rpm-python vulnerabilities (TuxCare)
5 vulnerabilities.
-
rpm-pythonTuxCare Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm 7.8 High -
rpm-pythonTuxCare Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) 7.8 High -
rpm-pythonTuxCare Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path 7.8 High -
rpm-pythonTuxCare Rpm: rpmbuild gettarspec() crafted tar member name → macro injection 7.0 High -
rpm-pythonTuxCare There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary... 4.7 Medium