SUSE-SU-2026:2380-1: critical: Security update for hplip
SLE-UPDATES
null at suse.de
Fri Jun 12 08:30:29 UTC 2026
# Security update for hplip
Announcement ID: SUSE-SU-2026:2380-1
Release Date: 2026-06-11T16:15:35Z
Rating: critical
References:
* bsc#1209401
* bsc#1234745
* bsc#1245358
* bsc#1250481
* bsc#1257529
* bsc#1266023
* bsc#1266024
* bsc#1266031
Cross-References:
* CVE-2025-43023
* CVE-2026-8631
* CVE-2026-8632
CVSS scores:
* CVE-2025-43023 ( SUSE ): 7.5
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-43023 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2025-43023 ( NVD ): 5.9
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2025-43023 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-8631 ( SUSE ): 9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-8631 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-8631 ( NVD ): 9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-8631 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-8632 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-8632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-8632 ( NVD ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-8632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.4
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
An update that solves three vulnerabilities and has five security fixes can now
be installed.
## Description:
This update for hplip fixes the following issues
Update to HPLIP 3.26.4:
Security issues:
* CVE-2025-43023: weak code signing DSA key used to generate package
signatures can lead to key spoofing and malicious software installation
(bsc#1266031).
* CVE-2026-8631: escalation of privileges and/or arbitrary code execution via
an integer overflow in the hpcups processing path (bsc#1266023).
* CVE-2026-8632: escalation of privileges and/or arbitrary code execution via
operating system command injection (bsc#1266024).
* unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS)
(bsc#1245358).
* URI parameter injection via unsanitized USB serial number (bsc#1209401).
Non security issues:
* Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
* hplip requires foomatic-filters which does not exist in Leap 16
(bsc#1250481).
Changes:
* Add support for the following new printers:
* HP LaserJet Pro MFP 3106sdw
* HP LaserJet Pro MFP 3105sdw
* HP Envy 6500e series
* HP Envy 6500 series
* HP OfficeJet Pro 9730 Series
* HP OfficeJet Pro 9730e Series
* HP OfficeJet Pro 9720 Series
* HP OfficeJet Pro 9720e Series
* HP OfficeJet Pro 8130e All-in-One series
* HP OfficeJet Pro 8130 All-in-One series
* HP OfficeJet 8130e All-in-One series
* HP OfficeJet 8130 All-in-One series
* HP OfficeJet Pro 8120e All-in-One series
* HP OfficeJet Pro 8120 All-in-One series
* HP OfficeJet 8120e All-in-One series
* HP OfficeJet 8120 All-in-One series
* HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
* HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
* HP DeskJet 4300e All-in-One Printer series
* HP DeskJet Ink Advantage 4300 All-in-One Printer series
* HP DeskJet 4300 All-in-One Printer series
* HP DeskJet 2900e All-in-One Printer series
* HP DeskJet Ink Advantage 2900 All-in-One Printer series
* HP DeskJet 2900 All-in-One Printer series
* HP LaserJet Enterprise Flow MFP 8601z
* HP LaserJet Enterprise 5501
* HP LaserJet Enterprise MFP 5601dn
* HP LaserJet Enterprise 6500dn
* HP LaserJet Enterprise 5501n
* HP LaserJet Enterprise MFP 5601
* HP LaserJet Enterprise 6500
* HP LaserJet Enterprise 5502dn
* HP LaserJet Enterprise MFP 5602dn
* HP LaserJet Enterprise 6500n
* HP LaserJet Enterprise 5502
* HP LaserJet Enterprise MFP 5602f
