SUSE-SU-2021:3445-1

Security update for rpm

No scoreFix available

SUSE-SU-2021:3445-1 is a vulnerability with no CVSS score yet in rpm, published October 15, 2021. No source lists public exploit code. Fixed in python-rpm 4.14.3-40.1.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 4.14.3-40.1python-rpm +8 more

Description

This update for rpm fixes the following issues:

Security issues fixed:

PGP hardening changes (bsc#1185299)

Maintaince issues fixed:

Fixed zstd detection (bsc#1187670)
Added ndb rofs support (bsc#1188548)
Fixed deadlock when multiple rpm processes try tp acquire the database lock (bsc#1183659)

Affected packages

Affected packages
Package	Affected	Fixed
`python-rpm` SUSE:Linux Enterprise Module for Basesystem 15 SP3	before 4.14.3-40.1	4.14.3-40.1
`rpm` SUSE:Linux Enterprise Module for Basesystem 15 SP3	before 4.14.3-40.1	4.14.3-40.1
`rpm` SUSE:Linux Enterprise Module for Development Tools 15 SP3	before 4.14.3-40.1	4.14.3-40.1
`rpm-ndb` SUSE:Linux Enterprise Module for Public Cloud 15 SP3	before 4.14.3-40.1	4.14.3-40.1
`python-rpm` SUSE:Linux Enterprise Module for Python 2 15 SP3	before 4.14.3-40.1	4.14.3-40.1
`rpm` SUSE:Manager Proxy Module 4.2	before 4.14.3-40.1	4.14.3-40.1
`rpm` SUSE:Manager Server Module 4.2	before 4.14.3-40.1	4.14.3-40.1
`python-rpm` SUSE:Linux Enterprise Micro 5.1	before 4.14.3-40.1	4.14.3-40.1
`rpm` SUSE:Linux Enterprise Micro 5.1	before 4.14.3-40.1	4.14.3-40.1

What each source reports

OSVNo score

Security update for rpm