeskJet 2900e All-in-One Printer series\n  * HP DeskJet Ink Advantage 2900 All-in-One Printer series\n  * HP DeskJet 2900 All-in-One Printer series\n\n- Update to HPLIP 3.25.8\n\n- Added support for the following new Printers:\n  * HP LaserJet Enterprise Flow MFP 8601z\n  * HP LaserJet Enterprise 5501\n  * HP LaserJet Enterprise MFP 5601dn\n  * HP LaserJet Enterprise 6500dn\n  * HP LaserJet Enterprise 5501n\n  * HP LaserJet Enterprise MFP 5601\n  * HP LaserJet Enterprise 6500\n  * HP LaserJet Enterprise 5502dn\n  * HP LaserJet Enterprise MFP 5602dn\n  * HP LaserJet Enterprise 6500n\n  * HP LaserJet Enterprise 5502\n  * HP LaserJet Enterprise MFP 5602f\n  * HP LaserJet Enterprise 6501dn\n  * HP LaserJet Enterprise X50452dn\n  * HP LaserJet Enterprise Flow MFP 5602zfw\n  * HP LaserJet Enterprise 6501\n  * HP LaserJet Enterprise X50452\n  * HP LaserJet Enterprise MFP 5602\n  * HP LaserJet Enterprise X60257dn\n  * HP LaserJet Enterprise MFP X53052dn\n  * HP LaserJet Enterprise Flow MFP X530\n  * HP LaserJet Enterprise X60257\n  * HP LaserJet Enterprise MFP X53052\n  * HP LaserJet Enterprise X60357dn\n  * HP LaserJet Enterprise X60357\n  * HP LaserJet Enterprise MFP 6600dn\n  * HP LaserJet Enterprise Flow MFP 6600zfw\n  * HP LaserJet Enterprise MFP 6600\n  * HP LaserJet Enterprise Flow MFP 6600zfsw\n  * HP LaserJet Enterprise MFP X62757dn\n  * HP LaserJet Enterprise Flow MFP X62757zs\n  * HP LaserJet Enterprise MFP X62757\n  * DEX D50452dn\n  * DEX MFP D53052dn\n\n- Fix handling of readfp() and read_filke() for ConfigParser objects,\n  avoiding confusing error messages (lp#2139771)\n- Fix compiler warnings on SLE15\n- Fix \"Found No Section\" error with python (lp#2095776)\n\n- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax\n  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)\n\n- Move more utilities from hplip-utils to hplip-base.\n  * hplip-base now contains all utilities that are not totally useless\n    and can run without the Qt GUI.\n\n- Update fix for support of new GPG key, as the key has now been\n  uploaded to GPG keyservers (lp#2120738)\n- This fixes CVE-2025-43023 (bsc#1266031)\n\n- Drop dependency on cups-ppdc. It isn't necessary, as PPD\n  generation on target system is done by cups-driverd.\n\n- The old and outdated 'hpijs' driver support is finally dropped\n  (the 'hpcups' driver is the default driver since 2009)\n  so that there is no need for foomatic-filters (boo#1250481)\n\n- Continue refactoring:\n  * move GUI tools to \"hplip-utils\" subpackage\n  * convert \"hplip\" into an empty metapackage that pulls in hplip-utils\n    and all drivers / PPDs (except hpijs PPDs).\n\n- Refactor package structure:\n  * hplip: full set of utilities. Pulls in almost all subpackages\n    to deliver the \"traditional\" hplip experience\n  * hplip-base: small set of basic utilities that can be run\n    without GUI. Includes hp-probe and hp-plugin\n  * hplip-cups: minimal package for printing, without PPDs or\n    setup helpers\n  * hplip-sane: scanning support (unchanged)\n  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on\n    the fly (requires ppdc). The functionality of this package is\n    similar to the old (misnamed) \"hplip-hpijs\" package.\n  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated\n    hpijs / foomatic_rip filter. Note that this functionality was not part of\n    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs\n    since hplip 3.17.11.\n  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD\n    files for different printer types.\n    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.\n  * libhplip0: shared library package, used by hplip-cups and\n    hplip-sane\n  * hplip-common: configuration files and directories used by\n    all hplip packages.\n\n- Other spec file changes:\n  * Skip deprecated suse_update_desktop_file by default on TW\n  * Don't mess with sane configuration in udev rules\n  * Only the hpijs packages depend on foomatic-rip, which is only\n    provided by cups-filters-1.x. The other packages can be used\n    with cups-filters2.\n  * Remove Obsoletes: for ancient predecessor packages\n  * Remove outdated comments from spec file\n  * Shorten package descriptions\n  * Fix a couple of rpmlint issues\n\n- Fix printer probing using avahi (lp#2120947)\n","status":"published","published":"2026-06-01T16:17:43Z","modified":"2026-06-03T08:30:27.379678807Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:2222-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)\n- URI parameter injection via unsanitized USB serial number. (bsc#1209401)\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n- Update to HPLIP 3.26.4\n","status":"published","published":"2026-06-02T08:40:54Z","modified":"2026-06-03T08:30:23.364161275Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2228-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- hplip: unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n- Update to HPLIP 3.26.4.