{
  "cveId": "CVE-2026-44604",
  "url": "https://patchblox.com/security/cve/CVE-2026-44604",
  "summary": "CVE-2026-44604 is fixed in 41 products on 1 platform, first by FEDORA-2026-A9F0D5370E, released July 16, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "python-rpm: This update for rpm fixes the following issues:\n\nChanges in rpm:\n\n- split imaevmsign plugin into a multibuild flavor...",
  "description": "This update for rpm fixes the following issues:\n\nChanges in rpm:\n\n- split imaevmsign plugin into a multibuild flavor\n\nChanges in rpm:\n\n- Add Requires: (rpm-plugin-selinux if selinux-policy)\n- harden ndb code [bsc#1269584] [CVE-2026-44605]\n- split all plugins into subpackages\n  * this allows for an easy way to get rid of a plugin, it\u0027s also\n    what other distributions do\n- make the imaevmsign plugin build in a multibuild flavor\n- rpm2archive: use size 0 for hardlinked files as bnew versions of\n  gnu tar reject non-zero sizes [bsc#1269150]\n- backport fix for add_sysuser macro [bsc#1269571]\n- backport rpmuncompress security fix [bsc#1268747] [CVE-2026-44604]\n- switch from rpmpgp_legacy to libpgpr\n  * multiple bug fixes, support for v5 and v6 signatures\n- turn on imaevm file signature support and move the imaevm code\n  that needs the libimaevm library into a plugin. Put this\n  plugin into a new \u0022rpm-imaevmsign\u0022 subpackage. [jsc#PED-7246]\n- Fix \u0022unexpected EOF\u0022 when using rpmbuild to install ELF binaries\n  due to syntax error in /usr/lib/rpm/brp-strip. (boo#1259215)\n- Remove /var/lib/rpm migration scripting, retain an error if old\n  location is found\n- Use systemd-tmpfiles to create \u0026 maintain /var/lib/rpm symlink\n  (boo#1253139)\n- flush scriptlet notification messages in --runposttrans\n  * needed to fix leaking tmp files [bsc#1218459]\n  * added \u0022rpm_flushes_runposttrans\u0022 provides for libzypp",
  "published": "2026-07-16T16:02:12Z",
  "severity": "moderate",
  "epss": 0.00567,
  "epssPercentile": 0.47314,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "python-rpm",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "4.20.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21856-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21856-1",
      "released": "2026-09-16T14:28:22Z"
    },
    {
      "platform": "linux",
      "product": "python-rpm",
      "release": "sles 16.0",
      "fixedVersion": "4.20.1-160000.3.1",
      "fix": "SUSE-SU-2026:23787-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23787-1",
      "released": "2026-09-16T14:30:37Z"
    },
    {
      "platform": "linux",
      "product": "python3-rpm",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "python3-rpm-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "4.20.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21856-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21856-1",
      "released": "2026-09-16T14:28:22Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "sles 16.0",
      "fixedVersion": "4.20.1-160000.3.1",
      "fix": "SUSE-SU-2026:23787-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23787-1",
      "released": "2026-09-16T14:30:37Z"
    },
    {
      "platform": "linux",
      "product": "rpm-apidocs",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build-libs",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build-libs-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-cron",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-devel",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-devel-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-libs",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-libs-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-audit",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-audit-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-dbus-announce",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-dbus-announce-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-fapolicyd",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-fapolicyd-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-fsverity",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-fsverity-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-ima",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-ima-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-imaevmsign",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "4.20.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21856-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21856-1",
      "released": "2026-09-16T14:28:22Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-imaevmsign",
      "release": "sles 16.0",
      "fixedVersion": "4.20.1-160000.3.1",
      "fix": "SUSE-SU-2026:23787-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23787-1",
      "released": "2026-09-16T14:30:37Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-prioreset",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-prioreset-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-selinux",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-selinux-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-syslog",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-syslog-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-systemd-inhibit",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-systemd-inhibit-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-unshare",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-unshare-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-sign",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-sign-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-sign-libs",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    },
    {
      "platform": "linux",
      "product": "rpm-sign-libs-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "6.0.2-1.fc43",
      "fix": "FEDORA-2026-A9F0D5370E",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-a9f0d5370e",
      "released": "2026-07-16T16:02:12Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}