CVE-2026-91098
hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Oracle (yüksek), Rocky Linux (yüksek).
Açıklama
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 10 | hplip, hplip-common, hplip-libs ve 1 tane daha | 3.26.6-1.el10_2.3 |
| alma 8 | hplip, hplip-common, hplip-gui ve 2 tane daha | 3.26.6-3.el8_10 |
| alma 9 | hplip, hplip-common, hplip-libs ve 1 tane daha | 3.26.6-1.el9_8.3 |
| alpine 3.24 | hplip | 3.26.6-r0 |
| alpine edge | hplip | 3.26.6-r0 |
| debian 11 | hplip | düzeltme belirtilmemiş |
| debian 12 | hplip | düzeltme belirtilmemiş |
| debian 13 | hplip | düzeltme belirtilmemiş |
| debian 14 | hplip | düzeltme belirtilmemiş |
| echo | hplip | düzeltme belirtilmemiş |
| Oracle Linux 8 | hplip, hplip-common, hplip-gui ve 2 tane daha | 3.26.6-3.el8_10 |
| Oracle Linux 9 | hplip, hplip-common, hplip-libs ve 1 tane daha | 3.26.6-1.el9_8.3 |
31 kaynaktaki 78 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 10 | hplip | 3.26.6-1.el10_2.3 |
| alma 10 | hplip-common | 3.26.6-1.el10_2.3 |
| alma 10 | hplip-libs | 3.26.6-1.el10_2.3 |
| alma 10 | libsane-hpaio | 3.26.6-1.el10_2.3 |
| alma 8 | hplip | 3.26.6-3.el8_10 |
| alma 8 | hplip-common | 3.26.6-3.el8_10 |
| alma 8 | hplip-gui | 3.26.6-3.el8_10 |
| alma 8 | hplip-libs | 3.26.6-3.el8_10 |
| alma 8 | libsane-hpaio | 3.26.6-3.el8_10 |
| alma 9 | hplip | 3.26.6-1.el9_8.3 |
| alma 9 | hplip-common | 3.26.6-1.el9_8.3 |
| alma 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| alma 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
| alpine 3.24 | hplip | 3.26.6-r0 |
| alpine edge | hplip | 3.26.6-r0 |
| debian 11 | hplip | düzeltme belirtilmemiş |
| debian 12 | hplip | düzeltme belirtilmemiş |
| debian 13 | hplip | düzeltme belirtilmemiş |
| debian 14 | hplip | düzeltme belirtilmemiş |
| echo | hplip | düzeltme belirtilmemiş |
| Oracle Linux 8 | hplip | 3.26.6-3.el8_10 |
| Oracle Linux 8 | hplip-common | 3.26.6-3.el8_10 |
| Oracle Linux 8 | hplip-gui | 3.26.6-3.el8_10 |
| Oracle Linux 8 | hplip-libs | 3.26.6-3.el8_10 |
| Oracle Linux 8 | libsane-hpaio | 3.26.6-3.el8_10 |
| Oracle Linux 9 | hplip | 3.26.6-1.el9_8.3 |
| Oracle Linux 9 | hplip-common | 3.26.6-1.el9_8.3 |
| Oracle Linux 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| Oracle Linux 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
| rapidfort alma 10 | hplip | 3.26.6-1.el10_2.3 |
| rapidfort alma 10 | hplip-common | 3.26.6-1.el10_2.3 |
| rapidfort alma 10 | hplip-libs | 3.26.6-1.el10_2.3 |
| rapidfort alma 10 | libsane-hpaio | 3.26.6-1.el10_2.3 |
| rapidfort alma 9 | hplip | 3.26.6-1.el9_8.3 |
| rapidfort alma 9 | hplip-common | 3.26.6-1.el9_8.3 |
| rapidfort alma 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| rapidfort alma 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
| rapidfort alpine 3.20 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.21 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.22 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.23 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.24 | hplip | 3.26.6-r0 |
| rapidfort debian 12 | hplip | düzeltme belirtilmemiş |
| rapidfort debian 13 | hplip | düzeltme belirtilmemiş |
| rapidfort fedora 43 | hplip | 3.26.6-1.fc43 |
| rapidfort fedora 43 | hplip-common | 3.26.6-1.fc43 |
| rapidfort fedora 43 | hplip-gui | 3.26.6-1.fc43 |
| rapidfort fedora 43 | hplip-libs | 3.26.6-1.fc43 |
| rapidfort fedora 43 | libsane-hpaio | 3.26.6-1.fc43 |
| rapidfort Oracle Linux 10 | hplip | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 10 | hplip-common | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 10 | hplip-libs | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 10 | libsane-hpaio | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 9 | hplip | 0:3.26.6-1.el9_8.3 |
