A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-rpmUpgrade rpm-cronUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-libsUpgrade rpm-apidocsUpgrade rpm-develUpgrade rpmUpgrade rpm-plugin-imaUpgrade rpm-signUpgrade rpm-plugin-syslogUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-prioresetUpgrade rpm-build-libsUpgrade rpm-build | May 4, 2022 | Mar 26, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Mar 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rpm-build-libsUpgrade rpm-develUpgrade rpmUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-signUpgrade rpm-debuginfoUpgrade python2-rpmUpgrade python3-rpmUpgrade rpm-cronUpgrade rpm-apidocsUpgrade rpm-buildUpgrade rpm-libs | Jul 19, 2021 | Mar 26, 2021 |
| Amazon_linux | — | Upgrade rpm | Jul 13, 2021 | Mar 26, 2021 |
| Centos_linux | — | Upgrade rpm-pythonUpgrade rpmUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-buildUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-develUpgrade rpm-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-ima-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-syslogUpgrade rpm-libsUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-debugsourceUpgrade rpm-sign-debuginfoUpgrade rpm-build-libsUpgrade rpm-build-libs-debuginfoUpgrade python3-rpmUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-prioresetUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-sign | Jun 30, 2021 | Mar 26, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Mar 26, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rpm-build-libsUpgrade rpm-buildUpgrade rpm-signUpgrade rpm-develUpgrade rpm-libsUpgrade rpmUpgrade rpm-python | Sep 16, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rpm-pythonUpgrade rpm-build-libsUpgrade rpm-develUpgrade rpm-signUpgrade rpm-libsUpgrade rpmUpgrade rpm-build | Oct 26, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rpm-buildUpgrade rpm-build-libsUpgrade rpm-libsUpgrade rpmUpgrade rpm-signUpgrade rpm-pythonUpgrade rpm-devel | Sep 7, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-libsUpgrade python3-rpmUpgrade rpm-cronUpgrade rpm-signUpgrade rpm-develUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-imaUpgrade rpm-sign-libsUpgrade rpm-buildUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-syslogUpgrade rpm-build-libsUpgrade rpmUpgrade rpm-plugin-selinuxUpgrade python2-rpmUpgrade rpm-apidocs | Jun 28, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rpmUpgrade python3-rpmUpgrade rpm-libs | Aug 10, 2021 | Mar 26, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Mar 26, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade rpm-pythonUpgrade rpm-libsUpgrade python3-rpmUpgrade rpm-plugin-systemd-inhibitUpgrade rpmUpgrade rpm-plugin-fapolicydUpgrade rpm-cronUpgrade rpm-develUpgrade rpm-apidocsUpgrade rpm-buildUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-imaUpgrade rpm-build-libsUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-syslogUpgrade rpm-sign | Jun 30, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-plugin-syslogUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-libsUpgrade rpm-build-debuginfoUpgrade rpmUpgrade rpm-signUpgrade python3-rpmUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-buildUpgrade rpm-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-cronUpgrade rpm-libs-debuginfoUpgrade rpm-apidocsUpgrade python3-rpm-debuginfoUpgrade rpm-build-libsUpgrade rpm-pythonUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-debugsourceUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-selinuxUpgrade rpm-sign-debuginfoNo solution existsUpgrade rpm-develUpgrade rpm-plugin-selinux-debuginfo | Jun 30, 2021 | Mar 26, 2021 |
| Rocky_linux | — | Upgrade rpm-develUpgrade rpmUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-buildUpgrade rpm-plugin-fapolicydUpgrade rpm-debugsourceUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade python3-rpmUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-syslogUpgrade rpm-devel-debuginfoUpgrade rpm-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-libsUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-libsUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfo | May 5, 2022 | Mar 26, 2021 |
| Suse | — | Upgrade rpm-develUpgrade python2-rpmUpgrade librepo0Upgrade librepo-develUpgrade rpm-buildUpgrade python3-libdnfUpgrade rpm-pythonUpgrade rpmUpgrade libdnf-develUpgrade python3-librepoUpgrade rpm-ndbUpgrade libdnf-repo-config-zyppUpgrade hawkey-manUpgrade python3-hawkeyUpgrade rpm-ndb-32bitUpgrade python3-rpmUpgrade rpm-32bitUpgrade libdnf2 | Aug 14, 2021 | Mar 26, 2021 |
| Ubuntu | — | Upgrade librpm3 (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro)Upgrade librpmbuild8 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro) | Mar 22, 2023 | Mar 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub