The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libdnf-devel | May 4, 2022 | May 19, 2021 |
| Centos_linux | — | Upgrade python3-dnf-plugins-coreUpgrade python3-dnf-plugin-post-transaction-actionsUpgrade python3-libdnf-debuginfoUpgrade dnfUpgrade python3-dnfUpgrade python3-hawkeyUpgrade python3-dnf-plugin-versionlockUpgrade dnf-dataUpgrade yum-utilsUpgrade libdnfUpgrade python3-libdnfUpgrade libdnf-debugsourceUpgrade dnf-plugins-coreUpgrade dnf-automaticUpgrade python3-hawkey-debuginfoUpgrade yumUpgrade libdnf-debuginfo | Nov 10, 2021 | May 19, 2021 |
| Debian | — | Upgrade libdnf | Jul 30, 2024 | May 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-libdnfUpgrade libdnfUpgrade python2-libdnfUpgrade python2-hawkeyUpgrade python3-hawkey | Sep 24, 2021 | May 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-libdnfUpgrade python3-hawkeyUpgrade libdnf | Sep 29, 2021 | May 19, 2021 |
| Oracle_linux | — | Upgrade dnf-plugins-coreUpgrade yumUpgrade dnf-automaticUpgrade python3-hawkeyUpgrade libdnf-develUpgrade python3-dnfUpgrade libdnfUpgrade python3-dnf-plugin-versionlockUpgrade python3-dnf-plugin-post-transaction-actionsUpgrade dnf-dataUpgrade yum-utilsUpgrade python3-dnf-plugins-coreUpgrade dnfUpgrade python3-libdnf | Nov 17, 2021 | Mar 16, 2021 |
| Redhat_linux | — | Upgrade python3-libdnfUpgrade dnf-dataUpgrade libdnf-develUpgrade python3-dnf-plugin-versionlockUpgrade libdnf-debugsourceUpgrade dnfUpgrade dnf-automaticUpgrade python3-dnfUpgrade libdnfUpgrade python3-dnf-plugin-post-transaction-actionsUpgrade yumUpgrade dnf-plugins-coreUpgrade libdnf-debuginfoUpgrade yum-utilsUpgrade python3-dnf-plugins-coreUpgrade python3-hawkey-debuginfoUpgrade python3-hawkeyUpgrade python3-libdnf-debuginfo | Nov 10, 2021 | May 19, 2021 |
| Rocky_linux | — | Upgrade python3-libdnf-debuginfoUpgrade python3-libdnfUpgrade python3-hawkeyUpgrade libdnfUpgrade libdnf-debugsourceUpgrade libdnf-develUpgrade python3-hawkey-debuginfoUpgrade libdnf-debuginfo | Mar 12, 2024 | May 19, 2021 |
| Suse | — | Upgrade python3-librepoUpgrade librepo0Upgrade librepo-develUpgrade hawkey-manUpgrade python3-libdnfUpgrade libdnf-repo-config-zyppUpgrade python3-hawkeyUpgrade libdnf2Upgrade libdnf-devel | Aug 14, 2021 | May 19, 2021 |
| Ubuntu | — | Upgrade libdnf | Nov 19, 2024 | May 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub