{"id":"CVE-2026-8632","aliases":["ALSA-2026:26297","ALSA-2026:26335","CLSA-2026-1782213578","CLSA-2026-1782483693","DEBIAN-CVE-2026-8632","EUVD-2026-31194","GHSA-w45w-c9pr-p65f","MGASA-2026-0363","OESA-2026-2483","RHSA-2026:26228","RHSA-2026:26297","RHSA-2026:26335","RHSA-2026:48171","RHSA-2026:48586","RHSA-2026:48603","RHSA-2026:48606","RHSA-2026:48959","RHSA-2026:48960","RHSA-2026:48961","RLSA-2026:26228","RLSA-2026:26297","RLSA-2026:26335","SUSE-SU-2026:2222-1","SUSE-SU-2026:2228-1","SUSE-SU-2026:2229-1","SUSE-SU-2026:2380-1","UBUNTU-CVE-2026-8632","USN-8483-1","openSUSE-SU-2026:10860-1","openSUSE-SU-2026:20858-1"],"status":"published","title":"HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","severity":{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0411,"percentile":0.90846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-77","CWE-78"],"published":"2026-05-20T20:14:36Z","modified":"2026-11-02T17:01:58Z","fixes":[{"ecosystem":"Debian:12","package":"hplip","fixed_in":["3.22.10+dfsg0-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"hplip","fixed_in":["3.22.10+dfsg0-8.1+deb13u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"hplip","fixed_in":["3.21.12+dfsg0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"hplip","fixed_in":["3.23.12+dfsg0-0ubuntu5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"hplip","fixed_in":["3.24.4+dfsg0-0ubuntu5.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"hplip","fixed_in":["3.24.4+dfsg0-0ubuntu8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-13.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-13.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-13.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-13.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-13.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.10+dfsg0-2+deb12u1"}]}],"versions":["3.22.10+dfsg0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.10+dfsg0-8.1+deb13u1"}]}],"versions":["3.22.10+dfsg0-8.1"]},{"source":"osv","ecosystem":"Mageia:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.10-4.2.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.23.12-10.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-13.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.23.12-8.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-9.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-9.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-9.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-9.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-9.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-9.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.23.12-10.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-13.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-150400.3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.15.7-0ubuntu4","3.15.7-0ubuntu5","3.15.11-0ubuntu1","3.15.11+repack0-1","3.15.11+repack0-1ubuntu1","3.16.2+repack0-1","3.16.2+repack0-1ubuntu1","3.16.2+repack0-3","3.16.3+repack0-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.17.7+repack0-3","3.17.10+repack0-1","3.17.10+repack0-2","3.17.10+repack0-3","3.17.10+repack0-4","3.17.10+repack0-5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.19.6+dfsg0-1ubuntu1","3.19.8+dfsg0-7","3.19.11+dfsg0-1","3.19.12+dfsg0-1","3.19.12+dfsg0-2","3.19.12+dfsg0-3","3.19.12+dfsg0-3ubuntu1","3.19.12+dfsg0-4ubuntu1","3.20.3+dfsg0-1","3.20.3+dfsg0-2","3.20.3+dfsg0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12+dfsg0-1ubuntu0.1"}]}],"versions":["3.21.6+dfsg0-0ubuntu1","3.21.8+dfsg0-2","3.21.12+dfsg0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12+dfsg0-0ubuntu5.1"}]}],"versions":["3.22.10+dfsg0-2ubuntu1","3.22.10+dfsg0-2ubuntu2","3.23.12+dfsg0-0ubuntu4","3.23.12+dfsg0-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.4+dfsg0-0ubuntu5.2"}]}],"versions":["3.24.4+dfsg0-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.4+dfsg0-0ubuntu8.1"}]}],"versions":["3.24.4+dfsg0-0ubuntu5","3.24.4+dfsg0-0ubuntu7","3.24.4+dfsg0-0ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12+dfsg0-1ubuntu0.1"}]}],"versions":["3.21.6+dfsg0-0ubuntu1","3.21.8+dfsg0-2","3.21.12+dfsg0-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12+dfsg0-0ubuntu5.1"}]}],"versions":["3.22.10+dfsg0-2ubuntu1","3.22.10+dfsg0-2ubuntu2","3.23.12+dfsg0-0ubuntu4","3.23.12+dfsg0-0ubuntu5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.4+dfsg0-0ubuntu5.2"}]}],"versions":["3.24.4+dfsg0-0ubuntu5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.4+dfsg0-0ubuntu8.1"}]}],"versions":["3.24.4+dfsg0-0ubuntu5","3.24.4+dfsg0-0ubuntu7","3.24.4+dfsg0-0ubuntu8"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.4-1.1"}]}],"bundled":3}],"products":[{"vendor":"hp","product":"linux_imaging_and_printing"},{"vendor":"hp inc","product":"hp linux imaging and printing software"},{"vendor":"hp, inc.","product":"hp linux imaging and printing software"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118","tags":["Vendor Advisory","web","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-8632","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480297","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8632.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48606","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26228","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26335","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48960","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48961","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48959","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48603","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48586","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48171","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26297","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8632","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w45w-c9pr-p65f"},{"url":"https://access.redhat.com/security/cve/CVE-2026-8631","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480297","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480300","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-26297.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-26335.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782213578.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8631","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782483693.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-8632","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0363.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35583","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/23/1","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8483-1","tags":["advisory"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00313.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43023","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480300","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26228.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8631","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8632","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26297.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26335.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48171.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48586.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48603.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48606.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48959.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48960.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48961.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26228","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26297","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26335","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262222-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209401","tags":["report"]},{"url":"https://bugzilla.suse.com/1234745","tags":["report"]},{"url":"https://bugzilla.suse.com/1245358","tags":["report"]},{"url":"https://bugzilla.suse.com/1250481","tags":["report"]},{"url":"https://bugzilla.suse.com/1257529","tags":["report"]},{"url":"https://bugzilla.suse.com/1266023","tags":["report"]},{"url":"https://bugzilla.suse.com/1266024","tags":["report"]},{"url":"https://bugzilla.suse.com/1266031","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8632","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262228-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262229-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262380-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-8632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-8631","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-8632","title":"HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","status":"published","published":"2026-05-20T20:14:36.355Z","modified":"2026-08-04T12:07:11.153Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-77","CWE-78"],"updated_at":"2026-11-02T13:48:02.226896Z"}],"euvd":[{"id":"EUVD-2026-31194","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","status":"published","published":"2026-05-20T20:14:36Z","modified":"2026-08-04T12:07:11Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:02:23.332335Z"}],"ghsa":[{"id":"GHSA-w45w-c9pr-p65f","title":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing...","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","status":"published","published":"2026-05-20T21:31:33Z","modified":"2026-08-04T15:33:05Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77","CWE-78"],"updated_at":"2026-11-02T15:10:05.423688Z"}],"nvd":[{"id":"CVE-2026-8632","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","status":"published","published":"2026-05-20T21:16:18.233Z","modified":"2026-08-04T13:18:58.8Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-77","CWE-78"],"updated_at":"2026-11-02T14:12:19.752984Z"}],"osv":[{"id":"DEBIAN-CVE-2026-8632","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","status":"published","published":"2026-05-20T21:16:18.233Z","modified":"2026-11-02T17:01:58.230260936Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:22:50.83842Z"},{"id":"OESA-2026-2483","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).(CVE-2025-43023)\n\nA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.(CVE-2026-8631)\n\nA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.(CVE-2026-8632)","status":"published","published":"2026-05-29T11:11:26Z","modified":"2026-08-18T01:20:00.846615455Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:26228","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-06-17T10:08:37Z","modified":"2026-10-17T10:11:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26297","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-06-17T10:08:42Z","modified":"2026-10-17T10:11:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26335","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-06-17T10:08:45Z","modified":"2026-10-17T10:11:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:48171","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-07-30T10:18:03Z","modified":"2026-10-17T10:14:43Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48586","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-07-31T10:15:13Z","modified":"2026-10-17T10:14:48Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48603","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-07-30T10:18:05Z","modified":"2026-10-17T10:14:48Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48606","title":"Red Hat Security Advisory: hplip security, bug fix, and enhancement update","status":"published","published":"2026-07-30T10:18:05Z","modified":"2026-10-17T10:14:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48959","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-08-04T10:26:31Z","modified":"2026-10-17T10:14:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48960","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-08-04T10:26:32Z","modified":"2026-10-17T10:14:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48961","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-08-04T10:26:32Z","modified":"2026-10-17T10:14:53Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RLSA-2026:26228","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)\n\n* HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T06:04:41.448408Z","modified":"2026-06-19T06:30:08.96925664Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26297","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)\n\n* HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T12:03:08.073041Z","modified":"2026-06-17T12:30:05.730601736Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26335","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)\n\n* HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T06:00:26.379988Z","modified":"2026-06-17T06:30:05.792587915Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-8632","description":"A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.","status":"published","published":"2026-05-20T21:16:00Z","modified":"2026-06-30T18:18:18.365735479Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:24.828975Z"},{"id":"ALSA-2026:26297","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)\n  * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-16T00:00:00Z","modified":"2026-10-29T11:32:34.408346254Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26335","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)\n  * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-16T00:00:00Z","modified":"2026-10-29T11:02:24.022895126Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"CLSA-2026-1782213578","title":"hplip: Fix of 2 CVEs","description":"- CVE-2026-8631: fix integer overflow in the hpcups processing path that\n  could lead to privilege escalation / arbitrary code execution via crafted\n  print data (backport of upstream HPLIP 3.26.4)\n- CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing\n  the ps/grep shell pipeline with a safe /proc-based scan (backport of\n  upstream HPLIP 3.26.4)","status":"published","published":"2026-06-23T11:19:54Z","modified":"2026-10-26T09:31:09.734393447Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782483693","title":"hplip: Fix of 2 CVEs","description":"- CVE-2026-8631: fix integer overflow in the hpcups processing path that\n  could lead to privilege escalation / arbitrary code execution via crafted\n  print data (backport of upstream HPLIP 3.26.4)\n- CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing\n  the ps/grep shell pipeline with a safe /proc-based scan (backport of\n  upstream HPLIP 3.26.4)","status":"published","published":"2026-06-26T14:21:50Z","modified":"2026-10-26T09:30:23.036753601Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"MGASA-2026-0363","title":"Updated hplip package fixes security vulnerabilities","description":"Potential Escalation of Privilege and Arbitrary Code Execution.\n(CVE-2026-8631, CVE-2026-8632)\n","status":"published","published":"2026-09-01T07:04:06Z","modified":"2026-09-01T07:15:06.530422898Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10860-1","title":"hplip-3.26.4-1.1 on GA media","description":"These are all security issues fixed in the hplip-3.26.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-05-27T08:15:29.536339516Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20858-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues:\n\nChanges in hplip:\n\n- Update to HPLIP 3.26.4\n  * CVE-2026-8631: Fixed privileges escalation and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023)\n  * CVE-2026-8632: Fixed privileges escalation and/or arbitrary code execution via operating system command injection (bsc#1266024)\n\n- Add support for the following new printers:\n\n  * HP LaserJet Pro MFP 3106sdw\n  * HP LaserJet Pro MFP 3105sdw\n  * HP Envy 6500e series\n  * HP Envy 6500 series\n  * HP OfficeJet Pro 9730 Series\n  * HP OfficeJet Pro 9730e Series\n  * HP OfficeJet Pro 9720 Series\n  * HP OfficeJet Pro 9720e Series\n  * HP OfficeJet Pro 8130e All-in-One series\n  * HP OfficeJet Pro 8130 All-in-One series\n  * HP OfficeJet 8130e All-in-One series\n  * HP OfficeJet 8130 All-in-One series\n  * HP OfficeJet Pro 8120e All-in-One series\n  * HP OfficeJet Pro 8120 All-in-One series\n  * HP OfficeJet 8120e All-in-One series\n  * HP OfficeJet 8120 All-in-One series\n  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series\n  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series\n  * HP DeskJet 4300e All-in-One Printer series\n  * HP DeskJet Ink Advantage 4300 All-in-One Printer series\n  * HP DeskJet 4300 All-in-One Printer series\n  * HP DeskJet 2900e All-in-One Printer series\n  * HP DeskJet Ink Advantage 2900 All-in-One Printer series\n  * HP DeskJet 2900 All-in-One Printer series\n\n- Update to HPLIP 3.25.8\n\n- Added support for the following new Printers:\n  * HP LaserJet Enterprise Flow MFP 8601z\n  * HP LaserJet Enterprise 5501\n  * HP LaserJet Enterprise MFP 5601dn\n  * HP LaserJet Enterprise 6500dn\n  * HP LaserJet Enterprise 5501n\n  * HP LaserJet Enterprise MFP 5601\n  * HP LaserJet Enterprise 6500\n  * HP LaserJet Enterprise 5502dn\n  * HP LaserJet Enterprise MFP 5602dn\n  * HP LaserJet Enterprise 6500n\n  * HP LaserJet Enterprise 5502\n  * HP LaserJet Enterprise MFP 5602f\n  * HP LaserJet Enterprise 6501dn\n  * HP LaserJet Enterprise X50452dn\n  * HP LaserJet Enterprise Flow MFP 5602zfw\n  * HP LaserJet Enterprise 6501\n  * HP LaserJet Enterprise X50452\n  * HP LaserJet Enterprise MFP 5602\n  * HP LaserJet Enterprise X60257dn\n  * HP LaserJet Enterprise MFP X53052dn\n  * HP LaserJet Enterprise Flow MFP X530\n  * HP LaserJet Enterprise X60257\n  * HP LaserJet Enterprise MFP X53052\n  * HP LaserJet Enterprise X60357dn\n  * HP LaserJet Enterprise X60357\n  * HP LaserJet Enterprise MFP 6600dn\n  * HP LaserJet Enterprise Flow MFP 6600zfw\n  * HP LaserJet Enterprise MFP 6600\n  * HP LaserJet Enterprise Flow MFP 6600zfsw\n  * HP LaserJet Enterprise MFP X62757dn\n  * HP LaserJet Enterprise Flow MFP X62757zs\n  * HP LaserJet Enterprise MFP X62757\n  * DEX D50452dn\n  * DEX MFP D53052dn\n\n- Fix handling of readfp() and read_filke() for ConfigParser objects,\n  avoiding confusing error messages (lp#2139771)\n- Fix compiler warnings on SLE15\n- Fix \"Found No Section\" error with python (lp#2095776)\n\n- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax\n  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)\n\n- Move more utilities from hplip-utils to hplip-base.