Red Hat Security Advisory

RHSA-2022:0368

rpm security update

Released 2022-02-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) rpm-build-4.14.3-19.el8_5.2, rpm-plugin-fapolicyd-4.14.3-19.el8_5.2
Red Hat Enterprise Linux BaseOS (v. 8) python3-rpm-4.14.3-19.el8_5.2, rpm-4.14.3-19.el8_5.2, rpm-apidocs-4.14.3-19.el8_5.2 +10

TI-2021-02480 CVE-2021-3521 · GHSA-pr6x-p264-jrpq

LOW 22

There is a flaw in RPM's signature functionality.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00325 Published 2022-08-22 Partial fix CWE-347