\n","status":"published","published":"2026-06-03T08:06:57Z","modified":"2026-06-05T18:24:09.117495994Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2229-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)\n- URI parameter injection via unsanitized USB serial number. (bsc#1209401)\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n- Update to HPLIP 3.26.4\n","status":"published","published":"2026-06-03T08:07:17Z","modified":"2026-06-05T18:24:09.120388124Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2380-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nUpdate to HPLIP 3.26.4:\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).\n- URI parameter injection via unsanitized USB serial number (bsc#1209401).\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n\nChanges:\n\n- Add support for the following new printers:\n * HP LaserJet Pro MFP 3106sdw\n * HP LaserJet Pro MFP 3105sdw\n * HP Envy 6500e series\n * HP Envy 6500 series\n * HP OfficeJet Pro 9730 Series\n * HP OfficeJet Pro 9730e Series\n * HP OfficeJet Pro 9720 Series\n * HP OfficeJet Pro 9720e Series\n * HP OfficeJet Pro 8130e All-in-One series\n * HP OfficeJet Pro 8130 All-in-One series\n * HP OfficeJet 8130e All-in-One series\n * HP OfficeJet 8130 All-in-One series\n * HP OfficeJet Pro 8120e All-in-One series\n * HP OfficeJet Pro 8120 All-in-One series\n * HP OfficeJet 8120e All-in-One series\n * HP OfficeJet 8120 All-in-One series\n * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series\n * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series\n * HP DeskJet 4300e All-in-One Printer series\n * HP DeskJet Ink Advantage 4300 All-in-One Printer series\n * HP DeskJet 4300 All-in-One Printer series\n * HP DeskJet 2900e All-in-One Printer series\n * HP DeskJet Ink Advantage 2900 All-in-One Printer series\n * HP DeskJet 2900 All-in-One Printer series\n * HP LaserJet Enterprise Flow MFP 8601z\n * HP LaserJet Enterprise 5501\n * HP LaserJet Enterprise MFP 5601dn\n * HP LaserJet Enterprise 6500dn\n * HP LaserJet Enterprise 5501n\n * HP LaserJet Enterprise MFP 5601\n * HP LaserJet Enterprise 6500\n * HP LaserJet Enterprise 5502dn\n * HP LaserJet Enterprise MFP 5602dn\n * HP LaserJet Enterprise 6500n\n * HP LaserJet Enterprise 5502\n * HP LaserJet Enterprise MFP 5602f\n * HP LaserJet Enterprise 6501dn\n * HP LaserJet Enterprise X50452dn\n * HP LaserJet Enterprise Flow MFP 5602zfw\n * HP LaserJet Enterprise 6501\n * HP LaserJet Enterprise X50452\n * HP LaserJet Enterprise MFP 5602\n * HP LaserJet Enterprise X60257dn\n * HP LaserJet Enterprise MFP X53052dn\n * HP LaserJet Enterprise Flow MFP X530\n * HP LaserJet Enterprise X60257\n * HP LaserJet Enterprise MFP X53052\n * HP LaserJet Enterprise X60357dn\n * HP LaserJet Enterprise X60357\n * HP LaserJet Enterprise MFP 6600dn\n * HP LaserJet Enterprise Flow MFP 6600zfw\n * HP LaserJet Enterprise MFP 6600\n * HP LaserJet Enterprise Flow MFP 6600zfsw\n * HP LaserJet Enterprise MFP X62757dn\n * HP LaserJet Enterprise Flow MFP X62757zs\n * HP LaserJet Enterprise MFP X62757\n * DEX D50452dn\n * DEX MFP D53052dn\n * HP LaserJet Pro MFP M126a plus\n * HP LaserJet Pro MFP M126nw plus\n * HP LaserJet Pro MFP M126snw plus\n * HP Envy Photo 7200 series\n * HP Envy Photo 7900 series\n * HP OfficeJet Pro 9110 Series\n * HP OfficeJet 9120 Series\n * HP OfficeJet Pro 9120 Series\n * HP OfficeJet Pro 9130 Series\n * HP LaserJet Enterprise Flow MFP 8601z+\n * HP LaserJet Enterprise MFP 8601dn\n * HP Color LaserJet Enterprise MFP 8801dn\n * HP Color LaserJet Enterprise Flow MFP 8801z\n * HP Color LaserJet Enterprise Flow MFP 8801z+\n * HP LaserJet Enterprise 8501dn\n * HP LaserJet Enterprise 8501x\n * HP LaserJet Enterprise 8501x+\n * DEX MFP D826\n * DEX MFP D82640\n * DEX MFP D82650\n * DEX MFP D82660\n * DEX D50145\n * DEX MFP D42540\n * DEX MFP D52645\n * DEX Color D55745\n * DEX Color MFP D57945\n * DEX Color MFP D677\n * DEX Color MFP D67755\n * DEX Color MFP D67765\n * DEX Color MFP D877\n * DEX Color MFP D87740\n * DEX Color MFP D87750\n * DEX Color MFP D87760\n * DEX Color MFP D87770\n * DEX Color MFP D786\n * DEX Colour MFP D78625\n * DEX Color MFP D78630\n * DEX Color MFP D78635\n * DEX MFP D731\n * DEX MFP D73130\n * DEX MFP D73135\n * DEX MFP D73140\n","status":"published","published":"2026-06-11T16:15:29Z","modified":"2026-06-13T08:00:05.449189076Z","updated_at":"2026-11-02T15:54:03.991985Z"}]}}