Debian alert DLA-4699-1 (hplip)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4699-1] hplip security update
Date:
             
 
Sun, 26 Jul 2026 08:48:04 +0000
Message-ID:
             
 
<f2f34bdf-b189-2e53-8be-c632393e9a45@alteholz.de>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4699-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
July 25, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : hplip
Version        : 3.21.2+dfsg1-2+deb11u1 3.22.10+dfsg0-2+deb12u1
CVE ID         : CVE-2026-8631 CVE-2026-8632
Debian Bug     : 1137374


Two issues have been found in hplip, the HP Linux Printing and Imaging 
System. They are both related to privilege escalation and/or arbitrary 
code execution.


For Debian 11 bullseye, these problems have been fixed in version
3.21.2+dfsg1-2+deb11u1.

For Debian 12 bookworm, these problems have been fixed in version
3.22.10+dfsg0-2+deb12u1.

We recommend that you upgrade your hplip packages.

For the detailed security status of hplip please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/hplip

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=6p14
-----END PGP SIGNATURE-----