The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rpm-buildUpgrade rpm-plugin-syslogUpgrade rpm-plugin-imaUpgrade rpm-signUpgrade rpmUpgrade rpm-build-libsUpgrade rpm-debuginfoUpgrade python2-rpmUpgrade rpm-plugin-prioresetUpgrade python3-rpmUpgrade rpm-develUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-apidocsUpgrade rpm-plugin-selinuxUpgrade rpm-libs | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade rpm-plugin-auditUpgrade rpm-sign-libs-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-signUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-debugsourceUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-cronUpgrade rpm-sign-libsUpgrade rpm-libsUpgrade rpm-debuginfoUpgrade rpm-buildUpgrade rpm-plugin-imaUpgrade python3-rpmUpgrade rpm-plugin-prioresetUpgrade rpm-build-libsUpgrade rpm-plugin-audit-debuginfoUpgrade rpm-develUpgrade rpm-plugin-syslogUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpmUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-apidocsUpgrade python3-rpm-debuginfo | Sep 30, 2026 | Aug 24, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub