UBUNTU-CVE-2026-91101: Medium severity ubuntu/hplip vulnerability
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.16.3+repack0-1ubuntu0.1~esm2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.17.10+repack0-5ubuntu0.1~esm2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.20.3+dfsg0-2ubuntu0.1+esm2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.21.12+dfsg0-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.23.12+dfsg0-0ubuntu5.3 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.24.4+dfsg0-0ubuntu10.2 - Upgrade
Upgrade
ubuntu/hplipto a version that resolves this vulnerability.Fixed in 3.24.4+dfsg0-0ubuntu8.3
Event History
Frequently Asked Questions
What level of access would an attacker need?
The supplied vector indicates physical access is required. It also indicates no prior privileges or user interaction are required, with low attack complexity.
What is the primary security impact indicated by the severity vector?
The vector indicates a high availability impact. It indicates no impact to confidentiality or integrity.
Which installations should be investigated?
The affected software is identified as Ubuntu's hplip package. The provided information does not include affected or fixed package versions, so package version and update status cannot be determined from this record alone.