Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux ipp-usb can misinterpret IPv6 addresses
published 6 months ago
Summary
The ipp-usb component that lets your system print over USB may read IPv6 web addresses incorrectly. This could let a malicious URL be treated as a trusted one, possibly causing unwanted actions on the printer. Install the latest AlmaLinux update for ipp-usb as soon as possible to fix the problem.
What to do
- Update almalinux ipp-usb to version 0.9.27-5.el10_1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | ipp-usb |
< 0.9.27-5.el10_1.1 Fix: upgrade to 0.9.27-5.el10_1.1
|
Original advisory text
Important: golang-github-openprinting-ipp-usb security update
HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables
driverless support for USB devices capable of using IPP-over-USB protocol.
Security Fix(es):
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
driverless support for USB devices capable of using IPP-over-USB protocol.
Security Fix(es):
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:7992 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-25679 Third Party Advisory
- https://bugzilla.redhat.com/2445356 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2026-7992.html Vendor Advisory
Timeline
Published14 Apr 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2026:7992 · OSV
Track software like this
Free during beta