Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 592
Alerts This Week
Warning Icon 1 592

Fedora 44 rpm Command Injection Buffer Overflow Fix for 2026-9985882270

fedora
Calendar Grey July 27, 2026
Scroller Fedora
Fedora 44 rpm update addresses critical security issues, including buffer overflow and command injection vulnerabilities. Learn more.
Fedora 44 has released an update for the RPM package management system, rebased to version 6.0.2, addressing two critical vulnerabilities and offering installation instructions via...

Summary

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

Update Information:

Rebase to 6.0.2 (https://rpm.org/releases/6.0.2)

Topics%20covered

Topics Covered

security advisory fedora buffer overflow package management command injection RPM

Change Log

* Thu Jul 16 2026 Michal Domonkos - 6.0.2-1 - Rebase to 6.0.2 (https://rpm.org/releases/6.0.2)

References


[ 1 ] Bug #2482482 - CVE-2026-44605 rpm: heap buffer overflow in NDB slot table parsing [fedora-44] https://bugzilla.redhat.com/show_bug.cgi?id=2482482 [ 2 ] Bug #2482485 - CVE-2026-44604 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command [fedora-44] https://bugzilla.redhat.com/show_bug.cgi?id=2482485

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9985882270' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: rpm
Product: Fedora 44
Version: 6.0.2
Release: 1.fc44
URL: https://rpm.org/
Summary: The RPM package management system

Topics%20covered

Topics Covered

security advisory fedora buffer overflow package management command injection RPM

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.