Threats Tagged 'cve-2026-84233'

Red Hat has issued a security advisory for an update to Red Hat Hardened Images RPM packages addressing a medium severity vulnerability identified as CVE-2026-84233. The update includes multiple RPM packages with bug fixes and enhancements. No specific details about the vulnerability's nature or exploitation are provided. The advisory directs users to apply the updated RPM packages to mitigate the issue.

A vulnerability in rpm allows a local attacker to supply a specially crafted .gem filename containing RPM macro syntax. When the rpmuncompress -x command is run on this file, macro expansion occurs during command construction, enabling arbitrary command execution with the invoking user's privileges. This can compromise confidentiality, integrity, and availability. A security update from Red Hat addresses this issue in Red Hat Hardened Images RPMs.

A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary commands with the privileges of the invoking account, leading to a compromise of confidentiality, integrity, and availability.