Critical Security Update for HPLIP Packages: Addressing Incomplete Fix for CVE-2026-8631
Summary
ALSA-2026:40894: Important: hplip security update. Affects hplip versions < 3.18.4-14.el8_10.alma.1. Fixed in 3.18.4-14.el8_10.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Hewlett-Packard Linux Imaging and Printing (HPLIP) project provides essential drivers for HP printers and multi-function devices on Linux systems. The hplip package is crucial for enabling seamless printing and scanning functionalities. However, vulnerabilities in these packages can expose systems to security risks, necessitating timely updates and patches.
Vulnerability Detail
The vulnerability stems from an incomplete fix for CVE-2026-8631, which was initially addressed but remains partially unresolved, leading to potential exploitation. This could allow unauthorized access or manipulation of printer functionalities, posing risks to sensitive data and system integrity. The associated CVE-2026-14544 further emphasizes the need for immediate attention to this issue.
How To Fix
Minimum fixed version
3.18.4-14.el8_10.alma.1
This is the first release that contains the fix.
sudo dnf update hplipTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected functionalities of the HPLIP packages until the update is applied. This can be done by removing or commenting out the relevant configuration settings in the printer setup files.
Conclusion
The HPLIP packages are critical for HP printer functionalities on Linux systems, but they are currently vulnerable due to an incomplete fix for CVE-2026-8631. It is essential to update to the latest patched version to mitigate risks. Users are encouraged to utilize tools like Vulert for ongoing monitoring of vulnerabilities.
See every vulnerability recorded for hplip →
FAQ
The vulnerability could allow unauthorized access to printer functionalities, potentially leading to data breaches or system manipulation.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without any installation.
Yes, not updating could leave your system exposed to potential exploits that may compromise sensitive information or system integrity.
Consider disabling the affected functionalities as a temporary workaround until you can apply the necessary updates.
Detailed information can be found on the CVE pages for CVE-2026-14544 and CVE-2026-8631, which provide insights into the vulnerabilities and their implications.
Related vulnerabilities
Recent vulnerabilities recorded for hplip.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
