Skip to content
OpenAdvisories
High ALSA-2026:40894 2 CVEs

Important: hplip security update

Published Jul 16, 2026 · Updated Oct 29, 2026

Summary

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

* HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 8 hplip 3.18.4-14.el8_10.alma.1
AlmaLinux · 8 hplip-common 3.18.4-14.el8_10.alma.1
AlmaLinux · 8 hplip-gui 3.18.4-14.el8_10.alma.1
AlmaLinux · 8 hplip-libs 3.18.4-14.el8_10.alma.1
AlmaLinux · 8 libsane-hpaio 3.18.4-14.el8_10.alma.1

Vulnerabilities 2

  • Critical 9.8

    Hplip: incomplete fix for cve-2026-8631

    A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in …

  • Critical 9.3

    HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when ha…

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-14544
  • report
    https://bugzilla.redhat.com/2496772
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-40894.html