Fedora 43 and 44 HPLIP Updates Address Critical Code Execution Vulnerabilities

Fedora has released updates for HPLIP addressing critical vulnerabilities CVE-2026-8631 and CVE-2026-8632, both published on May 20, 2026. These vulnerabilities allow for arbitrary code execution and privilege escalation via an integer overflow in hpcups, affecting users of Fedora 43 and 44. The updates were made available on May 25 and May 26, 2026, respectively. Users are urged to apply the updates promptly using the 'dnf' update program to mitigate potential exploitation. The vulnerabilities could lead to severe security risks if left unaddressed, particularly for systems utilizing HPLIP for printer management.

Key Points: • Fedora updates address critical vulnerabilities CVE-2026-8631 and CVE-2026-8632. • Vulnerabilities allow arbitrary code execution and privilege escalation in HPLIP. • Users are advised to apply updates immediately using the 'dnf' update program.