-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Jul 2026 17:39:02 +0200 Source: hplip Architecture: source Version: 3.21.2+dfsg1-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1137374 Changes: hplip (3.21.2+dfsg1-2+deb11u1) bullseye-security; urgency=high . * CVE-2026-8631 (Closes: #1137374) a potential security vulnerability might allow escalation of privileges and/or arbitrary code execution when handling crafted print data. * CVE-2026-8632 a potential security vulnerability might allow escalation of privileges and/or arbitrary code execution via operating system command injection. * with the help of Marc Deslauriers from Ubuntu, patches are extracted from hplip 3.26.4 Checksums-Sha1: 08cc51d649f4f15404cdf08bb1dd1683ae4cb1be 3225 hplip_3.21.2+dfsg1-2+deb11u1.dsc a6512efa21a3181bf686607650641ea2480eec5f 9342108 hplip_3.21.2+dfsg1.orig.tar.xz ec78fc715787297c2e1e649f0fb6bc876caf6348 142924 hplip_3.21.2+dfsg1-2+deb11u1.debian.tar.xz 6a97d4bd8e27ee828817e37ee786e3368914f973 8443 hplip_3.21.2+dfsg1-2+deb11u1_source.buildinfo Checksums-Sha256: 2d0474f9e80d48befabe94a74cb23ecddd80459ec34a703b4d170f1950999287 3225 hplip_3.21.2+dfsg1-2+deb11u1.dsc dddfcb28bdbea534d8ee6f9b3e96c7e43d684a7809cf71f86f2812a21e3380d1 9342108 hplip_3.21.2+dfsg1.orig.tar.xz b5c9565f03afead865b760dd6ff9922827cbd2b14b5ca600e6bdc4333f77f659 142924 hplip_3.21.2+dfsg1-2+deb11u1.debian.tar.xz fc18fff1c1df6270b9a439fc81c213689db73c7703b971c163ec363fa55e02f4 8443 hplip_3.21.2+dfsg1-2+deb11u1_source.buildinfo Files: 6148acd682748ec31ad5186628bea798 3225 utils optional hplip_3.21.2+dfsg1-2+deb11u1.dsc 79515f72adfdab996b095c97fa9af15c 9342108 utils optional hplip_3.21.2+dfsg1.orig.tar.xz da126c4e63bcd9196ea15920f3c17721 142924 utils optional hplip_3.21.2+dfsg1-2+deb11u1.debian.tar.xz e023f19b6335ba1b11ac945921197c78 8443 utils optional hplip_3.21.2+dfsg1-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmplvRZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR5gZD/9IdPj7n1xekaAGllVri8vvvWWzMnuG i2DpyM3628Scqr5QadKRh9BCKyYKG9JbsyyBYdxwCknjPFOKZtvH/R3LsQljoqsk m0QmZsGTu1IKQnnQfyTQwssrPXHoKPsimI4aE7+RE0tFXOHJpxN/lQKimwuiU7w5 g5mmH06pIumPoFmdBjgzEoAYVyZUE63eVTipJ0rtGBijpTBMadjWazgxA+OKwjIm fkS1k9Sg0cmept0i4PuyLpN4r/6dpzHOzw3kbJsv6jjCI9Sh5v+mgi6vYr6+8Km4 ZMcIs8abpnS+CoHRLxZUfieWfopODupT02vqVT+djyyVVAbczwpX3B/HCZ23MQWl KbyBvZBRtshVdyBP3llXhBPOdlIkk4lvXd/LWoc0dzqhZFOMLoCc/1xOK4L/hqtV U8qx8h/klmCiTdxItu/gBVe6IYPZ12ZEPCmfE3mTkEXR01vWiEJhfXKeK4yszUBy ZC6lWu04f2RM80t1rxelfbQ9O0A/vS6BJ18n1gHPIlRLQjtbQky+8FjwfN5RzawM GYYmtm2BT/BxnSOP4uZNTnGES6eBI03cYwhIVsJ/gQgJpEHBZE/Oo0VXJQllOiam X31vdxQRisEJSzrVJgX0/WIBdzbTY07KSNEvP3zlJse68uJcuujs5eqXl+VpSbqK CQkUzQFNueG51w== =db/N -----END PGP SIGNATURE-----