\n  * hplip-base now contains all utilities that are not totally useless\n    and can run without the Qt GUI.\n\n- Update fix for support of new GPG key, as the key has now been\n  uploaded to GPG keyservers (lp#2120738)\n- This fixes CVE-2025-43023 (bsc#1266031)\n\n- Drop dependency on cups-ppdc. It isn't necessary, as PPD\n  generation on target system is done by cups-driverd.\n\n- The old and outdated 'hpijs' driver support is finally dropped\n  (the 'hpcups' driver is the default driver since 2009)\n  so that there is no need for foomatic-filters (boo#1250481)\n\n- Continue refactoring:\n  * move GUI tools to \"hplip-utils\" subpackage\n  * convert \"hplip\" into an empty metapackage that pulls in hplip-utils\n    and all drivers / PPDs (except hpijs PPDs).\n\n- Refactor package structure:\n  * hplip: full set of utilities. Pulls in almost all subpackages\n    to deliver the \"traditional\" hplip experience\n  * hplip-base: small set of basic utilities that can be run\n    without GUI. Includes hp-probe and hp-plugin\n  * hplip-cups: minimal package for printing, without PPDs or\n    setup helpers\n  * hplip-sane: scanning support (unchanged)\n  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on\n    the fly (requires ppdc). The functionality of this package is\n    similar to the old (misnamed) \"hplip-hpijs\" package.\n  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated\n    hpijs / foomatic_rip filter. Note that this functionality was not part of\n    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs\n    since hplip 3.17.11.\n  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD\n    files for different printer types.\n    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.\n  * libhplip0: shared library package, used by hplip-cups and\n    hplip-sane\n  * hplip-common: configuration files and directories used by\n    all hplip packages.\n\n- Other spec file changes:\n  * Skip deprecated suse_update_desktop_file by default on TW\n  * Don't mess with sane configuration in udev rules\n  * Only the hpijs packages depend on foomatic-rip, which is only\n    provided by cups-filters-1.x. The other packages can be used\n    with cups-filters2.\n  * Remove Obsoletes: for ancient predecessor packages\n  * Remove outdated comments from spec file\n  * Shorten package descriptions\n  * Fix a couple of rpmlint issues\n\n- Fix printer probing using avahi (lp#2120947)\n","status":"published","published":"2026-06-01T16:17:43Z","modified":"2026-06-03T08:30:27.379678807Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:2222-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)\n- URI parameter injection via unsanitized USB serial number. (bsc#1209401)\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n- Update to HPLIP 3.26.4\n","status":"published","published":"2026-06-02T08:40:54Z","modified":"2026-06-03T08:30:23.364161275Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2228-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- hplip: unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n- Update to HPLIP 3.26.4.\n","status":"published","published":"2026-06-03T08:06:57Z","modified":"2026-06-05T18:24:09.117495994Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2229-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)\n- URI parameter injection via unsanitized USB serial number. (bsc#1209401)\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n- Update to HPLIP 3.26.4\n","status":"published","published":"2026-06-03T08:07:17Z","modified":"2026-06-05T18:24:09.120388124Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2380-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues\n\nUpdate to HPLIP 3.26.4:\n\nSecurity issues:\n\n- CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious\n  software installation (bsc#1266031).\n- CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups\n  processing path (bsc#1266023).