Skip to content
OpenAdvisories
High ELSA-2026-26297 2 CVEs

Important: hplip security update (Oracle Linux 9)

Published Jun 23, 2026 · Updated Jun 23, 2026

Summary

[3.21.2-6.4]
- Fix more leaks in hpcups

[3.21.2-6.3]
- OSH fixes after CVE-2026-8631

[3.21.2-6.2]
- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
via integer overflow in hpcups

[3.21.2-6.1]
- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
via OS command injection in Is_Process_Running()

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 9 hplip 0:3.21.2-6.el9_8.4
Oracle Linux · 9 hplip-common 0:3.21.2-6.el9_8.4
Oracle Linux · 9 hplip-libs 0:3.21.2-6.el9_8.4
Oracle Linux · 9 libsane-hpaio 0:3.21.2-6.el9_8.4

Vulnerabilities 2

  • Critical 9.3

    HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when ha…

  • High 8.5

    HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.