The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rpm-apidocsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-cronUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-plugin-selinuxUpgrade rpm-build-libsUpgrade rpm-plugin-prioresetUpgrade python3-rpmUpgrade python2-rpmUpgrade rpm-signUpgrade rpm-plugin-imaUpgrade rpm-buildUpgrade rpmUpgrade rpm-debuginfoUpgrade rpm-plugin-syslog | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade rpm-apidocsUpgrade rpmUpgrade python3-rpmUpgrade rpm-plugin-audit-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-buildUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-debuginfoUpgrade rpm-develUpgrade rpm-plugin-imaUpgrade rpm-build-libsUpgrade rpm-plugin-syslogUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-sign-libsUpgrade rpm-libsUpgrade rpm-plugin-fapolicydUpgrade rpm-build-debuginfoUpgrade rpm-sign-libs-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-signUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-auditUpgrade rpm-libs-debuginfoUpgrade rpm-debugsourceUpgrade rpm-plugin-prioreset-debuginfo | Sep 30, 2026 | Aug 24, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub