OESA-2026-2483

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2483
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-2483.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-2483
Upstream
  • CVE-2025-43023
  • CVE-2026-8631
  • CVE-2026-8632
Published
2026-05-29T13:33:59Z
Modified
2026-05-29T13:45:10.189669178Z
Summary
hplip security update
Details

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.

Security Fix(es):

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).(CVE-2025-43023)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.(CVE-2026-8631)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.(CVE-2026-8632)

Database specific
{
    "severity": "Critical"
}
References

Affected packages

openEuler:20.03-LTS-SP4
hplip

Package

Name
hplip
Purl
pkg:rpm/openEuler/hplip&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.4-1.oe2003sp4

Ecosystem specific

{
    "src": [
        "hplip-3.26.4-1.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "hplip-3.26.4-1.oe2003sp4.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2003sp4.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "hplip-3.26.4-1.oe2003sp4.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2003sp4.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2003sp4.x86_64.rpm"
    ]
}

Database specific

source
"https://repo.openeuler.org/security/data/osv/OESA-2026-2483.json"
openEuler:22.03-LTS-SP4
hplip

Package

Name
hplip
Purl
pkg:rpm/openEuler/hplip&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.4-1.oe2203sp4

Ecosystem specific

{
    "src": [
        "hplip-3.26.4-1.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "hplip-3.26.4-1.oe2203sp4.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2203sp4.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "hplip-3.26.4-1.oe2203sp4.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2203sp4.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2203sp4.aarch64.rpm"
    ]
}

Database specific

source
"https://repo.openeuler.org/security/data/osv/OESA-2026-2483.json"
openEuler:24.03-LTS
hplip

Package

Name
hplip
Purl
pkg:rpm/openEuler/hplip&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.4-1.oe2403sp1

Ecosystem specific

{
    "src": [
        "hplip-3.26.4-1.oe2403sp3.src.rpm",
        "hplip-3.26.4-1.oe2403.src.rpm",
        "hplip-3.26.4-1.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "hplip-3.26.4-1.oe2403sp3.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp3.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp3.x86_64.rpm",
        "hplip-3.26.4-1.oe2403.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403.x86_64.rpm",
        "hplip-3.26.4-1.oe2403sp1.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp1.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "hplip-3.26.4-1.oe2403sp3.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp3.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp3.aarch64.rpm",
        "hplip-3.26.4-1.oe2403.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403.aarch64.rpm",
        "hplip-3.26.4-1.oe2403sp1.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp1.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp1.aarch64.rpm"
    ]
}

Database specific

source
"https://repo.openeuler.org/security/data/osv/OESA-2026-2483.json"
openEuler:24.03-LTS-SP1
hplip

Package

Name
hplip
Purl
pkg:rpm/openEuler/hplip&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.4-1.oe2403sp1

Ecosystem specific

{
    "src": [
        "hplip-3.26.4-1.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "hplip-3.26.4-1.oe2403sp1.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp1.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "hplip-3.26.4-1.oe2403sp1.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp1.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp1.aarch64.rpm"
    ]
}

Database specific

source
"https://repo.openeuler.org/security/data/osv/OESA-2026-2483.json"
openEuler:24.03-LTS-SP3
hplip

Package

Name
hplip
Purl
pkg:rpm/openEuler/hplip&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.4-1.oe2403sp3

Ecosystem specific

{
    "src": [
        "hplip-3.26.4-1.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "hplip-3.26.4-1.oe2403sp3.x86_64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp3.x86_64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "hplip-3.26.4-1.oe2403sp3.aarch64.rpm",
        "hplip-debuginfo-3.26.4-1.oe2403sp3.aarch64.rpm",
        "hplip-debugsource-3.26.4-1.oe2403sp3.aarch64.rpm"
    ]
}

Database specific

source
"https://repo.openeuler.org/security/data/osv/OESA-2026-2483.json"