{"id":"CLSA-2026-1792490933","summary":"hplip: Fix of 7 CVEs","details":"- CVE-2026-91097: bound LEDM HTTP response copies in http_read() of the SANE\n  hpaio backend (stack buffer overflow) (backport of HPLIP 3.26.6 and RHEL\n  c9s)\n- CVE-2026-91098: bound device-supplied data in the LEDM scan backend\n  (resolution lists, job Location header, BinaryURL and chunk size parsing)\n  (heap/stack buffer overflow) (backport of HPLIP 3.26.6 and RHEL c9s)\n- CVE-2026-91101: validate device-supplied channel ids in libhpmud MLC/DOT4\n  (out-of-bounds read/write) (backport of HPLIP 3.26.6)\n- CVE-2026-91103: reject MFPDTF blocks shorter than their header in the SANE\n  hpaio backend (integer underflow) (backport of HPLIP 3.26.6)\n- CVE-2026-91104: size the hpcups raster line buffer from each page header\n  (heap buffer overflow) (backport of HPLIP 3.26.6)\n- CVE-2026-91105: fix buffer overflows in the hpps PostScript filter (backport\n  of HPLIP 3.26.6)\n- CVE-2026-91106: fix integer overflow in the hpcups/hpijs halftoner output\n  width (heap buffer overflow) (backport of HPLIP 3.26.6 and RHEL c9s)","modified":"2026-10-26T09:31:00.419503094Z","published":"2026-10-20T17:03:44Z","upstream":["CVE-2026-91097","CVE-2026-91098","CVE-2026-91101","CVE-2026-91103","CVE-2026-91104","CVE-2026-91105","CVE-2026-91106"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792490933.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91097"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91098"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91101"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91103"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91104"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91105"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91106"}],"affected":[{"package":{"name":"hplip","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/hplip?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792490933.json"}},{"package":{"name":"hplip-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/hplip-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792490933.json"}},{"package":{"name":"hplip-libs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/hplip-libs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792490933.json"}},{"package":{"name":"libsane-hpaio","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libsane-hpaio?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792490933.json"}}],"schema_version":"1.9.0"}