RHSA-2026:82882 — Security Advisory

An update for hplip is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

• hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

• hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

• hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

• hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

• hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

• hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

• hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

• hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

• hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

• hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

• HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

• [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:RHEL-257310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.