OESA-2026-4510

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4510

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4510.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4510

Upstream

CVE (2)

CVE-2026-84837
CVE-2026-84838

Published

2026-10-22T14:36:01Z

Modified

2026-10-22T14:45:09Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

rpm security update

Details

The RPM Package Manager (RPM) is a powerful package management system capability as below

Security Fix(es):

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t* to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment.(CVE-2026-84837)

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell command strings. Successful exploitation requires user interaction, where a user or automated workflow invokes rpmuncompress on the malicious file, leading to high impact on the confidentiality, integrity, and availability of data accessible to the invoking user.(CVE-2026-84838)

Database specific

{
    "severity":  "High"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / rpm

Package

Name: rpm
Purl: pkg:rpm/openEuler/rpm&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.18.2-42.oe2403sp1

Ecosystem specific

{
    "aarch64":  [
        "python3-rpm-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-build-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-debuginfo-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-debugsource-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-devel-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-libs-4.18.2-42.oe2403sp1.aarch64.rpm",
        "rpm-plugin-systemd-inhibit-4.18.2-42.oe2403sp1.aarch64.rpm"
    ],
    "noarch":  [
        "rpm-help-4.18.2-42.oe2403sp1.noarch.rpm"
    ],
    "src":  [
        "rpm-4.18.2-42.oe2403sp1.src.rpm"
    ],
    "x86_64":  [
        "python3-rpm-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-build-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-debuginfo-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-debugsource-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-devel-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-libs-4.18.2-42.oe2403sp1.x86_64.rpm",
        "rpm-plugin-systemd-inhibit-4.18.2-42.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4510.json"