\n- CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection\n  (bsc#1266024).\n- unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).\n- URI parameter injection via unsanitized USB serial number (bsc#1209401).\n\nNon security issues:\n\n- Can't set up fax for HP OfficeJet 3830 (bsc#1257529).\n- hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).\n\nChanges:\n\n- Add support for the following new printers:\n * HP LaserJet Pro MFP 3106sdw\n * HP LaserJet Pro MFP 3105sdw\n * HP Envy 6500e series\n * HP Envy 6500 series\n * HP OfficeJet Pro 9730 Series\n * HP OfficeJet Pro 9730e Series\n * HP OfficeJet Pro 9720 Series\n * HP OfficeJet Pro 9720e Series\n * HP OfficeJet Pro 8130e All-in-One series\n * HP OfficeJet Pro 8130 All-in-One series\n * HP OfficeJet 8130e All-in-One series\n * HP OfficeJet 8130 All-in-One series\n * HP OfficeJet Pro 8120e All-in-One series\n * HP OfficeJet Pro 8120 All-in-One series\n * HP OfficeJet 8120e All-in-One series\n * HP OfficeJet 8120 All-in-One series\n * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series\n * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series\n * HP DeskJet 4300e All-in-One Printer series\n * HP DeskJet Ink Advantage 4300 All-in-One Printer series\n * HP DeskJet 4300 All-in-One Printer series\n * HP DeskJet 2900e All-in-One Printer series\n * HP DeskJet Ink Advantage 2900 All-in-One Printer series\n * HP DeskJet 2900 All-in-One Printer series\n * HP LaserJet Enterprise Flow MFP 8601z\n * HP LaserJet Enterprise 5501\n * HP LaserJet Enterprise MFP 5601dn\n * HP LaserJet Enterprise 6500dn\n * HP LaserJet Enterprise 5501n\n * HP LaserJet Enterprise MFP 5601\n * HP LaserJet Enterprise 6500\n * HP LaserJet Enterprise 5502dn\n * HP LaserJet Enterprise MFP 5602dn\n * HP LaserJet Enterprise 6500n\n * HP LaserJet Enterprise 5502\n * HP LaserJet Enterprise MFP 5602f\n * HP LaserJet Enterprise 6501dn\n * HP LaserJet Enterprise X50452dn\n * HP LaserJet Enterprise Flow MFP 5602zfw\n * HP LaserJet Enterprise 6501\n * HP LaserJet Enterprise X50452\n * HP LaserJet Enterprise MFP 5602\n * HP LaserJet Enterprise X60257dn\n * HP LaserJet Enterprise MFP X53052dn\n * HP LaserJet Enterprise Flow MFP X530\n * HP LaserJet Enterprise X60257\n * HP LaserJet Enterprise MFP X53052\n * HP LaserJet Enterprise X60357dn\n * HP LaserJet Enterprise X60357\n * HP LaserJet Enterprise MFP 6600dn\n * HP LaserJet Enterprise Flow MFP 6600zfw\n * HP LaserJet Enterprise MFP 6600\n * HP LaserJet Enterprise Flow MFP 6600zfsw\n * HP LaserJet Enterprise MFP X62757dn\n * HP LaserJet Enterprise Flow MFP X62757zs\n * HP LaserJet Enterprise MFP X62757\n * DEX D50452dn\n * DEX MFP D53052dn\n * HP LaserJet Pro MFP M126a plus\n * HP LaserJet Pro MFP M126nw plus\n * HP LaserJet Pro MFP M126snw plus\n * HP Envy Photo 7200 series\n * HP Envy Photo 7900 series\n * HP OfficeJet Pro 9110 Series\n * HP OfficeJet 9120 Series\n * HP OfficeJet Pro 9120 Series\n * HP OfficeJet Pro 9130 Series\n * HP LaserJet Enterprise Flow MFP 8601z+\n * HP LaserJet Enterprise MFP 8601dn\n * HP Color LaserJet Enterprise MFP 8801dn\n * HP Color LaserJet Enterprise Flow MFP 8801z\n * HP Color LaserJet Enterprise Flow MFP 8801z+\n * HP LaserJet Enterprise 8501dn\n * HP LaserJet Enterprise 8501x\n * HP LaserJet Enterprise 8501x+\n * DEX MFP D826\n * DEX MFP D82640\n * DEX MFP D82650\n * DEX MFP D82660\n * DEX D50145\n * DEX MFP D42540\n * DEX MFP D52645\n * DEX Color D55745\n * DEX Color MFP D57945\n * DEX Color MFP D677\n * DEX Color MFP D67755\n * DEX Color MFP D67765\n * DEX Color MFP D877\n * DEX Color MFP D87740\n * DEX Color MFP D87750\n * DEX Color MFP D87760\n * DEX Color MFP D87770\n * DEX Color MFP D786\n * DEX Colour MFP D78625\n * DEX Color MFP D78630\n * DEX Color MFP D78635\n * DEX MFP D731\n * DEX MFP D73130\n * DEX MFP D73135\n * DEX MFP D73140\n","status":"published","published":"2026-06-11T16:15:29Z","modified":"2026-06-13T08:00:05.449189076Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"USN-8483-1","title":"hplip vulnerabilities","description":"It was discovered that HPLIP incorrectly handled certain print data. An\nattacker could possibly use this issue to cause HPLIP to execute arbitrary\ncode. (CVE-2026-8631)\n\nIt was discovered that HPLIP incorrectly handled certain inputs. A local\nattacker could possibly use this issue to execute arbitrary code.\n(CVE-2026-8632)","status":"published","published":"2026-06-30T11:33:09Z","modified":"2026-06-30T18:35:14.459490864Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}