[CLSA-2026:1792689108] rpm: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-22 17:12:00 UTC
Description:
- CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as one taken from a tarball by rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:cb509979c98611d0faf33b027a502f883594ba8337938162967a4e669ff68b7d
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:eb23be23699ad8daf75efb9ce3b31ec17231afc98fe3b61131b8cd527063a5ff
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:23c98f9aa972adbd41383a358a6b90d8e51a35da0c35c4993cbd437112359a67
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:65933876b1c7a8a518d52a43c3093e3f4c2e64c1148dcb5a68d56aaccf69d3af
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:af509d9f166d9f3f5f867b686657d1a094d8cfbd61a63b7f817c66c9a65007ba
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:6540b5eed17388a34d5c7ca749a8861687d5fcf92a7b4da466148a5f07093258
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:ed344ec31d9b57fe7e28056013645ae800ebf34e741b1cb73ae0c10ea56d0869
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:cde7996dd29a4d532b9c1caa3bc01d9f5fa351e92c2a66f9c679c54ad31cf87b
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:46355932fe5706682d95d8ed17929d99954cf57982a5dfd27c6bbf82fe6a4a96
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:c8c0c9fc3380c48e9fc395f4c35ed95fcdc7497236955c18a22a682265dd2647
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:e4e4edf541a0a7367e60b7688524917ca8c91d88598c0a7f3c855062ac1b04fe
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:9134d7c9331a7a2eadc951d372562d01b08822eaa85c5f93b5d55d705fb85ea2
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:f466014189718e411447ea88b68e986324b4bf135e52456117cde9ca60b4d344
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:e517a5b753d3148d41884cafd3ce53cbf12287c5e0b72d17abeba15ce27091c7
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:a71bac80f4849309aff0b28505205e21f5f184dcd63253a9d8c6f2fc60db2784
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:bcc4458b2932b5311fa151a1ab11f9b4fb2a0c48a45760d5f03d4681698eec06
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:879496aeafda803626b575e81f99484b54c45b27cd9543f1ae9a8740c9168d6c
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:def37ecfaaa8b4ac84609796f028d53e16e048ca1224fa3c1ed19ec52621b56d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.