RQV33WLW4ULIYEPBHXCLRFF3ROAVGJKF

lists.almalinux.org • October 16, 2026

[Announce] [Security Advisory] ALSA-2026:82883: hplip security, bug fix, and enhancement update (Important)

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)

* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)

* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)

* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)

* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)

* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)

* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)

* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)

* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)

* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)

* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)

* [IMAGE-MODE] missing /var/lib/hp on image-mode [almalinux-10] (JIRA:AlmaLinux-266547)

For more details the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Full details, updated packages, references, and other related information:

This message is automatically generated, please don’t . For further questions, please, us via the AlmaLinux community chat:

Want to change your notification settings? Sign in and manage mailing lists on

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in HPLIP Package Expose Users to Remote Code Execution Risks Multiple critical vulnerabilities have been identified in the Hewlett-Packard Linux Imaging and Printing (HPLIP) package, affecting various Linux distributions, including AlmaLinux and Rocky Linux. These vulnerabilities, including CVE-2026-91104 and CVE-2026-91106, allow for remote code execution and privilege escalation, posing severe risks to users. Attackers can exploit these flaws through heap-based buffer overflows and improper handling of DSA keys, potentially leading to unauthorized access and system compromise. Users are advised to update to the latest patched version immediately to mitigate these risks. Temporary workarounds include restricting access to the HPLIP service and configuring firewall rules to limit exposure. The vulnerabilities were disclosed on October 16, 2026, with patches available for affected systems. The CVSS scores for these vulnerabilities range from 5.1 to 9.3, indicating a critical threat level. 3 sources 72

Extracted Entities

RQV33WLW4ULIYEPBHXCLRFF3ROAVGJKF

The full story

Extracted Entities

CVEs (11)

CWE Weaknesses (1)

Platforms (2)