OESA-2026-3860 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

CVE-2026-78367

creationtimestamp| type| source ---|---|--- 2026-08-24 14:26:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117150947578726789 2026-09-30 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwqcamn5yo2v...

DEBIAN-CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...