Skip to content
OpenAdvisories
Unscored RHSA-2021:4464 1 CVE

Red Hat Security Advisory: dnf security and bug fix update

Published Sep 16, 2024 · Updated Jun 27, 2026

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos dnf 0:4.7.0-4.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dnf-automatic 0:4.7.0-4.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dnf-data 0:4.7.0-4.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dnf-plugins-core 0:4.0.21-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos libdnf 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos libdnf-debuginfo 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos libdnf-debugsource 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-dnf 0:4.7.0-4.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-dnf-plugin-post-transaction-actions 0:4.0.21-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-dnf-plugin-versionlock 0:4.0.21-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-dnf-plugins-core 0:4.0.21-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-hawkey 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-hawkey-debuginfo 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-libdnf 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-libdnf-debuginfo 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos yum 0:4.7.0-4.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos yum-utils 0:4.0.21-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb libdnf-debuginfo 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb libdnf-debugsource 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb libdnf-devel 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb python3-hawkey-debuginfo 0:0.63.0-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb python3-libdnf-debuginfo 0:0.63.0-3.el8

Vulnerabilities 1

  • Unscored —

    A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attack…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1804234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1818118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1847035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1893176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1898293
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1904490
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1906970
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1913962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1914827
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1926261
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1926771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1929163
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1929667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1951409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1951411
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1951414
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1957280
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1961632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1961633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1961634
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1967454
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4464.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3445
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3445
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3445