PT-2026-105044

A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a % macro construct causes rpm to execute an attacker-controlled shell command via popen while relocating the source file list. This allows arbitrary command execution as t...

PT-2026-105045

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.7: loki3.7-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-canary-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-logcli-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-3.7.8-0.2.hum1.src src Security Fixes: loki3.7:...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.6-0.2.hum1 aarch64, x8664 grafana13.1-13.1.6-0.2.hum1.src src Security Fixes: grafana13.1: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.3.hum1 aarch64, x8664 tempo3.0-3.0.3-0.3.hum1.src src Security Fixes: tempo3.0: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.6-0.3.hum1 aarch64, x8664 opentofu1.12-1.12.6-0.3.hum1.src src Security Fixes: opentofu1.12: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo2.10: tempo2.10-2.10.8-0.3.hum1 aarch64, x8664 tempo2.10-2.10.8-0.3.hum1.src src Security Fixes: tempo2.10: CVE-2026-81871...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.6.hum1 aarch64, x8664 grafana12.4-12.4.10-0.6.hum1.src src Security Fixes: grafana12.4: CVE-2026-61709...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: UnionTech-rpm-installer (UTSA-2026-110878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110878 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

EulerOS Virtualization 2.12.1 : rpm (EulerOS-SA-2026-3616)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This...

openSUSE 16: librpmbuild10 / python313-rpm / rpm / rpm-build / rpm-devel / etc (openSUSE-SU-2026:21856-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21856-1 advisory. Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: rpm-plugin-selinux if selinux-policy - harden...

EulerOS Virtualization 2.12.0 : rpm (EulerOS-SA-2026-3670)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.5.hum1 aarch64, x8664 grafana13.2-13.2.1-0.5.hum1.src src Security Fixes: grafana13.2: CVE-2026-81871...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: helm4: helm4-4.3.0-0.2.hum1 aarch64, x8664 helm4-4.3.0-0.2.hum1.src src Security Fixes: helm4: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: distribution: distribution-3.1.1-0.2.hum1 aarch64, x8664 distribution-3.1.1-0.2.hum1.src src Security Fixes: distribution: CVE-2026-81871...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: unbound: python3-unbound-1.26.1-1.hum1 aarch64, x8664 unbound-1.26.1-1.hum1 aarch64, x8664 unbound-anchor-1.26.1-1.hum1 aarch64, x8664 unbound-devel-1.26.1-1.hum1 aarch64, x8664...

Critical: Red Hat Security Advisory: RHELAI 3.6: mariadb-connector-c 3.4.9 CVE-2026-44172

RHELAI 3.6: mariadb-connector-c 3.4.9 CVE-2026-44172 RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 packages and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: UnionTech-rpm-installer (UTSA-2026-109806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109806 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.15-1.3.hum1 aarch64, x8664 python3.13-debug-3.13.15-1.3.hum1 aarch64, x8664 python3.13-devel-3.13.15-1.3.hum1 aarch64, x8664 python3.13-freethreading-3.13.15-1.3.hum1...