UBUNTU-CVE-2026-91099: Medium severity ubuntu/hplip vulnerability
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.16.3+repack0-1ubuntu0.1~esm2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.17.10+repack0-5ubuntu0.1~esm2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.20.3+dfsg0-2ubuntu0.1+esm2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.21.12+dfsg0-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.23.12+dfsg0-0ubuntu5.3 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.24.4+dfsg0-0ubuntu10.2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.24.4+dfsg0-0ubuntu8.3
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The published vector indicates local access is required. It does not require privileges, user interaction, or additional attack requirements.
What is the expected impact if exploitation succeeds?
The severity vector indicates low impact to confidentiality and integrity, with no impact to availability. It does not indicate impacts to subsequent systems.