[CLSA-2026:1792770120] rpm: Fix of CVE-2026-84837
Type:
security
Severity:
Important
Release date:
2026-10-23 15:42:10 UTC
Description:
- CVE-2026-84837: do not macro expand or shell interpret the tarball file name passed to rpmbuild -t
CVEs fixed:
Updated packages:
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:fdfa308788c4d75d7bb85f8056fbfdfde81b00a403d95c81a05feacfc8ee5506
  • rpm-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:972f276c73b97b3d6c88e21b8fe3c52c554e5f12146bc08efe6d65a3d09583e4
  • rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:4555913c2d00f12971cfc9f22c6c9baa69684da469b9d0f1609651b82b746265
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:2a29b6659d346ca977c24c70bcae189387b363ed30bda9f206c1bb31ec55374b
  • rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:0cfb4040f7191fd1b9407c94841d4ec8188c75d2671565676cbd48077c06a0f7
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:bc291a599b7de4089a61f667761c0aac77deb17331bb256aa77feae1e022c709
  • rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:61a12f4f9b5380b069f5826df6538e88ad45971fe4706130e51a283608ba5a5d
  • rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els3.noarch.rpm
    sha:8bb66da6d74644125e8eb47f410ab54484809cca9e21c5877208628cd63f8847
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:3cf0f603eaa78ba9360882782298d32a474d3fd50446f9aa400bd1bcedfae9ba
  • rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:34af30545079faaeb239c823292bc8a09d2e9b16e113f05d7d062437c3612a03
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:a6a9776595a67a65781edf438dce1bd65af1551b0e590c000ec59080167c8f64
  • rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:8088b36058130a9900fcddd054e373dab9a943cc69f64cb15a5fedcceee82cbb
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:0ca2a1015bec4bc74128c1b9e7eed79cadd6f84feb907f7900f19542482de0be
  • rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:ce15a98bc61392977561af6d362e5374604f43e5ae209aeaad49619c4aa82eff
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:1e204a2b961f2f80762b636c063e9f8af08f4664398addfa72d02109b4da17fa
  • rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:206a8c10c17bbd942fd88cd1752b56ee4913861389211bb4547547bad5346d9c
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:f723ede816d8a76d87aa638a807f9ab16490b010dece69bfca89e4e0703d3b68
  • rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:e60f3ebecd7847cbf2c50798f791a19e75ddc911f87e391d632caa3572d3c57d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.