TI-2021-03562 CVE-2021-20271 · GHSA-77pm-gxx7-5c5f
Insufficient verification of data authenticity in rpm
Priority LOW 32
A flaw was found in RPM's signature check functionality when reading a package file.
RHSA-2021:4771
rpm security update
Released 2021-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.6) rpm-4.11.3-35.el7_6.2, rpm-build-4.11.3-35.el7_6.2, rpm-build-libs-4.11.3-35.el7_6.2 +4
- Red Hat Enterprise Linux Server E4S (v. 7.6) rpm-4.11.3-35.el7_6.2, rpm-build-4.11.3-35.el7_6.2, rpm-build-libs-4.11.3-35.el7_6.2 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 7.6) rpm-apidocs-4.11.3-35.el7_6.2, rpm-cron-4.11.3-35.el7_6.2, rpm-plugin-systemd-inhibit-4.11.3-35.el7_6.2
- Red Hat Enterprise Linux Server Optional E4S (v. 7.6) rpm-apidocs-4.11.3-35.el7_6.2, rpm-cron-4.11.3-35.el7_6.2, rpm-plugin-systemd-inhibit-4.11.3-35.el7_6.2
- Red Hat Enterprise Linux Server Optional TUS (v. 7.6) rpm-apidocs-4.11.3-35.el7_6.2, rpm-cron-4.11.3-35.el7_6.2, rpm-plugin-systemd-inhibit-4.11.3-35.el7_6.2
- Red Hat Enterprise Linux Server TUS (v. 7.6) rpm-4.11.3-35.el7_6.2, rpm-build-4.11.3-35.el7_6.2, rpm-build-libs-4.11.3-35.el7_6.2 +4