-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Jul 2026 17:39:02 +0200 Source: hplip Architecture: source Version: 3.22.10+dfsg0-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1137374 Changes: hplip (3.22.10+dfsg0-2+deb12u1) bookworm-security; urgency=high . * CVE-2026-8631 (Closes: #1137374) a potential security vulnerability might allow escalation of privileges and/or arbitrary code execution when handling crafted print data. * CVE-2026-8632 a potential security vulnerability might allow escalation of privileges and/or arbitrary code execution via operating system command injection. * with the help of Marc Deslauriers from Ubuntu, patches are extracted from hplip 3.26.4 Checksums-Sha1: fc6fe00b277bcd3c14628068e79cf92038296b2d 3244 hplip_3.22.10+dfsg0-2+deb12u1.dsc 23a555728afa70f5460d7d226c7ea6358a2e7d6f 9317100 hplip_3.22.10+dfsg0.orig.tar.xz 1ce183b50d4a684de62d19439d5a1a18d18ce1b4 143836 hplip_3.22.10+dfsg0-2+deb12u1.debian.tar.xz e44ee0c568b3428f68825dd091701ebc23a04cbd 8447 hplip_3.22.10+dfsg0-2+deb12u1_source.buildinfo Checksums-Sha256: 9a481429817919db0a1b515dbf44ebd34d8c3402edc88be01e79c530ef0babc3 3244 hplip_3.22.10+dfsg0-2+deb12u1.dsc 29f71f08db5d5fc04e43cd6099de15a58358745b4a8c27779b07599767612b9e 9317100 hplip_3.22.10+dfsg0.orig.tar.xz f100d4536df890a414bcdd89ec2ee8d893a05e924541d98445edaab7021d5090 143836 hplip_3.22.10+dfsg0-2+deb12u1.debian.tar.xz 4154ad4bad698c7affe1c430433acf93d0e82172d0ece4f6ba9e5b672e84d7af 8447 hplip_3.22.10+dfsg0-2+deb12u1_source.buildinfo Files: 7d837ba88cb237458875f0ec438ad695 3244 utils optional hplip_3.22.10+dfsg0-2+deb12u1.dsc a9efe85d40c4a33b42ca497ac20ee504 9317100 utils optional hplip_3.22.10+dfsg0.orig.tar.xz 612bfa340792b545ca74b876b990a289 143836 utils optional hplip_3.22.10+dfsg0-2+deb12u1.debian.tar.xz 9b054b11a16e3853fd78b23a53cca86c 8447 utils optional hplip_3.22.10+dfsg0-2+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmplvRBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR1RqEACqOFZq7l72vQe3Vq1cHoPWXWGwF8fC QNPNi2aogQfPjmK7Ogg3sI/2iJ9520BUJMDu7xO5sycvkCGka9e2xRwaPpY0v7eZ 873MzxnmUlsAiXjC+kuxWUF0NX6SoyEnfL6WDeSuDN7rErxTBeoPb+Dlrf4m/0gD Wn1+BuwCdzuhZ5Wb1chkKhTo5fVN4MaXP3R3/jo04okqxEmiHiCLfhxDdD01kdiO roRkxAt/4UCAjrZFJktZcL0d3ABfbhqJYp31DFY6aluUu7uD0SNejuxx+hzSIkry tAmmhVclZPLT0aQ4grUBQGD0cgg/CABzvpDy4jbYzfhmkrOU8iH+ckJM7lVjYhJQ zFUJgk3smjHQo0aaLJPsiwl6T2zvAsHU193HYCipefr94nCc4Ycb3/0A44+kB8ML ywrBeQNJ0SJeHlRYRIoalnNRKgrclbSRXitGJFwRBJLYmWpMMP/BF8oSKILlwQvj 3g/7Cpzr1gCu+VLSbewkh0HuoN2hZc2L3UGwY/e3yptk9w+wSEiHk1meiNPspczX J0hTKtaswHUOqCAgMHQBQ4tAfam8G8ug27KxKtnwyh//Oroy9en/0HDJpYqojoH2 wB4oFQvxp2eaEGWUNE/7EtA72ZglrTCVkNTjlTbr7sTQQMs7ixGdPijbomXHV4SP XRntC9fNhtPlNw== =0W8F -----END PGP SIGNATURE-----
