Red Hat Enterprise Linux 8/rpm

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
rpm: heap buffer overflow in NDB slot table parsingCVE-2026-44605	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 10/rust-bootupd	Red Hat	Low	No fix reported	Not recorded
rpm: rpmbuild getTarSpec() crafted tar member name → macro injectionCVE-2026-78367	Red Hat Enterprise Linux 6/rpm Red Hat Enterprise Linux 7/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: Command Injection in `rpmbuild -t*` (`getTarSpec`) via Unescaped Tarball PathCVE-2026-84837	Red Hat Enterprise Linux 6/rpm Red Hat Enterprise Linux 7/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: Code Execution via Macro Expansion of Manifest Entries in `rpmgi` (`-q -p` / verify manifest flows)CVE-2026-95519	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 6/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source RPMCVE-2026-95521	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 6/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packagesCVE-2026-95520	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 8/rpm	Red Hat	Medium	No fix reported	Not recorded
rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tagCVE-2026-103242	Red Hat Enterprise Linux 10/rpm Red Hat Enterprise Linux 8/rpm	Red Hat	Medium	No fix reported	Not recorded