[CLSA-2026:1792771843] rpm: Fix of CVE-2026-84837
Type:
security
Severity:
Important
Release date:
2026-10-24 17:15:00 UTC
Description:
- CVE-2026-84837: do not macro expand or shell interpret the tarball file name passed to rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:6e035b567496245040fc3110ac51128f2cd336d20eeeefb659e7bb8f5c7c603e
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:19ef8349981fa05320234362080793edee4dd0398df3deee8246d5a061c488ff
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:434476c06dbbad611d7d5214d06fa8496daff898e944f0457bc3a57b725d27aa
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:e4c3cb4ad1e90546ae419d19c4424fe669b368ba63ec117b95c51bad481d0311
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:7bf090912f87b061311849746ea506d0a6d48b1fdedc48d088d60f2463614db0
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:c93739012c077864660dbf2c72f88368863f681cca11da1cf96625100cb07ac8
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:b899dfce786a6fb5c363860ee662d5bdcd482bde2e4059baf6c71eea1636f5ce
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:9018409b08b572183d074c332b80ede9fa1cfcf7c656075ab5b4e3c58bdce5b3
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:106ab76e636118873460acec46809eabd86545dc190687f97b4e7d7795c5229c
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:3673da0226f04d6f13f5f5d8e7c350b69da0c88b890d54ae28f6f5ea25a79a99
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:9d59193629eca040866375b8c1eb1fceb8327e0bf068787cad919ef3fd940b04
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:ca664fcaa3f95d1fe5ee0aff0f3040f53f9e1c4d6ba1f5882114e60086d55294
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:f9cdc23dd99c42629d3e8801498900163ceeea978dae4a75a8b79b6c6ffac242
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:5e5e9b1e02abfe7975798c4fa899b9570ddd42790817689574240a59c29f8593
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:0982a0c7dc4ea49a6a89f3d140d9e3e44f16d7187b0301ebdfc76d236cc8c6f4
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:5753b070ed94c6bafdc6919d7d4161d4dd46e92725dde10bda99f8809758a374
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:2b4c2f7f963b27c92e83b68ac39f0f70914dd725287548a957661f17ebc6d852
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:14c2afae92cf0b3a4ad3f6b75b134532401b7b467c40aeff7a09a6db980eda7d
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:c9cb33080f2139254882f02f2e5b3d3c52323bbb52bbdc32a81e750e33b7319d
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:a63bf05b154e2486fc6168f8c68b5f071f9a5a42c692a19b0a71f577ec1a346d
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:e682897a311e61000370558a84621f6805042a6d529122690ddf3eb1a87a81af
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:c23138629bf250b27aa2fa823d0cf327006a2939a88854bae7bbf94007e41f03
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:8a43d11ecbc6222ccc437142bc4910ba0ccc46e850a399fc42df26ebd9dc83c0
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.aarch64.rpm
    sha:d0935ffc8a6f508cd88e5023d0387560ee29fd31800fb6a329e06a7c5ad4519c
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:ba603f884ce85bb1bfe84841c9ee2eda46ab337f70aa9a47f1ac4976074b48c5
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:d12961fd61ec0d80c53e9f25b50bb81e7947462fcdb52a6f7d08af87c614d775
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.