TI-2021-03562 CVE-2021-20271 · GHSA-77pm-gxx7-5c5f
Insufficient verification of data authenticity in rpm
Priority LOW 32
A flaw was found in RPM's signature check functionality when reading a package file.
RHSA-2021:4975
rpm security update
Released 2021-12-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.7) rpm-4.11.3-40.el7_7.1, rpm-build-4.11.3-40.el7_7.1, rpm-build-libs-4.11.3-40.el7_7.1 +4
- Red Hat Enterprise Linux Server E4S (v. 7.7) rpm-4.11.3-40.el7_7.1, rpm-build-4.11.3-40.el7_7.1, rpm-build-libs-4.11.3-40.el7_7.1 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) rpm-apidocs-4.11.3-40.el7_7.1, rpm-cron-4.11.3-40.el7_7.1, rpm-plugin-systemd-inhibit-4.11.3-40.el7_7.1
- Red Hat Enterprise Linux Server Optional E4S (v. 7.7) rpm-apidocs-4.11.3-40.el7_7.1, rpm-cron-4.11.3-40.el7_7.1, rpm-plugin-systemd-inhibit-4.11.3-40.el7_7.1
- Red Hat Enterprise Linux Server Optional TUS (v. 7.7) rpm-apidocs-4.11.3-40.el7_7.1, rpm-cron-4.11.3-40.el7_7.1, rpm-plugin-systemd-inhibit-4.11.3-40.el7_7.1
- Red Hat Enterprise Linux Server TUS (v. 7.7) rpm-4.11.3-40.el7_7.1, rpm-build-4.11.3-40.el7_7.1, rpm-build-libs-4.11.3-40.el7_7.1 +4