[El-errata] ELSA-2026-26297 Important: Oracle Linux 9 hplip security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Fri Jun 26 05:00:44 UTC 2026


Oracle Linux Security Advisory ELSA-2026-26297

http://linux.oracle.com/errata/ELSA-2026-26297.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
hplip-3.21.2-6.el9_8.4.x86_64.rpm
hplip-common-3.21.2-6.el9_8.4.i686.rpm
hplip-common-3.21.2-6.el9_8.4.x86_64.rpm
hplip-libs-3.21.2-6.el9_8.4.i686.rpm
hplip-libs-3.21.2-6.el9_8.4.x86_64.rpm
libsane-hpaio-3.21.2-6.el9_8.4.i686.rpm
libsane-hpaio-3.21.2-6.el9_8.4.x86_64.rpm

aarch64:
hplip-3.21.2-6.el9_8.4.aarch64.rpm
hplip-common-3.21.2-6.el9_8.4.aarch64.rpm
hplip-libs-3.21.2-6.el9_8.4.aarch64.rpm
libsane-hpaio-3.21.2-6.el9_8.4.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/hplip-3.21.2-6.el9_8.4.src.rpm

Related CVEs:

CVE-2026-8631
CVE-2026-8632




Description of changes:

[3.21.2-6.4]
- Fix more leaks in hpcups

[3.21.2-6.3]
- OSH fixes after CVE-2026-8631

[3.21.2-6.2]
- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups

[3.21.2-6.1]
- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()




More information about the El-errata mailing list