CVE catalog

CVE-2025-43023

hplip-3.26.4-1.1 on GA media

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: Jul 28, 2025, 5:46:46 PM UTC
Updated: Jun 30, 2026, 6:15:41 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.27% · Oct 25, 2026

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	hplip	16.04	`3.15.7-0ubuntu4`	vulnerable
Ubuntu	hplip	16.04	`3.15.7-0ubuntu5`	vulnerable
Ubuntu	hplip	16.04	`3.15.11-0ubuntu1`	vulnerable
Ubuntu	hplip	16.04	`3.15.11+repack0-1`	vulnerable
Ubuntu	hplip	16.04	`3.15.11+repack0-1ubuntu1`	vulnerable
Ubuntu	hplip	16.04	`3.16.2+repack0-1`	vulnerable
Ubuntu	hplip	16.04	`3.16.2+repack0-1ubuntu1`	vulnerable
Ubuntu	hplip	16.04	`3.16.2+repack0-3`	vulnerable
Ubuntu	hplip	16.04	`3.16.3+repack0-1`	vulnerable
Ubuntu	hplip	18.04	`3.17.7+repack0-3`	vulnerable
Ubuntu	hplip	18.04	`3.17.10+repack0-1`	vulnerable
Ubuntu	hplip	18.04	`3.17.10+repack0-2`	vulnerable
Ubuntu	hplip	18.04	`3.17.10+repack0-3`	vulnerable
Ubuntu	hplip	18.04	`3.17.10+repack0-4`	vulnerable
Ubuntu	hplip	18.04	`3.17.10+repack0-5`	vulnerable
Ubuntu	hplip	20.04	`3.19.6+dfsg0-1ubuntu1`	vulnerable
Ubuntu	hplip	20.04	`3.19.8+dfsg0-7`	vulnerable
Ubuntu	hplip	20.04	`3.19.11+dfsg0-1`	vulnerable
Ubuntu	hplip	20.04	`3.19.12+dfsg0-1`	vulnerable
Ubuntu	hplip	20.04	`3.19.12+dfsg0-2`	vulnerable
Ubuntu	hplip	20.04	`3.19.12+dfsg0-3`	vulnerable
Ubuntu	hplip	20.04	`3.19.12+dfsg0-3ubuntu1`	vulnerable
Ubuntu	hplip	20.04	`3.19.12+dfsg0-4ubuntu1`	vulnerable
Ubuntu	hplip	20.04	`3.20.3+dfsg0-1`	vulnerable
Ubuntu	hplip	20.04	`3.20.3+dfsg0-2`	vulnerable
Ubuntu	hplip	20.04	`3.20.3+dfsg0-2ubuntu0.1`	vulnerable
Ubuntu	hplip	22.04	`3.21.6+dfsg0-0ubuntu1`	vulnerable
Ubuntu	hplip	22.04	`3.21.8+dfsg0-2`	vulnerable
Ubuntu	hplip	22.04	`3.21.12+dfsg0-1`	vulnerable
Ubuntu	hplip	22.04	`3.21.12+dfsg0-1ubuntu0.1`	vulnerable
Ubuntu	hplip	24.04	`3.22.10+dfsg0-2ubuntu1`	vulnerable
Ubuntu	hplip	24.04	`3.22.10+dfsg0-2ubuntu2`	vulnerable
Ubuntu	hplip	24.04	`3.23.12+dfsg0-0ubuntu4`	vulnerable
Ubuntu	hplip	24.04	`3.23.12+dfsg0-0ubuntu5`	vulnerable
Ubuntu	hplip	24.04	`3.23.12+dfsg0-0ubuntu5.1`	vulnerable
Ubuntu	hplip	25.10	`3.24.4+dfsg0-0ubuntu5`	vulnerable
Ubuntu	hplip	25.10	`3.24.4+dfsg0-0ubuntu5.2`	vulnerable
Suse	hplip	linux enterprise high performance computing 15 sp4-espos	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise high performance computing 15 sp4-ltss	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise high performance computing 15 sp5-espos	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise high performance computing 15 sp5-ltss	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise server 15 sp4-ltss	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise server 15 sp5-ltss	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise server for sap applications 15 sp4	`3.26.4-150400.3.22.1`	fixed
Suse	hplip	linux enterprise server for sap applications 15 sp5	`3.26.4-150400.3.22.1`	fixed
Opensuse	hplip	tumbleweed	`3.26.4-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Suse	hplip	rpm	linux enterprise high performance computing 15 sp4-espos	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise high performance computing 15 sp4-ltss	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise high performance computing 15 sp5-espos	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise high performance computing 15 sp5-ltss	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise server 15 sp4-ltss	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise server 15 sp5-ltss	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise server for sap applications 15 sp4	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Suse	hplip	rpm	linux enterprise server for sap applications 15 sp5	`3.26.4-150400.3.22.1`	Not reported	SUSE-SU-2026:2380-1	Not reported
Opensuse	hplip	rpm	tumbleweed	`3.26.4-1.1`	Not reported	OPENSUSE-SU-2026:10860-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[hplip-base]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-common]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-cups]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-devel]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-driver-hpcups]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-ppds-fax]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-ppds-hpcups]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-ppds-hpps]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-ppds-plugin]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-ppds-postscript]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · noarch · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-sane]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-scan-utils]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip-utils]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[libhplip0]Unknown
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.26.4-1.1
  Version impact unknown
  pypi · hplip · opensuse · tumbleweed
[hplip]Fixed
Source package: [hplip]
Details (1)
- 3.26.4-2.3 · x86_64 · tumbleweed
  Fixed · Fixed: 3.26.4-1.1
  pypi · hplip · opensuse · tumbleweed

Observed: Oct 27, 2026, 12:32:02 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]