https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:18:43.353225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4489 ALSA-2021:4489 — Low: rpm security, bug fix, and enhancement update 2026-10-10T11:18:43.398273+00:00

Affected: AlmaLinux:8: rpm-build, AlmaLinux:8: rpm-plugin-fapolicyd

The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.

Security Fix(es):

* rpm: missing length checks in hdrblobInit() (CVE-2021-20266)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-01670 bdu:2023-01670 2026-10-10T11:18:43.398340+00:00 bdu:2023-01670 https://cve.radiocsirt.org/vuln/bell-cve-2021-20266 Withdrawn: BELL-CVE-2021-20266 — CVE-2021-20266 does not affect BellSoft software 2026-10-10T11:18:43.398358+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-386 certfr-2022-avi-386 — De multiples vulnérabilités ont été découvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent à un attaquant… 2026-10-10T11:18:43.398373+00:00 certfr-2022-avi-386 https://cve.radiocsirt.org/vuln/euvd-2026-21595 EUVD-2026-21595 2026-10-10T11:18:43.398387+00:00 EUVD-2026-21595 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20266 fkie_cve-2021-20266 2026-10-10T11:18:43.398397+00:00

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/ghsa-8vf3-43pf-v3cq GHSA-8vf3-43pf-v3cq 2026-10-10T11:18:43.398419+00:00

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/gsd-2021-20266 gsd-2021-20266 2026-10-10T11:18:43.398432+00:00 gsd-2021-20266 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20266 msrc_CVE-2021-20266 — A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause… 2026-10-10T11:18:43.398442+00:00 msrc_CVE-2021-20266 https://cve.radiocsirt.org/vuln/oesa-2021-1223 OESA-2021-1223 — rpm security update 2026-10-10T11:18:43.398458+00:00

Affected: openEuler:20.03-LTS-SP1: rpm

The RPM Package Manager (RPM) is a powerful package management system capability as below Security Fix(es): A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.(CVE-2021-20266) A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.(CVE-2021-3421)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1366-1 openSUSE-SU-2021:1366-1 — Security update for rpm 2026-10-10T11:18:43.398481+00:00

Security update for rpm

 https://cve.radiocsirt.org/vuln/suse-su-2021:2682-1 SUSE-SU-2021:2682-1 — Security update for rpm 2026-10-10T11:18:43.398497+00:00

Security update for rpm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20266 UBUNTU-CVE-2021-20266 2026-10-10T11:18:43.398511+00:00

Affected: Ubuntu:Pro:18.04:LTS: rpm, Ubuntu:Pro:20.04:LTS: rpm

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1854 WID-SEC-W-2023-1854 — Red Hat Enterprise Linux (rpm): Schwachstelle ermöglicht Denial of Service 2026-10-10T11:18:43.398530+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und RPM ausnutzen, um einen Denial of Service Angriff durchzuführen.