Summary
[4.11.3-48]
- Fix double-free in previously added patch (#2004228)
[4.11.3-47]
- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | rpm | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-apidocs | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-build | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-build-libs | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-cron | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-devel | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-libs | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-plugin-systemd-inhibit | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-python | 0:4.11.3-48.el7_9 |
| Oracle Linux · 7 | rpm-sign | 0:4.11.3-48.el7_9 |
Vulnerabilities 1
-
Unscored —
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who c…