Skip to content
OpenAdvisories
Unscored DSA-3129-1 2 CVEs

rpm - security update

Published Jan 15, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 rpm 4.10.0-5+deb7u2

Vulnerabilities 2

  • Unscored —
    CVE-2013-6435

    Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose…

    rpm rpm Debian Ubuntu
  • Unscored —
    CVE-2014-8118

    Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in…

    rpm rpm Debian Ubuntu