A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-develUpgrade rpm-libsUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-apidocsUpgrade rpm-plugin-fapolicydUpgrade rpmUpgrade python3-rpmUpgrade rpm-signUpgrade rpm-build-libsUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-selinuxUpgrade rpm-buildUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslog | May 4, 2022 | Mar 26, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Mar 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rpm-signUpgrade rpmUpgrade python2-rpmUpgrade rpm-develUpgrade rpm-build-libsUpgrade rpm-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-apidocsUpgrade rpm-buildUpgrade python3-rpmUpgrade rpm-cronUpgrade rpm-libs | Jul 19, 2021 | Mar 26, 2021 |
| Amazon_linux | — | Upgrade rpm | Jul 13, 2021 | Mar 26, 2021 |
| Centos_linux | — | Upgrade rpm-plugin-ima-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-fapolicydUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-apidocsUpgrade rpmUpgrade rpm-pythonUpgrade rpm-plugin-syslog-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-buildUpgrade rpm-develUpgrade rpm-debuginfoUpgrade rpm-plugin-syslogUpgrade python3-rpmUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-cronUpgrade rpm-debugsourceUpgrade rpm-sign-debuginfoUpgrade rpm-signUpgrade rpm-libsUpgrade rpm-build-libsUpgrade rpm-build-debuginfo | Jun 30, 2021 | Mar 26, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Mar 26, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rpm-signUpgrade rpm-build-libsUpgrade rpm-buildUpgrade rpmUpgrade rpm-pythonUpgrade rpm-libsUpgrade rpm-devel | Sep 16, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rpm-develUpgrade rpm-signUpgrade rpm-pythonUpgrade rpm-build-libsUpgrade rpm-buildUpgrade rpm-libsUpgrade rpm | Oct 26, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rpm-libsUpgrade rpm-build-libsUpgrade rpm-buildUpgrade rpmUpgrade rpm-pythonUpgrade rpm-develUpgrade rpm-sign | Sep 7, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-plugin-imaUpgrade rpm-sign-libsUpgrade rpmUpgrade rpm-apidocsUpgrade rpm-plugin-syslogUpgrade rpm-buildUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-selinuxUpgrade python2-rpmUpgrade rpm-build-libsUpgrade rpm-cronUpgrade python3-rpmUpgrade rpm-libsUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-devel | Jun 28, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-rpmUpgrade rpmUpgrade rpm-libs | Aug 10, 2021 | Mar 26, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Mar 26, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade rpm-buildUpgrade rpm-plugin-imaUpgrade rpm-plugin-selinuxUpgrade rpm-apidocsUpgrade rpm-signUpgrade rpm-build-libsUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-syslogUpgrade rpm-cronUpgrade rpm-pythonUpgrade rpm-plugin-fapolicydUpgrade rpm-develUpgrade rpm-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpmUpgrade python3-rpm | Jun 30, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-plugin-syslog-debuginfoUpgrade rpm-buildUpgrade rpm-libsUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-cronUpgrade rpm-build-debuginfoUpgrade rpm-signUpgrade python3-rpmUpgrade rpm-plugin-ima-debuginfoUpgrade rpmUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslogUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libsNo solution existsUpgrade rpm-develUpgrade rpm-sign-debuginfoUpgrade rpm-apidocsUpgrade rpm-pythonUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libs-debuginfoUpgrade rpm-debugsourceUpgrade rpm-plugin-prioresetUpgrade python3-rpm-debuginfo | Jun 30, 2021 | Mar 26, 2021 |
| Rocky_linux | — | Upgrade rpm-plugin-fapolicydUpgrade python3-rpmUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpmUpgrade rpm-buildUpgrade rpm-debugsourceUpgrade rpm-signUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-develUpgrade rpm-plugin-prioresetUpgrade rpm-build-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-libsUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-sign-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-selinuxUpgrade rpm-libs-debuginfo | May 5, 2022 | Mar 26, 2021 |
| Suse | — | Upgrade python3-rpmUpgrade rpm-32bitUpgrade hawkey-manUpgrade python3-hawkeyUpgrade rpm-ndb-32bitUpgrade libdnf2Upgrade python3-libdnfUpgrade python2-rpmUpgrade rpm-ndbUpgrade librepo0Upgrade libdnf-repo-config-zyppUpgrade python3-librepoUpgrade libdnf-develUpgrade rpmUpgrade rpm-pythonUpgrade rpm-buildUpgrade rpm-develUpgrade librepo-devel | Aug 14, 2021 | Mar 26, 2021 |
| Ubuntu | — | Upgrade rpm-common (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpm3 (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro) | Mar 22, 2023 | Mar 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub