Summary
[4.14.3-19]
- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)
[4.14.3-18]
- Address important covscan issues (#1996665), vol. 2
[4.14.3-17]
- Address important covscan issues (#1996665)
[4.14.3-16]
- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)
[4.14.3-15]
- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-rpm | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-apidocs | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-build | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-build-libs | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-cron | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-devel | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-libs | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-plugin-fapolicyd | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-plugin-ima | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-plugin-prioreset | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-plugin-selinux | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-plugin-syslog | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-plugin-systemd-inhibit | 0:4.14.3-19.el8 |
| Oracle Linux · 8 | rpm-sign | 0:4.14.3-19.el8 |
Vulnerabilities 1
-
Unscored —
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause…