Most recent entries from all

ALSA-2021:4489 — Low: rpm security, bug fix, and enhancement update

Affected: AlmaLinux:8: rpm-build, AlmaLinux:8: rpm-plugin-fapolicyd

The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.

Security Fix(es):

* rpm: missing length checks in hdrblobInit() (CVE-2021-20266)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-01670

Withdrawn: BELL-CVE-2021-20266 — CVE-2021-20266 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-386 — De multiples vulnérabilités ont été découvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent à un attaquant…

certfr-2022-avi-386

EUVD-2026-21595

fkie_cve-2021-20266

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

GHSA-8vf3-43pf-v3cq

gsd-2021-20266

msrc_CVE-2021-20266 — A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause…

msrc_CVE-2021-20266

OESA-2021-1223 — rpm security update

Affected: openEuler:20.03-LTS-SP1: rpm

The RPM Package Manager (RPM) is a powerful package management system capability as below Security Fix(es): A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.(CVE-2021-20266) A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.(CVE-2021-3421)

openSUSE-SU-2021:1366-1 — Security update for rpm

Security update for rpm

SUSE-SU-2021:2682-1 — Security update for rpm

Security update for rpm

UBUNTU-CVE-2021-20266

Affected: Ubuntu:Pro:18.04:LTS: rpm, Ubuntu:Pro:20.04:LTS: rpm

WID-SEC-W-2023-1854 — Red Hat Enterprise Linux (rpm): Schwachstelle ermöglicht Denial of Service

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und RPM ausnutzen, um einen Denial of Service Angriff durchzuführen.