{"id":"CLSA-2026-1792704664","summary":"hplip: Fix of 6 CVEs","details":"- CVE-2026-91097: bound LEDM HTTP response copies to the caller's buffer in\n  http_read() of the SANE hpaio backend (backport of HPLIP 3.26.6)\n- CVE-2026-91098: bound device-supplied data in the LEDM scan backend\n  (parse_scan_elements(), bb_start_scan(), get_size()) (backport of\n  HPLIP 3.26.6 and RHEL 9)\n- CVE-2026-91101: validate device-supplied channel ids and data lengths in\n  libhpmud MLC/DOT4 reverse-command handling (backport of HPLIP 3.26.6)\n- CVE-2026-91103: reject MFPDTF blocks shorter than their header in\n  MfpdtfReadService() of the SANE hpaio backend (backport of HPLIP 3.26.6)\n- CVE-2026-91104: size the hpcups printer buffer from each page header in\n  HPCupsFilter::processRasterData() (backport of HPLIP 3.26.6)\n- CVE-2026-91105: fix buffer overflows in the hpps PostScript filter\n  (backport of HPLIP 3.26.6 and RHEL 9)","modified":"2026-10-26T09:31:36.745272644Z","published":"2026-10-22T21:31:19Z","upstream":["CVE-2026-91097","CVE-2026-91098","CVE-2026-91101","CVE-2026-91103","CVE-2026-91104","CVE-2026-91105"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792704664.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91097"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91098"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91101"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91103"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91104"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91105"}],"affected":[{"package":{"name":"hplip","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/hplip?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792704664.json"}},{"package":{"name":"hplip-common","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/hplip-common?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792704664.json"}},{"package":{"name":"hplip-libs","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/hplip-libs?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792704664.json"}},{"package":{"name":"libsane-hpaio","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/libsane-hpaio?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792704664.json"}}],"schema_version":"1.9.0"}