CLSA-2026-1792688613

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792688613
Upstream
CVE (3)
  • CVE-2026-78367
  • CVE-2026-95519
  • CVE-2026-95521
Published
2026-10-22T17:03:45Z
Modified
2026-10-26T09:43:50Z
Summary
rpm: Fix of 3 CVEs
Details
  • CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them
  • CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM
  • CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as one taken from a tarball by rpmbuild -t
References

Affected packages

TuxCare:OracleLinux:7
rpm

Package

Name
rpm
Purl
pkg:rpm/tuxcare/rpm?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-apidocs

Package

Name
rpm-apidocs
Purl
pkg:rpm/tuxcare/rpm-apidocs?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-build

Package

Name
rpm-build
Purl
pkg:rpm/tuxcare/rpm-build?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-build-libs

Package

Name
rpm-build-libs
Purl
pkg:rpm/tuxcare/rpm-build-libs?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-cron

Package

Name
rpm-cron
Purl
pkg:rpm/tuxcare/rpm-cron?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-devel

Package

Name
rpm-devel
Purl
pkg:rpm/tuxcare/rpm-devel?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-libs

Package

Name
rpm-libs
Purl
pkg:rpm/tuxcare/rpm-libs?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-plugin-systemd-inhibit

Package

Name
rpm-plugin-systemd-inhibit
Purl
pkg:rpm/tuxcare/rpm-plugin-systemd-inhibit?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-python

Package

Name
rpm-python
Purl
pkg:rpm/tuxcare/rpm-python?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"
rpm-sign

Package

Name
rpm-sign
Purl
pkg:rpm/tuxcare/rpm-sign?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.3-48.0.3.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792688613.json"