Red Hat Security Advisory

RHSA-2022:0254

rpm security update

Released 2022-01-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.4) rpm-build-4.14.3-14.el8_4.2, rpm-plugin-fapolicyd-4.14.3-14.el8_4.2
Red Hat Enterprise Linux BaseOS EUS (v.8.4) python3-rpm-4.14.3-14.el8_4.2, rpm-4.14.3-14.el8_4.2, rpm-apidocs-4.14.3-14.el8_4.2 +10

TI-2021-02480 CVE-2021-3521 · GHSA-pr6x-p264-jrpq

LOW 22

There is a flaw in RPM's signature functionality.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00325 Published 2022-08-22 Partial fix CWE-347