Red Hat Enterprise Linux 10/rpm

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
rpm: heap buffer overflow in NDB slot table parsingCVE-2026-44605	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 10/rust-bootupd	Red Hat	Low	No fix reported	Not recorded
rpm: Command Execution via Macro Expansion in `rpmuncompress -x` for Crafted `.gem` FilenamesCVE-2026-84233	Red Hat Enterprise Linux 10/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: Command injection in rpmuncompress via unescaped filenames passed to popen()CVE-2026-84838	Red Hat Enterprise Linux 10/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: Code Execution via Macro Expansion of Manifest Entries in `rpmgi` (`-q -p` / verify manifest flows)CVE-2026-95519	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 6/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source RPMCVE-2026-95521	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 6/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packagesCVE-2026-95520	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 8/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tagCVE-2026-103242	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 8/rpm	Red Hat	Medium	No fix reported	Not recorded