Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 592
Alerts This Week
Warning Icon 1 592

Fedora 43 RPM Heap Overflow and Command Injection Vulnerability Advisory

fedora
Calendar Grey July 27, 2026
Scroller Fedora
Critical updates for rpm in Fedora 43 resolve heap overflow and command injection issues. Get the latest fixes now.
Fedora 43 has released an update for the RPM package management system, rebasing it to version 6.0.2, addressing security issues like heap buffer overflow and command injection.

Summary

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

Update Information:

Rebase to 6.0.2 (https://rpm.org/releases/6.0.2)

Topics%20covered

Topics Covered

security advisory fedora advisory heap overflow command injection RPM

Change Log

* Thu Jul 16 2026 Michal Domonkos - 6.0.2-1 - Rebase to 6.0.2 (https://rpm.org/releases/6.0.2)

References


[ 1 ] Bug #2482483 - CVE-2026-44605 rpm: heap buffer overflow in NDB slot table parsing [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2482483 [ 2 ] Bug #2482484 - CVE-2026-44604 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2482484

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a9f0d5370e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rpm
Product: Fedora 43
Version: 6.0.2
Release: 1.fc43
URL: https://rpm.org/
Summary: The RPM package management system

Topics%20covered

Topics Covered

security advisory fedora advisory heap overflow command injection RPM

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.