Bug#1110407: hplip: CVE-2025-43023

[Salvatore Bonaccorso <carnil@debian.org>]

Source: hplip
Version: 3.22.10+dfsg0-8.1
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>

Hi,

The following vulnerability was published for hplip.

CVE-2025-43023[0]:
| A potential security vulnerability has been identified in the HP
| Linux Imaging and Printing Software documentation. This potential
| vulnerability is due to the use of a weak code signing key, Digital
| Signature Algorithm (DSA).

There is not much information at this time, the upstream advisory [1]
might indicate it is fixed in 3.25.2.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-43023
    https://www.cve.org/CVERecord?id=CVE-2025-43023
[1] https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore