[Apollo] Advisories Statistics light light Login

RLSA-2026:82295

Security Mirrored from RHSA-2026:82295
Issued at: 2026-10-31
Updated at: 2026-11-01

Advisory content derived from Red Hat RHSA-2026:82295, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: hplip security update



Description

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

* hplip: potential memory buffer overflow (CVE-2020-6923)

* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2333390 2384011 2535600 2535603 2535607 2535613 2535614 2535615 2535617 2535618 2535621 2535622

CVEs

CVE-2020-6923 CVE-2025-43023 CVE-2026-91097 CVE-2026-91098 CVE-2026-91099 CVE-2026-91100 CVE-2026-91101 CVE-2026-91102 CVE-2026-91103 CVE-2026-91104 CVE-2026-91105 CVE-2026-91106

Affected packages

Rocky Linux 8 aarch64 - AppStream

hplip-0:3.26.6-3.el8_10.aarch64.rpm hplip-0:3.26.6-3.el8_10.src.rpm hplip-common-0:3.26.6-3.el8_10.aarch64.rpm hplip-debuginfo-0:3.26.6-3.el8_10.aarch64.rpm hplip-debugsource-0:3.26.6-3.el8_10.aarch64.rpm hplip-gui-0:3.26.6-3.el8_10.aarch64.rpm hplip-libs-0:3.26.6-3.el8_10.aarch64.rpm hplip-libs-debuginfo-0:3.26.6-3.el8_10.aarch64.rpm libsane-hpaio-0:3.26.6-3.el8_10.aarch64.rpm libsane-hpaio-debuginfo-0:3.26.6-3.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

hplip-0:3.26.6-3.el8_10.src.rpm hplip-0:3.26.6-3.el8_10.x86_64.rpm hplip-common-0:3.26.6-3.el8_10.i686.rpm hplip-common-0:3.26.6-3.el8_10.x86_64.rpm hplip-debuginfo-0:3.26.6-3.el8_10.i686.rpm hplip-debuginfo-0:3.26.6-3.el8_10.x86_64.rpm hplip-debugsource-0:3.26.6-3.el8_10.i686.rpm hplip-debugsource-0:3.26.6-3.el8_10.x86_64.rpm hplip-gui-0:3.26.6-3.el8_10.x86_64.rpm hplip-libs-0:3.26.6-3.el8_10.i686.rpm hplip-libs-0:3.26.6-3.el8_10.x86_64.rpm hplip-libs-debuginfo-0:3.26.6-3.el8_10.i686.rpm hplip-libs-debuginfo-0:3.26.6-3.el8_10.x86_64.rpm libsane-hpaio-0:3.26.6-3.el8_10.i686.rpm libsane-hpaio-0:3.26.6-3.el8_10.x86_64.rpm libsane-hpaio-debuginfo-0:3.26.6-3.el8_10.i686.rpm libsane-hpaio-debuginfo-0:3.26.6-3.el8_10.x86_64.rpm