[CLSA-2026:1792792880] rpm: Fix of CVE-2026-84837
Type:
security
Severity:
Important
Release date:
2026-10-24 19:14:18 UTC
Description:
- CVE-2026-84837: do not macro expand or shell interpret the tarball file name passed to rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:2f8682f5b67b848af4df271def53d115f66c9b40a66202a80f4627ea4857473e
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:5a97dd95b7cde11e031f1f4a502aba23a36f3cdfb4196e8f3562bd2abbf0e5d0
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:e2e1e3a9b1db7413bd278c8a920a88e12e24cdba21c03debeb9f04527a6e3998
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:24a19726e90613ca523ee46c97fd198895fad3929a803a1211e46fa0622d1ea2
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:47b1bb9e178454e5e19516e8cb6cb9a3e5bc875e19d25763ce8a562d1a28b312
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:ac668c2370078a4b8d594a74be45adfe8cddab3115654415115f9cdfe0d44652
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:f76966c2655b357fbf67118e5f47adc9db0d26f83db23688ee0e5a6ad9bd7986
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:0ee88866456f75687fa366640e2951d1e58e1bf90335d80d43149dfb7e279b94
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:8c47a5a9252fc1927dfff38570811f996d66aad48eeb45f065fe04ae95d02e8b
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:a5cdcc779e28dca702640b4da328d8cdfbaf88e9e024f3890418b54ba436189b
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:76a03ef01a121618fdc2c19203fba2fb5965258b24978d1deb77f15b50d33cd8
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:1a0968a1583a416819d1861303d5d1aaae69f9e23da52642bddb2b8f52aef945
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:40475cce9f7427083603e90671e6373529a3d37516acaff63af65fa03626bc1d
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:3edbb64df8e5ad23f97cf51fd07104d102d458ee2e67f8229a6381f275ce3bf0
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:86d77a38f175d22eaa1227225d1a1bcf08772e8d76748e212f333b5644c8061a
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:e874fc1727179b2329cb351a0c46f013bc992e6eeadd552f9d92a78927d3e695
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:e6b12a762d5c335cda5d47b725988bc26a046edb5352b67112843b805fdae01a
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:0c0b88d450c50fc827ea992c4d919289c6ea6e08a6ed936ebf6598916a995ecb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.