CLSA-2026-1792704664
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792704664.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792704664
- Upstream
CVE (6)
- CVE-2026-91097
- CVE-2026-91098
- CVE-2026-91101
- CVE-2026-91103
- CVE-2026-91104
- CVE-2026-91105
- Published
- 2026-10-22T21:31:19Z
- Modified
- 2026-10-26T09:31:36Z
- Summary
- hplip: Fix of 6 CVEs
- Details
-
- CVE-2026-91097: bound LEDM HTTP response copies to the caller's buffer in http_read() of the SANE hpaio backend (backport of HPLIP 3.26.6)
- CVE-2026-91098: bound device-supplied data in the LEDM scan backend (parse_scan_elements(), bb_start_scan(), get_size()) (backport of HPLIP 3.26.6 and RHEL 9)
- CVE-2026-91101: validate device-supplied channel ids and data lengths in libhpmud MLC/DOT4 reverse-command handling (backport of HPLIP 3.26.6)
- CVE-2026-91103: reject MFPDTF blocks shorter than their header in MfpdtfReadService() of the SANE hpaio backend (backport of HPLIP 3.26.6)
- CVE-2026-91104: size the hpcups printer buffer from each page header in HPCupsFilter::processRasterData() (backport of HPLIP 3.26.6)
- CVE-2026-91105: fix buffer overflows in the hpps PostScript filter (backport of HPLIP 3.26.6 and RHEL 9)
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792704664.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-91097
- https://nvd.nist.gov/vuln/detail/CVE-2026-91098
- https://nvd.nist.gov/vuln/detail/CVE-2026-91101
- https://nvd.nist.gov/vuln/detail/CVE-2026-91103
- https://nvd.nist.gov/vuln/detail/CVE-2026-91104
- https://nvd.nist.gov/vuln/detail/CVE-2026-91105
Affected packages
TuxCare:AlmaLinux:9.6 / hplip
Package
- Name
- hplip
- Purl
- pkg:rpm/tuxcare/hplip?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / hplip-common
Package
- Name
- hplip-common
- Purl
- pkg:rpm/tuxcare/hplip-common?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / hplip-libs
Package
- Name
- hplip-libs
- Purl
- pkg:rpm/tuxcare/hplip-libs?distro=almalinux-9.6