Summary
[4.14.3-14]
- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-rpm | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-apidocs | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-build | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-build-libs | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-cron | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-devel | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-libs | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-plugin-fapolicyd | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-plugin-ima | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-plugin-prioreset | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-plugin-selinux | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-plugin-syslog | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-plugin-systemd-inhibit | 0:4.14.3-14.el8_4 |
| Oracle Linux · 8 | rpm-sign | 0:4.14.3-14.el8_4 |
Vulnerabilities 1
-
Unscored —
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who c…