{"id":"ALSA-2026:82883","summary":"Important: hplip security, bug fix, and enhancement update","details":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [IMAGE-MODE] missing /var/lib/hp on image-mode [almalinux-10] (JIRA:AlmaLinux-266547)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-10-16T10:42:07.988577097Z","published":"2026-10-14T00:00:00Z","related":["CVE-2025-43023","CVE-2026-91097","CVE-2026-91098","CVE-2026-91099","CVE-2026-91100","CVE-2026-91101","CVE-2026-91102","CVE-2026-91103","CVE-2026-91104","CVE-2026-91105","CVE-2026-91106"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82883"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-43023"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91097"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91098"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91099"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91100"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91101"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91102"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91103"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91104"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91105"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91106"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2384011"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535600"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535603"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535607"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535613"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535614"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535615"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535617"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535618"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535621"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535622"},{"type":"ADVISORY","url":"https://errata.almalinux.org/10/ALSA-2026-82883.html"}],"affected":[{"package":{"name":"hplip","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/hplip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:82883.json"}},{"package":{"name":"hplip-common","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/hplip-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:82883.json"}},{"package":{"name":"hplip-libs","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/hplip-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:82883.json"}},{"package":{"name":"libsane-hpaio","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/libsane-hpaio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:82883.json"}}],"schema_version":"1.9.0"}