[CLSA-2026:1792704664] hplip: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 21:31:19 UTC
Description:
- CVE-2026-91097: bound LEDM HTTP response copies to the caller's buffer in http_read() of the SANE hpaio backend (backport of HPLIP 3.26.6) - CVE-2026-91098: bound device-supplied data in the LEDM scan backend (parse_scan_elements(), bb_start_scan(), get_size()) (backport of HPLIP 3.26.6 and RHEL 9) - CVE-2026-91101: validate device-supplied channel ids and data lengths in libhpmud MLC/DOT4 reverse-command handling (backport of HPLIP 3.26.6) - CVE-2026-91103: reject MFPDTF blocks shorter than their header in MfpdtfReadService() of the SANE hpaio backend (backport of HPLIP 3.26.6) - CVE-2026-91104: size the hpcups printer buffer from each page header in HPCupsFilter::processRasterData() (backport of HPLIP 3.26.6) - CVE-2026-91105: fix buffer overflows in the hpps PostScript filter (backport of HPLIP 3.26.6 and RHEL 9)
CVEs fixed:
Updated packages:
  • hplip-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:b1db29617102d9256da65a837aeb0e69d0b7836f0f979fe7d86a516f937da8b3
  • hplip-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:7e215926c093acd06c3e3dc681d16362927ccfca25c557d3a0cf67c29e5c79a9
  • hplip-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:20ff873eec9c0f6845e1b15123ca026be7a16384f4e9fb133deb04d484cf02a6
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:7dcf832d1b53a68a0f314e5fde0f2d0b4b7910caf56c47fef250c13fea6bac1c
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:8276ba823274b4beaeb859fc512ab61c4680bd96c78e18e4fffc1e2e49dbfb16
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:6b754311759b2ba9677aa32e66ee86d2ed9cf2ed7af48e8ccc38e7147291fc05
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:027cf8a3a3cec0b3fb105a6309995139832c8c5411d88cdfa640ebae75e492be
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:07e594c495ed7f3f05853dddb220c8569e99384f1399eedca994e57b3645b02e
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:94ea9ac4bf513452956267955c182b2dc9bdf19d8a5c5fedb641e83f6c002103
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els3.aarch64.rpm
    sha:b3d5e17b7389185c40edf67382ef3c5b8bddbd862f1caa30e81e68d8361a8b50
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els3.i686.rpm
    sha:6b5bc3109669cf99decf721d7175059a7dfacd47e2df853a2c2b320c62728345
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els3.x86_64.rpm
    sha:7b6f433c54870a4173ac4a29cd1208e9dce809b2bc0c382f452229f40d3bbf76
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.