[CLSA-2026:1792490933] hplip: Fix of 7 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-20 17:03:44 UTC
Description:
- CVE-2026-91097: bound LEDM HTTP response copies in http_read() of the SANE hpaio backend (stack buffer overflow) (backport of HPLIP 3.26.6 and RHEL c9s) - CVE-2026-91098: bound device-supplied data in the LEDM scan backend (resolution lists, job Location header, BinaryURL and chunk size parsing) (heap/stack buffer overflow) (backport of HPLIP 3.26.6 and RHEL c9s) - CVE-2026-91101: validate device-supplied channel ids in libhpmud MLC/DOT4 (out-of-bounds read/write) (backport of HPLIP 3.26.6) - CVE-2026-91103: reject MFPDTF blocks shorter than their header in the SANE hpaio backend (integer underflow) (backport of HPLIP 3.26.6) - CVE-2026-91104: size the hpcups raster line buffer from each page header (heap buffer overflow) (backport of HPLIP 3.26.6) - CVE-2026-91105: fix buffer overflows in the hpps PostScript filter (backport of HPLIP 3.26.6) - CVE-2026-91106: fix integer overflow in the hpcups/hpijs halftoner output width (heap buffer overflow) (backport of HPLIP 3.26.6 and RHEL c9s)
CVEs fixed:
Updated packages:
  • hplip-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:e303701faa4590c78b850c55257875157dd69997f454303b9ea31ba637bb901c
  • hplip-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:bbf7c529cdb528c50fa7acbb305140c03fc4652eb0792722a0e195a9dc758cb3
  • hplip-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:d499bee1128016beedfa169665ca285f0ea14a5fe0e5259c38ff6212a4ed17d7
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:f210cb59989a6a73fc31084b5dca9266c1d7df967855e37f1a61dd882f15b9dd
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:1e13625cfdef18bf50d8b1de64b25e473666bc040e2636109053e3c0c6b20186
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:3ab772809d9419c42044424a0706acfe0ef64478c10ae6d8f2c2aee52fa0ccbc
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:63369b2efe645754310a15b3a626eab902c902630d5c9576eb40c0b5f66660e8
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:cdaeae0252ffa72fce8e4e826495aac5f476e8b3719ee6cdd9e9e904d6737b80
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:ca9fc6c6902e6e33762453cb0562edf1985c657c47896cbe180953afcd9ca167
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:fe58aa498b3a786711aa07d7e42f3251daa0c4157bac8d3ba978cff7001ca8f5
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:9af7ba61932e0e1739298dfcbcabcc67ffe4b9cd7663a418034c3b7ccdf07e62
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:46a13807ea25e5d25948c1f5b53413dfa2cd24bbf75f48090f01d1bb026b2908
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.