CVE-2026-44605

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

These are all security issues fixed in the librpmbuild10-4.20.1-8.1 package on the GA media of openSUSE Tumbleweed.

This update for rpm fixes the following issues:

Changes in rpm:

• split imaevmsign plugin into a multibuild flavor

Changes in rpm:

• Add Requires: (rpm-plugin-selinux if selinux-policy)
• harden ndb code [bsc#1269584] [CVE-2026-44605]
• split all plugins into subpackages
  • this allows for an easy way to get rid of a plugin, it's also what other distributions do
• make the imaevmsign plugin build in a multibuild flavor
• rpm2archive: use size 0 for hardlinked files as bnew versions of gnu tar reject non-zero sizes [bsc#1269150]
• backport fix for add_sysuser macro [bsc#1269571]
• backport rpmuncompress security fix [bsc#1268747] [CVE-2026-44604]
• switch from rpmpgp_legacy to libpgpr
  • multiple bug fixes, support for v5 and v6 signatures
• turn on imaevm file signature support and move the imaevm code that needs the libimaevm library into a plugin. Put this plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
• Fix "unexpected EOF" when using rpmbuild to install ELF binaries due to syntax error in /usr/lib/rpm/brp-strip. (boo#1259215)
• Remove /var/lib/rpm migration scripting, retain an error if old location is found
• Use systemd-tmpfiles to create & maintain /var/lib/rpm symlink (boo#1253139)
• flush scriptlet notification messages in --runposttrans
  • needed to fix leaking tmp files [bsc#1218459]
  • added "rpm_flushes_runposttrans" provides for libzypp

This update for rpm fixes the following issue:

• CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

This update for rpm fixes the following issue:

• CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

This update for rpm fixes the following issues:

Changes in rpm:

• split imaevmsign plugin into a multibuild flavor

Changes in rpm:

• Add Requires: (rpm-plugin-selinux if selinux-policy)
• harden ndb code [bsc#1269584] [CVE-2026-44605]
• split all plugins into subpackages
  • this allows for an easy way to get rid of a plugin, it's also what other distributions do
• make the imaevmsign plugin build in a multibuild flavor
• rpm2archive: use size 0 for hardlinked files as bnew versions of gnu tar reject non-zero sizes [bsc#1269150]
• backport fix for add_sysuser macro [bsc#1269571]
• backport rpmuncompress security fix [bsc#1268747] [CVE-2026-44604]
• switch from rpmpgp_legacy to libpgpr
  • multiple bug fixes, support for v5 and v6 signatures
• turn on imaevm file signature support and move the imaevm code that needs the libimaevm library into a plugin. Put this plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
• Fix "unexpected EOF" when using rpmbuild to install ELF binaries due to syntax error in /usr/lib/rpm/brp-strip. (boo#1259215)
• Remove /var/lib/rpm migration scripting, retain an error if old location is found
• Use systemd-tmpfiles to create & maintain /var/lib/rpm symlink (boo#1253139)
• flush scriptlet notification messages in --runposttrans
  • needed to fix leaking tmp files [bsc#1218459]
  • added "rpm_flushes_runposttrans" provides for libzypp

This update for rpm fixes the following issues:

Changes in rpm:

• split imaevmsign plugin into a multibuild flavor

Changes in rpm:

• Add Requires: (rpm-plugin-selinux if selinux-policy)
• harden ndb code [bsc#1269584] [CVE-2026-44605]
• split all plugins into subpackages
  • this allows for an easy way to get rid of a plugin, it's also what other distributions do
• make the imaevmsign plugin build in a multibuild flavor
• rpm2archive: use size 0 for hardlinked files as bnew versions of gnu tar reject non-zero sizes [bsc#1269150]
• backport fix for add_sysuser macro [bsc#1269571]
• backport rpmuncompress security fix [bsc#1268747] [CVE-2026-44604]
• switch from rpmpgp_legacy to libpgpr
  • multiple bug fixes, support for v5 and v6 signatures
• turn on imaevm file signature support and move the imaevm code that needs the libimaevm library into a plugin. Put this plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
• Fix "unexpected EOF" when using rpmbuild to install ELF binaries due to syntax error in /usr/lib/rpm/brp-strip. (boo#1259215)
• Remove /var/lib/rpm migration scripting, retain an error if old location is found
• Use systemd-tmpfiles to create & maintain /var/lib/rpm symlink (boo#1253139)
• flush scriptlet notification messages in --runposttrans
  • needed to fix leaking tmp files [bsc#1218459]
  • added "rpm_flushes_runposttrans" provides for libzypp

This update for rpm fixes the following issues:

Security issues fixed:

• CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

Other updates and bugfixes:

• Fix libelf handle not being closed, resulting in build errors when using a NFS buildroot (bsc#1240054).

This update for rpm fixes the following issue:

Security issues fixed:

• CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

Other updates and bugfixes:

• Fix libelf handle not being closed, resulting in build errors when using a NFS buildroot (bsc#1240054).