Security
فارسی
All products

Red Hat Enterprise Linux 7/rpm

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
rpm: Following symlinks to files when installing packages allows privilege escalationCVE-2017-7501 Red Hat Enterprise Linux 5/rpmRed Hat Enterprise Linux 6/rpm Red Hat Medium No fix reported
rpm: Following symlinks to directories when installing packages allows privilege escalationCVE-2017-7500 Red Hat Enterprise Linux 5/rpmRed Hat Enterprise Linux 6/rpm Red Hat Medium No fix reported
rpm: missing length checks in hdrblobInit()CVE-2021-20266 Red Hat Enterprise Linux 6/rpmRed Hat Enterprise Linux 7/rpm Red Hat Low No fix reported
rpm: unsigned signature header leads to string injection into an rpm databaseCVE-2021-3421 Red Hat Enterprise Linux 6/rpmRed Hat Enterprise Linux 7/rpm Red Hat Medium No fix reported
rpm: checks for unsafe symlinks are not performed for intermediary directoriesCVE-2021-35939 Red Hat Enterprise Linux 6/rpmRed Hat Enterprise Linux 7/rpm Red Hat Medium No fix reported
rpm: TOCTOU race in checks for unsafe symlinksCVE-2021-35937 Red Hat Enterprise Linux 6/rpmRed Hat Enterprise Linux 7/rpm Red Hat Medium No fix reported
rpm: races with chown/chmod/capabilities calls during installationCVE-2021-35938 Red Hat Enterprise Linux 6/rpmRed Hat Enterprise Linux 7/rpm Red Hat Medium No fix reported
rpm: RPM does not require subkeys to have a valid binding signatureCVE-2021-3521 Red Hat Enterprise Linux 6/rpmRed Hat Enterprise Linux 7/rpm Red Hat Medium No fix reported
rpm: heap buffer overflow in NDB slot table parsingCVE-2026-44605 Red Hat Enterprise Linux 10/rpmRed Hat Enterprise Linux 10/rust-bootupd Red Hat Low No fix reported
rpm: rpmbuild getTarSpec() crafted tar member name → macro injectionCVE-2026-78367 Red Hat Enterprise Linux 10/rpmRed Hat Enterprise Linux 6/rpm Red Hat Medium No fix reported
rpm: Command Injection in `rpmbuild -t*` (`getTarSpec`) via Unescaped Tarball PathCVE-2026-84837 Red Hat Enterprise Linux 10/rpmRed Hat Enterprise Linux 6/rpm Red Hat Medium No fix reported
rpm: Code Execution via Macro Expansion of Manifest Entries in `rpmgi` (`-q -p` / verify manifest flows)CVE-2026-95519 Red Hat Enterprise Linux 10/rpmRed Hat Enterprise Linux 6/rpm Red Hat Medium No fix reported
rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source RPMCVE-2026-95521 Red Hat Enterprise Linux 10/rpmRed Hat Enterprise Linux 6/rpm Red Hat Medium No fix reported