Summary
The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.
Security Fix(es):
* rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937)
* rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938)
* rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | python3-rpm | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-apidocs | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-build | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-build-libs | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-cron | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-devel | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-libs | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-plugin-audit | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-plugin-fapolicyd | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-plugin-ima | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-plugin-selinux | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-plugin-syslog | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-plugin-systemd-inhibit | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-sign | 4.16.1.3-27.el9_3 |
| AlmaLinux · 9 | rpm-sign-libs | 4.16.1.3-27.el9_3 |
Vulnerabilities 3
-
Unscored —
A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks tha…
-
Unscored —
A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installin…
-
Unscored —
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the pa…
References
-
report
https://access.redhat.com/security/cve/CVE-2021-35937
-
report
https://access.redhat.com/security/cve/CVE-2021-35938
-
report
https://access.redhat.com/security/cve/CVE-2021-35939
-
report
https://bugzilla.redhat.com/1964114
-
report
https://bugzilla.redhat.com/1964125
-
report
https://bugzilla.redhat.com/1964129
-
advisory
https://errata.almalinux.org/9/ALSA-2024-0463.html