Summary
[3.23.12-10.5]
- RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631
[3.23.12-10.4]
- Fix more leaks in hpcups
[3.23.12-10.3]
- OSH fixes after CVE-2026-8631
[3.23.12-10.2]
- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
integer overflow in hpcups
[3.23.12-10.1]
- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
via OS command injection in Is_Process_Running()
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | hplip | 0:3.23.12-10.el10_2.5 |
| Oracle Linux · 10 | hplip-common | 0:3.23.12-10.el10_2.5 |
| Oracle Linux · 10 | hplip-libs | 0:3.23.12-10.el10_2.5 |
| Oracle Linux · 10 | libsane-hpaio | 0:3.23.12-10.el10_2.5 |
Vulnerabilities 1
-
Critical 9.8
Hplip: incomplete fix for cve-2026-8631
A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in …