CVE-2025-43023

EUVD-2025-22936
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
hplinux_imaging_and_printing
𝑥
< 3.25.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
hplip
bionic
ignored
focal
ignored
jammy
ignored
noble
ignored
plucky
ignored
questing
ignored
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
hplip
suse enterprise sap 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise server 12 SP3
3.26.4-3.8.1
fixed
suse enterprise server 12 SP5
3.26.4-3.8.1
fixed
suse enterprise server 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP6
3.26.4-150600.4.9.1
fixed
hplip-devel
suse enterprise desktop 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise sap 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise server 12 SP5
3.26.4-3.8.1
fixed
suse enterprise server 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP6
3.26.4-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.26.4-150700.4.3.1
fixed
hplip-hpijs
suse enterprise desktop 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise sap 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise server 12 SP3
3.26.4-3.8.1
fixed
suse enterprise server 12 SP5
3.26.4-3.8.1
fixed
suse enterprise server 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP6
3.26.4-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.26.4-150700.4.3.1
fixed
hplip-sane
suse enterprise desktop 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise sap 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise server 12 SP3
3.26.4-3.8.1
fixed
suse enterprise server 12 SP5
3.26.4-3.8.1
fixed
suse enterprise server 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP6
3.26.4-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.26.4-150700.4.3.1
fixed
hplip-udev-rules
suse enterprise desktop 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise sap 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise sap 15 SP7
3.26.4-150700.4.3.1
fixed
suse enterprise server 12 SP3
3.26.4-3.8.1
fixed
suse enterprise server 12 SP5
3.26.4-3.8.1
fixed
suse enterprise server 15 SP4
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP5
3.26.4-150400.3.22.1
fixed
suse enterprise server 15 SP6
3.26.4-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.26.4-150700.4.3.1
fixed
Common Weakness Enumeration
References
https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033
http://www.openwall.com/lists/oss-security/2025/08/22/4