[CLSA-2026:1792688613] rpm: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-22 17:03:45 UTC
Description:
- CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as one taken from a tarball by rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:2bba05406a601738b0c155315207e7c56bac14a65985ec980f5a3bb32c6ab33e
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:8879af1e4590cb4bdc1e497aad0979538680fb9247a4d1be3e8ffd7b41daae26
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:5929d62d40ac5bb7fcd305e2bcd699cc68d8d73f1959c6fe0b1dc96310ce3909
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:e3072bf7e54563cd5fa90d39aaec032b2fbd1be990d10d0c433516a6a2f30655
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:e74054fe12e99d51901b4486e05a4992289fa994d445f5a4650845637275a51b
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:16e38f93597d5e9f08a7808bfedcccda32e2e20ddee59eaa3a5e814c298979c4
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:354aaa665b3e4d9733218fd7f80edda60f14827e7b8113e5cce9706264e15b71
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els2.noarch.rpm
    sha:6ada977c3d2ab9afc183bb9d817b87e35cfed8f4abc1e87e18fa0bbcd47a3d67
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:a74230b7c638877b836eb0781a44eb5ef48d97481b441fa80a1c1cf244532982
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:7d68720e3e03ab25a64e560606cf2697dcae56f76fa27db5db0e44d7c928ae1d
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:61f88bcd14378cad9e4fe6abdcfd08f8143e0453b2717de01dada11a952412e6
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:aadc0bcaf3db1475e540dac436354d933c7c43b9fcfa9eefa2d9264be008e7d4
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:01564263fcd4ab308f180bbb835a3f2c2a0a70ee9f7dce4a08d6feba7eda385a
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:879aa9ec69577f046af8b85db8018a29068f3abe3c1878ec4314c07710bc9a15
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:94210af0fd6a4a333b1e3c0114b3af74a86de6b4f41ad8dea2a859996f925f3b
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:0151145f2782857294fdfc28977ee7b195f30f94a1a32130943aab41f95bcfd5
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:394080eb2b8ea75cc090cc71b9d8185480bdad82ab9c50d92bb0d87ba579d0a8
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:2c3de7095d3c4734ae8dadc4545476def4df3abb2d70b5d846346a8b59ca3e03
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.