* HP LaserJet Enterprise 6501dn
* HP LaserJet Enterprise X50452dn
* HP LaserJet Enterprise Flow MFP 5602zfw
* HP LaserJet Enterprise 6501
* HP LaserJet Enterprise X50452
* HP LaserJet Enterprise MFP 5602
* HP LaserJet Enterprise X60257dn
* HP LaserJet Enterprise MFP X53052dn
* HP LaserJet Enterprise Flow MFP X530
* HP LaserJet Enterprise X60257
* HP LaserJet Enterprise MFP X53052
* HP LaserJet Enterprise X60357dn
* HP LaserJet Enterprise X60357
* HP LaserJet Enterprise MFP 6600dn
* HP LaserJet Enterprise Flow MFP 6600zfw
* HP LaserJet Enterprise MFP 6600
* HP LaserJet Enterprise Flow MFP 6600zfsw
* HP LaserJet Enterprise MFP X62757dn
* HP LaserJet Enterprise Flow MFP X62757zs
* HP LaserJet Enterprise MFP X62757
* DEX D50452dn
* DEX MFP D53052dn
* HP LaserJet Pro MFP M126a plus
* HP LaserJet Pro MFP M126nw plus
* HP LaserJet Pro MFP M126snw plus
* HP Envy Photo 7200 series
* HP Envy Photo 7900 series
* HP OfficeJet Pro 9110 Series
* HP OfficeJet 9120 Series
* HP OfficeJet Pro 9120 Series
* HP OfficeJet Pro 9130 Series
* HP LaserJet Enterprise Flow MFP 8601z+
* HP LaserJet Enterprise MFP 8601dn
* HP Color LaserJet Enterprise MFP 8801dn
* HP Color LaserJet Enterprise Flow MFP 8801z
* HP Color LaserJet Enterprise Flow MFP 8801z+
* HP LaserJet Enterprise 8501dn
* HP LaserJet Enterprise 8501x
* HP LaserJet Enterprise 8501x+
* DEX MFP D826
* DEX MFP D82640
* DEX MFP D82650
* DEX MFP D82660
* DEX D50145
* DEX MFP D42540
* DEX MFP D52645
* DEX Color D55745
* DEX Color MFP D57945
* DEX Color MFP D677
* DEX Color MFP D67755
* DEX Color MFP D67765
* DEX Color MFP D877
* DEX Color MFP D87740
* DEX Color MFP D87750
* DEX Color MFP D87760
* DEX Color MFP D87770
* DEX Color MFP D786
* DEX Colour MFP D78625
* DEX Color MFP D78630
* DEX Color MFP D78635
* DEX MFP D731
* DEX MFP D73130
* DEX MFP D73135
* DEX MFP D73140
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-2380=1
* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2380=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2380=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2380=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2380=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2380=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2380=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2380=1
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2380=1
## Package List:
* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-scan-utils-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-scan-utils-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* hplip-debugsource-3.26.4-150400.3.22.1
* hplip-devel-3.26.4-150400.3.22.1
* hplip-sane-debuginfo-3.26.4-150400.3.22.1
* hplip-sane-3.26.4-150400.3.22.1
* hplip-udev-rules-3.26.4-150400.3.22.1
* hplip-hpijs-3.26.4-150400.3.22.1
* hplip-3.26.4-150400.3.22.1
* hplip-debuginfo-3.26.4-150400.3.22.1
* hplip-hpijs-debuginfo-3.26.4-150400.3.22.1
## References:
* https://www.suse.com/security/cve/CVE-2025-43023.html
* https://www.suse.com/security/cve/CVE-2026-8631.html
* https://www.suse.com/security/cve/CVE-2026-8632.html
* https://bugzilla.suse.com/show_bug.cgi?id=1209401
* https://bugzilla.suse.com/show_bug.cgi?id=1234745
* https://bugzilla.suse.com/show_bug.cgi?id=1245358
* https://bugzilla.suse.com/show_bug.cgi?id=1250481
* https://bugzilla.suse.com/show_bug.cgi?id=1257529
* https://bugzilla.suse.com/show_bug.cgi?id=1266023
* https://bugzilla.suse.com/show_bug.cgi?id=1266024
* https://bugzilla.suse.com/show_bug.cgi?id=1266031
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260612/fb0f2823/attachment.htm>
More information about the sle-updates
mailing list