TI-2021-03562 CVE-2021-20271 · GHSA-77pm-gxx7-5c5f
Insufficient verification of data authenticity in rpm
Priority LOW 32
A flaw was found in RPM's signature check functionality when reading a package file.
RHSA-2021:4785
rpm security update
Released 2021-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) rpm-4.11.3-48.el7_9, rpm-build-4.11.3-48.el7_9, rpm-build-libs-4.11.3-48.el7_9 +2
- Red Hat Enterprise Linux Client Optional (v. 7) rpm-apidocs-4.11.3-48.el7_9, rpm-cron-4.11.3-48.el7_9, rpm-devel-4.11.3-48.el7_9 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) rpm-apidocs-4.11.3-48.el7_9, rpm-cron-4.11.3-48.el7_9, rpm-devel-4.11.3-48.el7_9 +2
- Red Hat Enterprise Linux Server (v. 7) rpm-4.11.3-48.el7_9, rpm-build-4.11.3-48.el7_9, rpm-build-libs-4.11.3-48.el7_9 +7
- Red Hat Enterprise Linux Server Optional (v. 7) rpm-apidocs-4.11.3-48.el7_9, rpm-cron-4.11.3-48.el7_9, rpm-plugin-systemd-inhibit-4.11.3-48.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) rpm-4.11.3-48.el7_9, rpm-build-4.11.3-48.el7_9, rpm-build-libs-4.11.3-48.el7_9 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) rpm-apidocs-4.11.3-48.el7_9, rpm-cron-4.11.3-48.el7_9, rpm-plugin-systemd-inhibit-4.11.3-48.el7_9