RHSA-2026:82295HighCVSS 8.8

Red Hat Security Advisory: hplip security update

Published
October 13, 2026
Last Modified
October 31, 2026

🔗 CVE IDs covered (12)

CVE-2026-91102 →CVE-2020-6923 →CVE-2026-91097 →CVE-2026-91099 →CVE-2026-91100 →CVE-2026-91103 →CVE-2026-91104 →CVE-2026-91105 →CVE-2026-91106 →CVE-2025-43023 →CVE-2026-91098 →CVE-2026-91101 →

📋 Description

CVE-2020-6923 — hplip: potential memory buffer overflow CVE-2025-43023 — hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2026-91097 — hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation CVE-2026-91098 — hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation CVE-2026-91099 — hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation CVE-2026-91100 — hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. CVE-2026-91101 — hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities CVE-2026-91102 — HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution CVE-2026-91103 — hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service CVE-2026-91104 — hplip: heap-based buffer overflow can lead to remote code execution CVE-2026-91105 — hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities CVE-2026-91106 — hplip: heap-based buffer overflow can lead to remote code execution

🎯 Affected products45

  • Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-0:3.26.6-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-0:3.26.6-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-0:3.26.6-3.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-0:3.26.6-3.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-0:3.26.6-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-common-0:3.26.6-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-common-0:3.26.6-3.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-common-0:3.26.6-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-common-0:3.26.6-3.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-common-0:3.26.6-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debuginfo-0:3.26.6-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debuginfo-0:3.26.6-3.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debuginfo-0:3.26.6-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debuginfo-0:3.26.6-3.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debuginfo-0:3.26.6-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debugsource-0:3.26.6-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debugsource-0:3.26.6-3.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debugsource-0:3.26.6-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debugsource-0:3.26.6-3.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-debugsource-0:3.26.6-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-gui-0:3.26.6-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-gui-0:3.26.6-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-gui-0:3.26.6-3.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-gui-0:3.26.6-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-libs-0:3.26.6-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-libs-0:3.26.6-3.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-libs-0:3.26.6-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-libs-0:3.26.6-3.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hplip-libs-0:3.26.6-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +15 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this vulnerability, consider removing the hplip package if its functionality is not required by using the command indicated below. Note this will remove HP printer support and related utilities from the system. ~~~ sudo dnf remove hplip ~~~ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, if HPLIP functionality is not required, consider removing the `hplip` package. This can be done using the following command: `sudo dnf remove hplip` Removing this package will disable HP printer support and related utilities. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: If HP printer support is not required on the system, remove the HPLIP package to eliminate the attack surface. For Red Hat Enterprise Linux, use `sudo dnf remove hplip`. Removing this package will disable functionality for HP printers. Workaround: To mitigate this vulnerability, if HPLIP functionality is not required, consider removing the `hplip` package. This action will remove support for HP printers and may impact printing capabilities. Use the system's package manager to perform this operation. For example, on Red Hat Enterprise Linux, execute `sudo dnf remove hplip`. Workaround: To reduce the attack surface, restrict network access to systems running HPLIP if network printing or remote management features are not actively used. Alternatively, if HPLIP functionality is not required, the `hplip` package can be removed. To remove the package: `sudo dnf remove hplip` Removing the package will impact printing capabilities for HP devices. Workaround: HPLIP is a collection of drivers for HP printers. If HP printers are not in use, the `hplip` package can be removed to eliminate the attack surface. To remove the package: `sudo dnf remove hplip` This action may affect printing functionality for HP devices.

🔗 References (15)