[CLSA-2026:1792689093] rpm: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-25 22:51:33 UTC
Description:
- CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as one taken from a tarball by rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:4d47db67c7379500bf5bbd653176dc644c834b45bd1e0c78d59ec4c7323c7f16
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:09cc8109f50cdc63433fbf7e2505a71a3d7c9d8775c88c2f995e5e3cbf368f07
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:17974f24134073885059fc80817dc755cbdab8690a362ac1532b19687235ee6f
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:7cb5218652e0e27cd8528b2073708eec0a920ed3f1fb327a29f9872b96b35ed8
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:6dbd9663d6dc0d543421aee6ca0241e7f7f47923d7c604350a2bd9ec33beb919
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:edcf4b0ea06fbf57185dd435ba28b015acb4bfdd70404f8b7b83d28741b505a9
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:c532a4af743d0f97048a58ab08c4ce9ca4adb2586efbb160f659cb4a912dcded
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:734e192e1ef9eb64e8d0b20373bf0a1360115f9f247d430bfadcdcdf203317e7
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:7cedc2b7d16290983974eeca05c3195b6f6ebf29c515594213de621f7e964126
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:ba1b671dfc093e0fc12581f4db36ac48e72685552167937b306c313e16b97c64
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:461bba3b6d921d2a24e7c3a841c4ff9a58add5d2e0ea05a06af561e4b8025b0d
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:ac1f1d983a6ec892475c47058d5e31295d957b4a111bc65edd70ffbd751893a5
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:a9645ed3b76d5d46ea765351b069a134d01d648e4f0c7c97a19d98e871a7c519
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:620f4b109bc59bdac918192fce0d73fff47fff9d1143813c10476b1e04d836bb
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:8a031a7332d81601bd80bf6e4b7a77b05c7ad06f13a409efb8b5f643d24bcce7
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:9458dadabebf07f532fee77d97dc21b0b070a80ce309e3033c8f3a87a1158185
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:39fd5c18c6905c04d5ca767a10cf45eabb69b38eb50442db1c9ed0023d639d30
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:4a79460dba65a9c611ab34513ebdb56163b4a02e3d4c16ef331929762d094e6c
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:30e96b87af003196914d663dae54dbc3a8af8615c09e0c365137d318415e96f0
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:edc486f838fbebc1b1e9847d9b857605422a252ea96e5014a8790257393749b1
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:edc3c29d83d192e978f044aa7cfddd52fd5150804f61cb8a3fc95e93b0ad0277
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:d80b73390f57848d192b7697b6efe7e43f9478e5a2dd3491ef9b703b33f88d4b
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:c903177af938efd5053720a43f974bf8c3ab2e0ebe81f63b119aefea9ae56223
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.aarch64.rpm
    sha:106fc76283a946a98a5b0a8b9665bfd26e9181c6496fa8048962eff0499d7ed7
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:bfb72d0f799f9f026e393d85b171507d4149ee38f5115691e453f828965edf04
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:d288e053d00e4732e5c658c3eef035495647837737e6ba7d19a4efa577886db8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.