RHSA 2026:82883

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

Bug Fix(es) and Enhancement(s):

[IMAGE-MODE] missing /var/lib/hp on image-mode [rhel-10] (JIRA:RHEL-266547)

For more details the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

For details on how to apply this update, which includes the changes described in this advisory, refer to:

Red Hat Enterprise Linux for x86_64 10 x86_64

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64

Red Hat Enterprise Linux for IBM z Systems 10 s390x

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x

Red Hat Enterprise Linux for Power, little endian 10 ppc64le

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le

Red Hat Enterprise Linux for ARM 64 10 aarch64

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x

BZ - 2384011 - CVE-2025-43023 hplip: HP Linux Imaging and Printing Software - Use of DSA Key

BZ - 2535600 - CVE-2026-91099 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation

BZ - 2535603 - CVE-2026-91098 hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation

BZ - 2535607 - CVE-2026-91097 hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation

BZ - 2535613 - CVE-2026-91103 hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service

BZ - 2535614 - CVE-2026-91106 hplip: heap-based buffer overflow can lead to remote code execution

BZ - 2535615 - CVE-2026-91100 hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.

BZ - 2535617 - CVE-2026-91101 hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities

BZ - 2535618 - CVE-2026-91104 hplip: heap-based buffer overflow can lead to remote code execution

BZ - 2535621 - CVE-2026-91105 hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities

BZ - 2535622 - CVE-2026-91102 HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution

Red Hat Enterprise Linux for x86_64 10

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2

Red Hat Enterprise Linux for IBM z Systems 10

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2

Red Hat Enterprise Linux for Power, little endian 10

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2

Red Hat Enterprise Linux for ARM 64 10

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2

The Red Hat security is [email protected] . More details at .