[CLSA-2026:1792769939] rpm: Fix of CVE-2026-84837
Type:
security
Severity:
Important
Release date:
2026-10-23 15:39:09 UTC
Description:
- CVE-2026-84837: do not macro expand or shell interpret the tarball file name passed to rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:6f8a5e8e098893dfa96836a79cb10ac940e6de1b2368c5d98853fa90003749fb
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:8e495559e06b4cd7958bedac8f812b3d97ae8be85f7965885b4f51122712606f
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:119c4d9ef716475ba476cca2278f1b864961620b10a60a8741347995cc86f534
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:336f5227270c3aad3aea785e0dc072a624ce2a027990de256a1f0b0bc5fd6f63
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:194e9b266c62e8d820e30e55da6a80f2d6fc5dd2f6a3b02d1c607d295fdfae84
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:0cab51778e2e386b1c53539bdeabed6a5e0627a29d0955171222e4855fbbc47c
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:8c25a7fef3ebb53e30c18683d9bb2e66c3cbd8df82cba0d973e3667f7e21ab97
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:36323e1735366a607ecb073edec02d189d688f152dc5558b658628f5950cb619
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:d309317f00c7212342bff77c86ecf3b1c90d8cf99f0aaa5d61857d024ddddb20
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:6d209ba590d9e7712cdc07b3d8c9d40e1088fca933e7fa982cc8a621a3ee09a3
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:67ee92895b7862bb6cca337243cf132f1ef8fe6f8d3219a88cfd531364fa00fb
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:dce80588e081a76ffaaceb5c29f7da1550da87cd3cd134682a6fa5b6497e7ed1
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:0b64e28878d628e04bcdcdd0972bbf93d4d1f69780773103927039333c737f21
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:057e7433884d46e7fda865da00bd0338eb2acfeb137483e676f97e17316ae126
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:9b34bba4e80155f169558648855c294232dfd54ce2ef0338d4dc120aadb0ad9c
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:94bb238b4a5b65d8893ec4e720959e528eea32343e49965d0b2c715b474558f6
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:cc51e29398b30b8ed34fa34e673ea04b82667e0380a53c2a44ae758177ab763b
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:bfc8c713b561fb7bb1d4c04dc5aae87a04dba4e90d282f88c2b7cbfe5da55483
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.