Skip to content
OpenAdvisories
High ALSA-2026:39976 2 CVEs

Important: hplip security update

Published Jul 15, 2026 · Updated Oct 29, 2026

Summary

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

* HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 10 hplip 3.23.12-10.el10_2.5
AlmaLinux · 10 hplip-common 3.23.12-10.el10_2.5
AlmaLinux · 10 hplip-libs 3.23.12-10.el10_2.5
AlmaLinux · 10 libsane-hpaio 3.23.12-10.el10_2.5

Vulnerabilities 2

  • Critical 9.8

    Hplip: incomplete fix for cve-2026-8631

    A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in …

  • Critical 9.3

    HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when ha…

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-14544
  • report
    https://bugzilla.redhat.com/2496772
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-39976.html