[CLSA-2026:1792748907] rpm: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-23 23:36:21 UTC
Description:
- CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as one taken from a tarball by rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:dade756d916e79af8af55205dda812827055889c75e3189212a5d965edcb936c
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:009e2414352e3effb431935269a600d96fe3b540559492c7e858cc54f4bf2b75
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:03bb1e3a8d754fb0622975ac7c9dc067e47cdfdca3d08b047d9aabe4bfd00faf
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:b0dee2de9145bd02b27deeccbacc48bb33bad36b4c7183b64f5b31db838ea98e
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:1708049ea8f50813e9c92e0f5912772e88d79f3c1b98e0270e8bcb0880e16c08
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:68286e253a8d1be6843003a208742e808aa1c3172b7af8573811cb88ab1e1d50
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:cc8dae210bc8932d9f2bb32e4a28f0e1889deea7422656e194e1f7b87aececcc
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:efec6abdf190a822b5362c6e239b224915d78ec02a065eff169f0ad30e21316f
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:db7063ca70b65a184fbdd8d0629faeca7879e241df2cc84218df365d5b574589
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:687e31fbe5723b6c5652a05b56cebbbdf4acbb026f5844235ceddd176aaabfa9
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:2882858982d3bc7058d5e90b08d2f98d0af04df58f92b069c8bc9d910618c809
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:01991f2c5045cf7c5362695a5a3ecf2f2354eb51ede36fd0405aaf52522a44d9
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:ab8895235a2ba2d4ca064f7da6a2e93415ccb1e1002642529cc99f79a272e870
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:bacfe1a940fe36bbf91d0deeea34622d46531329900baebda8edb4efc07d8b84
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:b404f8ba90d0fcc5e0153127659c50056c4932b3f00e2c5225000beb505f9ef2
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:d9306169b4cc1393df0ddd53ee743878d1a202cc5a88b5e93677607075667019
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:6879f851a43d08993a3c839473618d32114a624553287b18a7a085d59b68440f
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:faa62586c8cd457e07f4ed8e1d50b9e3b24f834d325855be630a49bfe55ab992
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.