Threats tagged 'ghsa-7m7j-6vw6-f549'

A command injection vulnerability exists in rpm when processing tarball paths or filenames via the rpmbuild -t* command. This flaw allows an attacker to execute arbitrary commands with the build user's privileges by including shell metacharacters in artifact names, particularly impacting automated build or CI workflows. A security update from Red Hat addresses this issue in their Hardened Images RPM packages.