Vendor
A local vulnerability in the RPM package management utility allows an attacker to execute arbitrary code with the privileges of the user executing the command.