CVE-2005-4889: lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of...

Security readout for executives and security teams

This is an old local privilege escalation issue in RPM package removal. On systems using RPM before 4.4.3, deleting certain privileged files may leave metadata in an unsafe state, allowing a local user to potentially gain higher privileges. It matters mainly for legacy Linux systems or old images still carrying vulnerable RPM versions. Exposure is most likely on legacy RPM-based Linux distributions with RPM earlier than 4.4.3. Current supported distributions are likely patched, but old appliances, frozen server images, containers, or unsupported systems should be checked. Treat as a legacy hygiene issue with real privilege impact. Prioritize systems that still allow shell access to multiple users or run unsupported RPM-based operating systems. No active exploitation is evidenced in the supplied sources. Mitigation focus: Inventory RPM versions on legacy Linux systems.; Upgrade RPM to 4.4.3 or vendor-fixed packages.; Review distribution advisories for backported fixes..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.