[El-errata] ELSA-2026-26335 Important: Oracle Linux 8 hplip security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-26335

http://linux.oracle.com/errata/ELSA-2026-26335.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
hplip-3.18.4-13.el8_10.x86_64.rpm
hplip-common-3.18.4-13.el8_10.i686.rpm
hplip-common-3.18.4-13.el8_10.x86_64.rpm
hplip-gui-3.18.4-13.el8_10.x86_64.rpm
hplip-libs-3.18.4-13.el8_10.i686.rpm
hplip-libs-3.18.4-13.el8_10.x86_64.rpm
libsane-hpaio-3.18.4-13.el8_10.i686.rpm
libsane-hpaio-3.18.4-13.el8_10.x86_64.rpm

aarch64:
hplip-3.18.4-13.el8_10.aarch64.rpm
hplip-common-3.18.4-13.el8_10.aarch64.rpm
hplip-gui-3.18.4-13.el8_10.aarch64.rpm
hplip-libs-3.18.4-13.el8_10.aarch64.rpm
libsane-hpaio-3.18.4-13.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/hplip-3.18.4-13.el8_10.src.rpm

Related CVEs:

CVE-2026-8631
CVE-2026-8632




Description of changes:

[3.18.4-13]
- Fix more leaks in hpcups

[3.18.4-12]
- OSH fixes after CVE-2026-8631

[3.18.4-11]
- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups

[3.18.4-10]
- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()