Back Linuxsecurity

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Linuxsecurity •LinuxSecurity Advisories • June 3, 2026

* Tue May 26 2026 Zdenek Dohnal - 3.26.4-2 - Fix location+user-agent of plugin in hp-plugin-download * Mon May 25 2026 Zdenek Dohnal - 3.26.4-1 - 3.26.4 (fedora#2480158), fixes CVE-2026-8631, CVE-2026-8632 * Fri Jan 23 2026 Benjamin A. Beasley - 3.25.8-2 - Rebuilt for net-snmp 5.9.5.2

[ 1 ] Bug #2480300 - CVE-2026-8631 HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-28afc9a105' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 and 44 HPLIP Updates Address Critical Code Execution Vulnerabilities Fedora has released updates for HPLIP addressing critical vulnerabilities CVE-2026-8631 and CVE-2026-8632, both published on May 20, 2026. These vulnerabilities allow for arbitrary code execution and privilege escalation via an integer overflow in hpcups, affecting users of Fedora 43 and 44. The updates were made available on May 25 and May 26, 2026, respectively. Users are urged to apply the updates promptly using the 'dnf' update program to mitigate potential exploitation. The vulnerabilities could lead to severe security risks if left unaddressed, particularly for systems utilizing HPLIP for printer management. 2 sources 71

Extracted Entities

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

The full story

Extracted Entities

Companies (1)

CVEs (2)

CWE Weaknesses (1)

IP Addresses (1)

MITRE ATT&CK (2)

Platforms (1)