Skip to content
OpenAdvisories
High ALSA-2026:82882 11 CVEs

Important: hplip security, bug fix, and enhancement update

Published Oct 14, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)
* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)
* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)
* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)
* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)
* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)
* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)
* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)
* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)
* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)
* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

* [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 9 hplip 3.26.6-1.el9_8.3
AlmaLinux · 9 hplip-common 3.26.6-1.el9_8.3
AlmaLinux · 9 hplip-libs 3.26.6-1.el9_8.3
AlmaLinux · 9 libsane-hpaio 3.26.6-1.el9_8.3

Vulnerabilities 11

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-43023
  • report
    https://access.redhat.com/security/cve/CVE-2026-91097
  • report
    https://access.redhat.com/security/cve/CVE-2026-91098
  • report
    https://access.redhat.com/security/cve/CVE-2026-91099
  • report
    https://access.redhat.com/security/cve/CVE-2026-91100
  • report
    https://access.redhat.com/security/cve/CVE-2026-91101
  • report
    https://access.redhat.com/security/cve/CVE-2026-91102
  • report
    https://access.redhat.com/security/cve/CVE-2026-91103
  • report
    https://access.redhat.com/security/cve/CVE-2026-91104
  • report
    https://access.redhat.com/security/cve/CVE-2026-91105
  • report
    https://access.redhat.com/security/cve/CVE-2026-91106
  • report
    https://bugzilla.redhat.com/2384011
  • report
    https://bugzilla.redhat.com/2535600
  • report
    https://bugzilla.redhat.com/2535603
  • report
    https://bugzilla.redhat.com/2535607
  • report
    https://bugzilla.redhat.com/2535613
  • report
    https://bugzilla.redhat.com/2535614
  • report
    https://bugzilla.redhat.com/2535615
  • report
    https://bugzilla.redhat.com/2535617
  • report
    https://bugzilla.redhat.com/2535618
  • report
    https://bugzilla.redhat.com/2535621
  • report
    https://bugzilla.redhat.com/2535622
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-82882.html