[CLSA-2026:1782213578] hplip: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-23 11:19:54 UTC
Description:
- CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4) - CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4)
CVEs fixed:
Updated packages:
  • hplip-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:f4f640ef18333220ce9839200779bb57caca94af030668a9787f978cfe36757f
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm
    sha:34e47929f4fb10ac84d1503f14a9d4028038899092409605911b89a2c6577305
  • hplip-common-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:dd34ed7eb717219ade0aa544913394df3c709e496faa5f4f173841aa6f24b7f3
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm
    sha:4210e674b8b6c10e634a7284c1234138d1d1213b9bc6263eca3000d5bd9849af
  • hplip-libs-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:2fd3b0a3b9e31bf893b1ff0c2c79a98a6f4ef9ed03b1efeaef0f96f2012afb26
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm
    sha:a0eff4fbe5576fbfc2873e5bad12036549271007dd006989431a5bb453d3d9e8
  • libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm
    sha:36089984289607b0fe752076e27719e66af56fe9834adc955d271a1fb2f77b10
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.