https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:48:33.978051+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-95519 fkie_cve-2026-95519 2026-09-30T21:48:33.981440+00:00

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened, allowing embedded shell commands to run with the privileges of the `rpm` process. Successful exploitation can lead to a full compromise of confidentiality, integrity, and availability for the affected account.

 https://vulnerability.circl.lu/vuln/ghsa-r6wm-889r-jqv7 GHSA-r6wm-889r-jqv7 2026-09-30T21:48:33.981603+00:00

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened, allowing embedded shell commands to run with the privileges of the `rpm` process. Successful exploitation can lead to a full compromise of confidentiality, integrity, and availability for the affected account.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-95519 UBUNTU-CVE-2026-95519 2026-09-30T21:48:33.981647+00:00

Affected: Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm, Ubuntu:Pro:18.04:LTS: rpm, Ubuntu:Pro:20.04:LTS: rpm, Ubuntu:22.04:LTS: rpm, Ubuntu:24.04:LTS: rpm, Ubuntu:26.04:LTS: rpm

(A flaw was found in rpm. An attacker can supply a crafted manifest fil ...)