OESA-2026-4805: rpm security update
The RPM Package Manager (RPM) is a powerful package management system capability as below Security Fix(es):
A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened, allowing embedded shell commands to run with the privileges of the rpm process. Successful exploitation can lead to a full compromise of confidentiality, integrity, and availability for the affected account.(CVE-2026-95519)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/rpmto a version that resolves this vulnerability.Fixed in 4.18.2-44.oe2403sp3
Event History
Frequently Asked Questions
Who should prioritize this update?
Systems where users or automated jobs process manifest files with rpm query commands such as `rpm -q -p` should be prioritized, especially when those files can come from untrusted sources.
Does exploitation require the attacker to already have local privileges?
No. The vulnerability is rated with no privileges required, but a user or automation must process an attacker-supplied crafted manifest file. The embedded commands execute with the privileges of the rpm process.