Skip to content
OpenAdvisories
High RLSA-2026:26228 2 CVEs

Important: hplip security update

Published Jun 19, 2026 · Updated Jun 19, 2026

Summary

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

* HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)

* HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 hplip 0:3.23.12-10.el10_2.4

Vulnerabilities 2

  • Critical 9.3

    HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when ha…

  • High 8.5

    HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2480300
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2480297