Lucene search
+L

Important: rpm

🗓️ 12 Nov 2026 00:00:00Reported by AmazonType 
amazon
 amazon
🔗 alas.aws.amazon.com👁 4 Views

Heap buffer overflow and command injection in rpm via untrusted packages.

Related
Packages
ReporterTitlePublishedViews
Family
amazon
Amazon
Important: rpm
12 Nov 202600:00
–amazon
amazon
Amazon
Important: compat-rpm-411
12 Nov 202600:00
–amazon
amazon
Amazon
Important: rpm
12 Nov 202600:00
–amazon
circl
Circl
CVE-2026-95520
29 Sep 202613:22
–circl
circl
Circl
CVE-2026-95521
24 Sep 202614:33
–circl
cve
CVE
CVE-2026-95520
29 Sep 202611:02
–cve
cve
CVE
CVE-2026-95521
24 Sep 202613:26
–cve
cvelist
Cvelist
CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
29 Sep 202611:02
–cvelist
cvelist
Cvelist
CVE-2026-95521 Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
24 Sep 202613:26
–cvelist
debiancve
Debian CVE
CVE-2026-95520
29 Sep 202611:02
–debiancve
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Amazon Linuxanynoarchid="new_packages"> <b>newPackages:</b><pre>aarch64:id="new_packages"> <b>New-Packages:</b><pre>aarch64:.noarch.rpm
Amazon Linux2023aarch64python3-rpm4.16.1.3-29.amzn2023.0.10python3-rpm-4.16.1.3-29.amzn2023.0.10.aarch64.rpm
Amazon Linux2023x86_64python3-rpm4.16.1.3-29.amzn2023.0.10python3-rpm-4.16.1.3-29.amzn2023.0.10.x86_64.rpm
Amazon Linux2023aarch64python3-rpm-debuginfo4.16.1.3-29.amzn2023.0.10python3-rpm-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64.rpm
Amazon Linux2023x86_64python3-rpm-debuginfo4.16.1.3-29.amzn2023.0.10python3-rpm-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64.rpm
Amazon Linux2023aarch64rpm4.16.1.3-29.amzn2023.0.10rpm-4.16.1.3-29.amzn2023.0.10.aarch64.rpm
Amazon Linux2023srcrpm4.16.1.3-29.amzn2023.0.10rpm-4.16.1.3-29.amzn2023.0.10.src.rpm
Amazon Linux2023x86_64rpm4.16.1.3-29.amzn2023.0.10rpm-4.16.1.3-29.amzn2023.0.10.x86_64.rpm
Amazon Linux2023noarchrpm-apidocs4.16.1.3-29.amzn2023.0.10rpm-apidocs-4.16.1.3-29.amzn2023.0.10.noarch.rpm
Amazon Linux2023aarch64rpm-build4.16.1.3-29.amzn2023.0.10rpm-build-4.16.1.3-29.amzn2023.0.10.aarch64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Nov 2026 00:00Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.17.8
EPSS0.00582
SSVC
4