RPM: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 2

• High 7.8
  CVE-2026-95519

  Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

  A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpected…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 24, 2026
• High 7.8
  CVE-2026-95521

  Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

  A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. Th…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 24, 2026

Revision history

1. 2026-11-12 #3

   Neue Updates von Amazon aufgenommen

2. 2026-11-09 #2

   Neue Updates von Amazon aufgenommen

3. 2026-09-24 #1

   Initiale Fassung

References

• GitHub Security Advisory GHSA-7prr-g333-3h48 vom 2026-09-24
  https://github.com/advisories/GHSA-R6WM-889R-JQV7
• GitHub Security Advisory GHSA-7prr-g333-3h48 vom 2026-09-24
  https://github.com/advisories/GHSA-7prr-g333-3h48
• Red Hat Bugzilla Bug 2470977 mit PoC
  https://bugzilla.redhat.com/show_bug.cgi?id=2470977
• Red Hat Bugzilla Bug 2537812 mit PoC
  https://bugzilla.redhat.com/show_bug.cgi?id=2537812
• Amazon Linux Security Advisory ALAS2MOCK2-2026-003 vom 2026-11-10
  https://alas.aws.amazon.com/AL2/ALAS2MOCK2-2026-003.html
• Amazon Linux Security Advisory ALAS2MOCK2-2026-004 vom 2026-11-10
  https://alas.aws.amazon.com/AL2/ALAS2MOCK2-2026-004.html
• Amazon Linux Security Advisory ALAS2-2026-4076 vom 2026-11-10
  https://alas.aws.amazon.com/AL2/ALAS2-2026-4076.html
• Amazon Linux Security Advisory ALAS2MOCK2-2026-005 vom 2026-11-12
  https://alas.aws.amazon.com/AL2/ALAS2MOCK2-2026-005.html
• Amazon Linux Security Advisory ALAS2-2026-4097 vom 2026-11-12
  https://alas.aws.amazon.com/AL2/ALAS2-2026-4097.html
• Amazon Linux Security Advisory ALAS2MOCK2-2026-006 vom 2026-11-12
  https://alas.aws.amazon.com/AL2/ALAS2MOCK2-2026-006.html