Description
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | rpm | all versions | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | rpm | 4.16.1.2+dfsg1-1 | — |
| Debian 13 | rpm | 4.16.1.2+dfsg1-1 | — |
| Debian 12 | rpm | 4.16.1.2+dfsg1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | rpm | 4.14.2.1+dfsg1-1ubuntu0.1~esm1 | USN-5273-1 |
| Ubuntu Pro 18.04 LTS | rpm | 4.14.1+dfsg1-2ubuntu0.1~esm1 | USN-5273-1 |
| Ubuntu Pro 16.04 LTS | rpm | 4.12.0.1+dfsg1-3ubuntu0.1~esm1 | USN-5273-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | rpm | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | rpm +14 | 4.14.3-14.el8_4 | RHSA-2021:2574 |
| RHEL 7 | rpm +9 | 4.11.3-48.el7_9 | RHSA-2021:4785 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.2 EUS | rpm +13 | 4.14.2-38.el8_2 | RHSA-2021:2791 |
| RHEL 7.7 TUS | rpm +9 | 4.11.3-40.el7_7.1 | RHSA-2021:4975 |
| RHEL 7.7 E4S | rpm +9 | 4.11.3-40.el7_7.1 | RHSA-2021:4975 |
| RHEL 7.7 AUS | rpm +9 | 4.11.3-40.el7_7.1 | RHSA-2021:4975 |
| RHEL 7.6 TUS | rpm +9 | 4.11.3-35.el7_6.2 | RHSA-2021:4771 |
| RHEL 7.6 E4S | rpm +9 | 4.11.3-35.el7_6.2 | RHSA-2021:4771 |
| RHEL 7.6 AUS | rpm +9 | 4.11.3-35.el7_6.2 | RHSA-2021:4771 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | rpm | 4.14.3-14.el8_4 | RLSA-2021:2574 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | rpm +2 | 4.14.3-37.2 | SUSE-SU-2021:2682-1 |
| SLES 15 SP2 | python-rpm | 4.14.1-22.4.1 | SUSE-SU-2021:3444-1 |
| SLES 15 SP2 | rpm +1 | 4.14.1-22.4.2 | SUSE-SU-2021:3444-1 |
| SLES 12 SP5 | rpm +2 | 4.11.2-16.26.1 | SUSE-SU-2022:3939-1 |
| SLES 2 | python-rpm | 4.14.1-22.4.1 | SUSE-SU-2021:3444-1, SUSE-SU-2021:2682-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | rpm +2 | 4.11.2-16.26.1 | SUSE-SU-2022:3939-1 |
| SLE Micro 5.0 | python-rpm | 4.14.1-22.4.1 | SUSE-SU-2021:3444-1 |
| SLE Micro 5.0 | rpm | 4.14.1-22.4.2 | SUSE-SU-2021:3444-1 |
| SUSE Manager Server Module 4.2 | rpm | 4.14.3-37.2 | SUSE-SU-2021:2682-1 |
| SUSE Manager Server Module 4.1 | rpm | 4.14.1-22.4.2 | SUSE-SU-2021:3444-1 |
| SUSE Manager Proxy Module 4.2 | rpm | 4.14.3-37.2 | SUSE-SU-2021:2682-1 |
| SUSE Manager Proxy Module 4.1 | rpm | 4.14.1-22.4.2 | SUSE-SU-2021:3444-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.3 | libdnf | 0.62.0-5.3.1 | openSUSE-SU-2021:2685-1 |
| openSUSE Leap 15.3 | rpm +2 | 4.14.3-37.2 | openSUSE-SU-2021:2682-1 |
| openSUSE Leap 15.2 | rpm +1 | 4.14.1-lp152.18.3.1 | openSUSE-SU-2021:1366-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.23 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.22 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.21 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.20 | rpm | 4.16.1.3-r0 | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.18 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.17 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.16 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.15 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.14 | rpm | 4.16.1.3-r0 | — |
| Alpine v3.13 | rpm | 4.16.1.3-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | rpm +10 | 4.11.3-40.amzn2.0.6 | ALAS2-2021-1689 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | rpm +14 | 4.14.3-14.el8_4 | ELSA-2021-2574 |
| Oracle Linux 7 | rpm +9 | 4.11.3-48.el7_9 | ELSA-2021-4785 |
Advisories 19
- WID-SEC-2025-0227 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- RHSA-2021:4975 Red Hat Security Advisory: rpm security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2021:4785 Red Hat Security Advisory: rpm security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2021:4771 Red Hat Security Advisory: rpm security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2021:2791 Red Hat Security Advisory: rpm security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2021:2574 Red Hat Security Advisory: rpm security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- USN-5273-1 rpm vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- RLSA-2021:2574 Moderate: rpm security update Rocky Linux Security Advisories · Feb 5, 2026
- openSUSE-SU-2021:2685-1 Security update for libdnf SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1366-1 Security update for rpm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3444-1 Security update for rpm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2682-1 Security update for rpm SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2682-1 Security update for rpm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3939-1 Security update for rpm SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-2020 RPM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 23, 2023
- WID-SEC-2022-0676 Juniper Junos Space: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 11, 2023
- ELSA-2021-4785 Moderate: rpm security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 24, 2021
- ALAS2-2021-1689 Moderate: rpm security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 15, 2021
- ELSA-2021-2574 Moderate: rpm security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 30, 2021
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1934125
- https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21
- FEDORA-2021-2383d950fd vendor-advisory
- FEDORA-2021-8d52a8a999 vendor-advisory
- FEDORA-2021-662680e477 vendor-advisory
- GLSA-202107-43 vendor-advisory
- https://www.starwindsoftware.com/security/sw-20220805-0002/