[CLSA-2026:1782483693] hplip: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-26 14:21:50 UTC
Description:
- CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4) - CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4)
CVEs fixed:
Updated packages:
  • hplip-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:a82b57a15530185064b6f11b6417e2d5527c300f18f3b145c227d4acf9ea0132
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm
    sha:bf809297853abfd656d071346fbde1677a884be85cda4b60c56f1f5d5a05a480
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:675cd86ad72bdcb74e8be1f892f35ab57e4ad6e9da4c199cfbd5ccaea015aef2
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm
    sha:ca3102b5acd9c88832fc8c5638d6ef3c678cb4f12014d6cdc037a36f2fb24b72
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:6ca6f60a40d00dcfc05d6d3ac8c761ce7a34abda6ea298679c3937c32bec7012
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm
    sha:a74cbb99f250bce1b60f8619d103a6bb373350827d13304c48b0ac248c9b3967
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:83a731419f7706880efc24678aa28abb9b29d36b860b537e581b7a59a0ae46df
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.