-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Jul 2026 17:39:02 +0200 Source: hplip Architecture: source Version: 3.22.10+dfsg0-8.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1137374 Changes: hplip (3.22.10+dfsg0-8.1+deb13u1) trixie-security; urgency=high . * CVE-2026-8631 (Closes: #1137374) a potential security vulnerability might allow escalation of privileges and/or arbitrary code execution when handling crafted print data. * CVE-2026-8632 a potential security vulnerability might allow escalation of privileges and/or arbitrary code execution via operating system command injection. * with the help of Marc Deslauriers from Ubuntu, patches are extracted from hplip 3.26.4 Checksums-Sha1: ba25177fee8cd2de1ce145b4b87e60e8f3b61869 3276 hplip_3.22.10+dfsg0-8.1+deb13u1.dsc 7420f1d2ad61f86c9ac7db122f82ce59c8b0ad12 151068 hplip_3.22.10+dfsg0-8.1+deb13u1.debian.tar.xz 28942d9fa663e7fcfce32acb06a5c49b4df0d9aa 9473 hplip_3.22.10+dfsg0-8.1+deb13u1_source.buildinfo Checksums-Sha256: c8850e71d645d676e0252329f12caa6e22fda98af4e902b082e7376c6c6a800b 3276 hplip_3.22.10+dfsg0-8.1+deb13u1.dsc 5cd79967b76cfbc9902f530b5986b2bf1721a4d8b7bb3b6a437f15782703c547 151068 hplip_3.22.10+dfsg0-8.1+deb13u1.debian.tar.xz f9047a5c3fe6e4a0f7300937955b9105454691d7cad83c62d1d184fddc428457 9473 hplip_3.22.10+dfsg0-8.1+deb13u1_source.buildinfo Files: fc0ba81f01a9ef5996f3858be594fcf8 3276 utils optional hplip_3.22.10+dfsg0-8.1+deb13u1.dsc 28558d9f552b143063cb91d263e55b50 151068 utils optional hplip_3.22.10+dfsg0-8.1+deb13u1.debian.tar.xz 4c3e08b8b04795b73dff8ee55aea748a 9473 utils optional hplip_3.22.10+dfsg0-8.1+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmplz0ZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR9GgEACPV/7HDGhBjTVy9zLBOXeuP1s2xhG6 MqXGs2+7fc/WfH+bGgEe1QOiqE6Xm9l0CCY0FnV+oaOhDhzcmmBToDyibmlyCYL8 5FzFbeu3LzWt5d8F8OH/1qSAvcad/mf0aBYzWnlP6MPNlod/GCW0E5v9J2y8uCcq d95tz7sy2s4QzcmPdlD8Q4GwyFmUlP3apkKJWXBu5aBoQcMBi29jo0SFG6B4mmM0 rxIEpHPCnfloBwr77XKdr1jNAcbiSZRgqCEAq/+Z7rKIC20eJQ9a6wiJ4rOb9Ypw AoTfIJGtM5sANy1OnUdM4rf1X5+yO3U3CXM32hZPQEV7UKG3Pi5+h+Of8pFXnDPP ZJPvj2JAs72JeFM2GwIRt1uPgFxsGdVt0P8FIQgA0AtpcsVvANTT92anHC4WWzyR PGcHZg7gr4mULcLN+if6nyUdLCUyr1lq4POeexeJtslGU9MMXTx4aLmSdmdj2vMG jCM24Sim6k+K9kazYqD2T+TsDxgwg/o21SjZ6+WAXxAsMQrW8q/bXFhiY7W8alF/ qLPQ4defjpA+DA7z8hO/PJ8FO47c3g0oACsC/6LosQfj37fvS8Yi/tf3oR2otyQq Jph1DrpyGLLP4nVJcf6j+tEG/cx8ixeDDDxdfbfZXWmL5vabVFYG++TwMPnNvpyu WJMvO8V82E/M+A== =up9b -----END PGP SIGNATURE-----