| rapidfort Oracle Linux 9 | hplip-common | 0:3.26.6-1.el9_8.3 |
| rapidfort Oracle Linux 9 | hplip-libs | 0:3.26.6-1.el9_8.3 |
| rapidfort Oracle Linux 9 | libsane-hpaio | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | hplip | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | hplip-common | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | hplip-libs | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | libsane-hpaio | 0:3.26.6-1.el9_8.3 |
| rapidfort ubuntu 20.04 | hplip | düzeltme belirtilmemiş |
| rapidfort ubuntu 22.04 | hplip | düzeltme belirtilmemiş |
| rapidfort ubuntu 24.04 | hplip | düzeltme belirtilmemiş |
| Red Hat | hpijs | düzeltme belirtilmemiş |
| Red Hat | hplip | düzeltme belirtilmemiş |
| Red Hat | hplip-common | düzeltme belirtilmemiş |
| Red Hat | hplip-gui | düzeltme belirtilmemiş |
| Red Hat | hplip-libs | düzeltme belirtilmemiş |
| Red Hat | libsane-hpaio | düzeltme belirtilmemiş |
| rocky 10 | hplip | 3.26.6-1.el10_2.3 |
| rocky 10 | hplip-common | 3.26.6-1.el10_2.3 |
| rocky 10 | hplip-libs | 3.26.6-1.el10_2.3 |
| rocky 10 | libsane-hpaio | 3.26.6-1.el10_2.3 |
| rocky 9 | hplip | 3.26.6-1.el9_8.3 |
| rocky 9 | hplip-common | 3.26.6-1.el9_8.3 |
| rocky 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| rocky 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
Referanslar
- https://access.redhat.com/errata/RHSA-2026:82882
- https://access.redhat.com/security/cve/CVE-2026-91098
- https://bugzilla.redhat.com/2384011
- https://bugzilla.redhat.com/2535600
- https://bugzilla.redhat.com/2535603
- https://bugzilla.redhat.com/2535607
- https://bugzilla.redhat.com/2535613
- https://bugzilla.redhat.com/2535614
43 referansın hepsi
- https://bugzilla.redhat.com/2535615
- https://bugzilla.redhat.com/2535617
- https://bugzilla.redhat.com/2535618
- https://bugzilla.redhat.com/2535621
- https://bugzilla.redhat.com/2535622
- https://bugzilla.redhat.com/show_bug.cgi?id=2384011
- https://bugzilla.redhat.com/show_bug.cgi?id=2535600
- https://bugzilla.redhat.com/show_bug.cgi?id=2535603
- https://bugzilla.redhat.com/show_bug.cgi?id=2535607
- https://bugzilla.redhat.com/show_bug.cgi?id=2535613
- https://bugzilla.redhat.com/show_bug.cgi?id=2535614
- https://bugzilla.redhat.com/show_bug.cgi?id=2535615
- https://bugzilla.redhat.com/show_bug.cgi?id=2535617
- https://bugzilla.redhat.com/show_bug.cgi?id=2535618
- https://bugzilla.redhat.com/show_bug.cgi?id=2535621
- https://bugzilla.redhat.com/show_bug.cgi?id=2535622
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43023
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91097
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91098
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91099
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91100
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91101
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91102
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91103
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91104
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91105
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91106
- https://errata.almalinux.org/9/ALSA-2026-82882.html
- https://errata.rockylinux.org/RLSA-2026:82882
- https://linux.oracle.com/cve/CVE-2026-91098.html
- https://linux.oracle.com/errata/ELSA-2026-82883.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-91098
- https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151
- https://www.cve.org/CVERecord?id=CVE-2026-91098