The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary commands with the privileges of the invoking account, leading to a compromise of confidentiality, integrity, and availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade rpm-sign-libs-debuginfoUpgrade rpm-debugsourceUpgrade rpm-buildUpgrade rpm-build-libs-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-cronUpgrade rpm-sign-libsUpgrade rpm-plugin-auditUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-libsUpgrade rpm-plugin-selinuxUpgrade rpm-develUpgrade rpm-plugin-fapolicydUpgrade python3-rpm-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-debuginfoUpgrade rpm-signUpgrade rpm-plugin-imaUpgrade rpm-plugin-audit-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpmUpgrade rpm-plugin-syslogUpgrade rpm-plugin-ima-debuginfoUpgrade python3-rpmUpgrade rpm-build-libsUpgrade rpm-plugin-syslog-debuginfo | Sep 30, 2026 | Sep 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub