{"id":"CVE-2021-20271","aliases":["ALPINE-CVE-2021-20271","BELL-CVE-2021-20271","DEBIAN-CVE-2021-20271","EUVD-2021-7705","GHSA-77pm-gxx7-5c5f","MGASA-2021-0167","OESA-2021-1163","RHSA-2021:2574","RHSA-2021:2791","RHSA-2021:4771","RHSA-2021:4785","RHSA-2021:4975","RLSA-2021:2574","SUSE-SU-2021:2682-1","SUSE-SU-2021:3444-1","SUSE-SU-2022:3939-1","UBUNTU-CVE-2021-20271","USN-5273-1","openSUSE-SU-2021:1366-1","openSUSE-SU-2021:2682-1","openSUSE-SU-2021:2685-1"],"status":"published","title":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw...","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00772,"percentile":0.55959,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-345"],"published":"2021-03-26T00:00:00Z","modified":"2026-11-03T06:32:26Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rpm","fixed_in":["4.16.1.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rpm","fixed_in":["4.16.1.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rpm","fixed_in":["4.16.1.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"rpm","fixed_in":["4.15.1-20.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-build","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-devel","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-libs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-python","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-sign","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-build","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-devel","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-libs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-python","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-sign","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-build","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-devel","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-libs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-python","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-sign","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-cron","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-cron","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-cron","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-35.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-build","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-build-libs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-debuginfo","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-libs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-python","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-apidocs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-cron","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-devel","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-sign","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-apidocs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-cron","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-debuginfo","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-devel","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-sign","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-build","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-devel","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-libs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-python","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-sign","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-cron","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-build","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-build-libs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-debuginfo","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-devel","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-libs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-python","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-sign","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-apidocs","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-cron","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-48.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-build","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-devel","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-libs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-python","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-sign","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-build","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-devel","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-libs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-python","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-sign","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-build","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-build-libs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-debuginfo","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-devel","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-libs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-python","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-sign","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-cron","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-cron","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-apidocs","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-cron","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.11.3-40.el7_7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rpm","fixed_in":["4.12.0.1+dfsg1-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","fixed_in":["4.14.1+dfsg1-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","fixed_in":["4.14.2.1+dfsg1-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.1-20.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-38.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-35.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-48.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.3-40.el7_7.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.1-2","4.11.1-3","4.11.1-3ubuntu0.1","4.11.1-3ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0.1+dfsg1-3ubuntu0.1~esm1"}]}],"versions":["4.12.0.1+dfsg1-3build2","4.12.0.1+dfsg1-3build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["4.12.0.2+dfsg1-2build2","4.14.0+dfsg1-2","4.14.1+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.2.1+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["4.14.2.1+dfsg1-1","4.14.2.1+dfsg1-1build1","4.14.2.1+dfsg1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0.1+dfsg1-3ubuntu0.1~esm1"}]}],"versions":["4.12.0.1+dfsg1-3build2","4.12.0.1+dfsg1-3build3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["4.12.0.2+dfsg1-2build2","4.14.0+dfsg1-2","4.14.1+dfsg1-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.2.1+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["4.14.2.1+dfsg1-1","4.14.2.1+dfsg1-1build1","4.14.2.1+dfsg1-1build2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-lp152.18.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-lp152.18.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libdnf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-5.3.1"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"red hat, inc.","product":"rpm"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"rpm","product":"rpm"},{"vendor":"starwindsoftware","product":"starwind_virtual_san"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934125","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202107-43","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.starwindsoftware.com/security/sw-20220805-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20271","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/"},{"url":"https://access.redhat.com/errata/RHBA-2021:2854"},{"url":"https://access.redhat.com/errata/RHSA-2021:2574","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2791","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4771","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4785","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20271","tags":["report"]},{"url":"https://github.com/advisories/GHSA-77pm-gxx7-5c5f"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-20271","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-20271","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20271","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0167.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28674","tags":["report"]},{"url":"https://rpm.org/wiki/Releases/4.16.1.3","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1163","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2574.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927747","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3421","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20271","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2791.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4771.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4785.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4975.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2574","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212682-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179416","tags":["report"]},{"url":"https://bugzilla.suse.com/1181805","tags":["report"]},{"url":"https://bugzilla.suse.com/1183543","tags":["report"]},{"url":"https://bugzilla.suse.com/1183545","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3421","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213444-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183632","tags":["report"]},{"url":"https://bugzilla.suse.com/1183659","tags":["report"]},{"url":"https://bugzilla.suse.com/1185299","tags":["report"]},{"url":"https://bugzilla.suse.com/1187670","tags":["report"]},{"url":"https://bugzilla.suse.com/1188548","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223939-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/996280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20271","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5273-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20266","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WOGLQWSIIR4HYRWXGETEIHB6SM6A2MNK/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQDL4MT3J7VM3IS3TI4EMLQJHDPTSZLZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PUJW4L55UGKEL4ROYV7WZNQDNBJXXLLG/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183779","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3445","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-20271","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T00:00:00Z","modified":"2024-08-03T17:37:23.716Z","cwes":["CWE-345"],"updated_at":"2026-11-02T14:32:55.19484Z"}],"euvd":[{"id":"EUVD-2021-7705","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T00:00:00Z","modified":"2024-08-03T17:37:23Z","updated_at":"2026-11-03T03:25:09.355483Z"}],"ghsa":[{"id":"GHSA-77pm-gxx7-5c5f","title":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw...","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2022-05-24T17:45:32Z","modified":"2023-02-10T05:07:21Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:54:03.896291Z"}],"nvd":[{"id":"CVE-2021-20271","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T17:15:13Z","modified":"2026-06-17T03:33:34.93Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:06:51.197859Z"}],"osv":[{"id":"ALPINE-CVE-2021-20271","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T17:15:13Z","modified":"2026-11-03T06:32:26.883104825Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"BELL-CVE-2021-20271","title":"CVE-2021-20271 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:20.534729Z","modified":"2026-01-26T09:45:52.002127Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-20271","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T17:15:13Z","modified":"2026-10-20T14:15:11.93446162Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-20271","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T17:15:13Z","modified":"2026-10-23T18:03:10.266357782Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"OESA-2021-1163","title":"rpm security update","description":"The RPM Package Manager (RPM) is a powerful package management system capability as below\n-building computer software from source into easily distributable packages\n-installing, updating and uninstalling packaged software\n-querying detailed information about the packaged software, whether installed or not\n-verifying integrity of packaged software and resulting software installation\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in RPM\u0026apos;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.(CVE-2021-20271)","status":"published","published":"2021-05-06T11:04:24Z","modified":"2026-08-18T01:15:30.992860994Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:2574","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T05:59:56Z","modified":"2026-08-07T10:03:03Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2791","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T06:00:04Z","modified":"2026-08-07T10:03:21Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4771","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T06:00:19Z","modified":"2026-08-07T10:04:18Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4785","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T06:00:26Z","modified":"2026-08-07T10:04:20Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4975","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T06:00:35Z","modified":"2026-08-07T10:04:29Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:2574","title":"Moderate: rpm security update","description":"The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.\n\nSecurity Fix(es):\n\n* rpm: Signature checks bypass via corrupted rpm package (CVE-2021-20271)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-29T13:43:23Z","modified":"2026-02-05T03:00:11.281346Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-20271","description":"A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.","status":"published","published":"2021-03-26T17:15:00Z","modified":"2026-04-22T12:45:52.809841Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"MGASA-2021-0167","title":"Updated rpm packages fix security vulnerabilities","description":"This update from 4.16.1.2 to 4.16.1.3 fixes bugs several bugs the RPM\npackage manager, including several security issues:\n* Fix arbitrary data copied from signature header past signature checking\n  (CVE-2021-3421)\n* Fix signature check bypass with corrupted package (CVE-2021-20271)\n* Fix missing bounds checks in headerImport() and headerCheck()\n  (CVE-2021-20266)\n* Fix missing sanity checks on header entry count and region data overlap\n* Fix access past end of header if the last entry is string type\n* Fix unsafe headerCopyLoad() still used in codebase\n","status":"published","published":"2021-04-02T10:16:21Z","modified":"2026-04-16T04:43:52.104498754Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:1366-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements (bsc#1183543, bsc#1183545, bsc#1183632)\n- PGP hardening changes (bsc#1185299)\n- Fixed potential access of freed mem in ndb's glue code (bsc#1179416)\n\nMaintaince issues fixed:\n\n- Fixed zstd detection (bsc#1187670)\n- Added ndb rofs support (bsc#1188548)\n- Fixed deadlock when multiple rpm processes try tp acquire the database lock (bsc#1183659)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-10-18T12:12:22Z","modified":"2026-02-04T03:34:08.942482Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2682-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\n- Changed default package verification level to 'none' to be compatible to rpm-4.14.1\n- Made illegal obsoletes a warning\n- Fixed a potential access of freed mem in ndb's glue code (bsc#1179416)\n- Added support for enforcing signature policy and payload verification step to\n  transactions (jsc#SLE-17817)\n- Added :humansi and :hmaniec query formatters for human readable output\n- Added query selectors for whatobsoletes and whatconflicts\n- Added support for sorting caret higher than base version\n- rpm does no longer require the signature header to be in a contiguous\n  region when signing (bsc#1181805)\n\nSecurity fixes:\n\n- CVE-2021-3421: A flaw was found in the RPM package in the read functionality. This flaw allows an\n  attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM\n  repository, to cause RPM database corruption. The highest threat from this vulnerability is to\n  data integrity (bsc#1183543)\n\n- CVE-2021-20271: A flaw was found in RPM's signature check functionality when reading a package file.\n  This flaw allows an attacker who can convince a victim to install a seemingly verifiable package,\n  whose signature header was modified, to cause RPM database corruption and execute code. The highest\n  threat from this vulnerability is to data integrity, confidentiality, and system availability (bsc#1183545)\n\n- CVE-2021-20266: A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker\n  who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability\n  is to system availability.\n","status":"published","published":"2021-08-17T07:23:06Z","modified":"2026-02-04T02:31:43.264947Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2685-1","title":"Security update for libdnf","description":"This update for libdnf fixes the following issues:\n\n- Fixed crash when loading DVD repositories\n\nUpdate to 0.62.0\n\n+ Change order of TransactionItemReason (rh#1921063)\n+ Add two new comperators for security filters (rh#1918475)\n+ Apply security filters for candidates with lower priority\n+ Fix: Goal - translation of messages in global maps\n+ Enhance description of modular solvables\n+ Improve performance for module query \n+ Change mechanism of modular errata applicability (rh#1804234)\n+ dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags\n+ Fix a couple of memory leaks\n+ Fix: Setting of librepo handle in newHandle function\n+ Remove failsafe data when module is not enabled (rh#1847035)\n+ Expose librepo's checksum functions via SWIG\n+ Fix: Mising check of 'hy_split_nevra()' return code\n+ Do not allow 1 as installonly_limit value (rh#1926261)\n+ Fix check whether the subkey can be used for signing\n+ Hardening: add signature check with rpmcliVerifySignatures \n  (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, bsc#1183779)\n+ Add a config option sslverifystatus, defaults to false (rh#1814383)\n+ [context] Add API for distro-sync\n\n- Fix dependency for repo-config-zypp subpackage to work with SLE\n\nUpdate to 0.60.0\n\n+ Fix repo.fresh() implementation\n+ Fix: Fully set ssl in newHandle function\n+ [conf] Add options for working with certificates used with proxy\n+ Apply proxy certificate options\n+ lock: Switch return-if-fail to assert to quiet gcc -fanalyzer\n+ build-sys: Clean up message about Python bindings\n+ Modify module NSVCA parsing - context definition (rh#1926771)\n+ [context] Fix: dnf_package_is_installonly (rh#1928056)\n+ Fix problematic language\n+ Add getApplicablePackages to advisory and isApplicable to advisorymodule\n+ Keep isAdvisoryApplicable to preserve API\n+ Run ModulePackageContainerTest tests in tmpdir, merge interdependent\n+ [context] Support config file option 'proxy_auth_method', defaults 'any'\n+ Properly handle multiple collections in updateinfo.xml (rh#1804234)\n+ Support main config file option 'installonlypkgs'\n+ Support main config file option 'protected_packages'\n\n- Add repo-config-zypp subpackage to allow easily using Zypper\n  repository configuration\n\n- Backport support for using certificates for repository authorization\n- Backport another fix for adding controls to installonlypkgs\n- Add patch to move directory for dnf state data to /usr/lib/sysimage\n- Backport fixes to add controls for installonlypkgs and protected_packages\n\nUpdate to version 0.58.0\n\n+ Option: Add reset() method\n+ Add OptionBinds::getOption() method\n+ [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()\n+ [context] Add support for options: minrate, throttle, bandwidth, timeout\n+ [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()\n+ Allow loading ext metadata even if only cache (solv) is present\n+ Add ASAN_OPTIONS for test_libdnf_main\n+ [context,API] Functions for accessing main/global configuration options\n+ [context,API] Function for adding setopt\n+ Add getter for modular obsoletes from ModuleMetadata\n+ Add ModulePackage.getStaticContext() and getRequires()\n+ Add compatible layer for MdDocuments v2\n+ Fix modular queries with the new solver\n+ Improve formatting of error string for modules\n+ Change mechanism of module conflicts\n+ Fix load/update FailSafe\n\nUpdate to version 0.55.2\n\n+ Improve performance of query installed() and available()\n+ Swdb: Add a method to get the current transaction\n+ [modules] Add special handling for src artifacts (rh#1809314)\n+ Better msgs if 'basecachedir' or 'proxy_password' isn't set (rh#1888946)\n+ Add new options module_stream_switch\n+ Support allow_vendor_change setting in dnf context API\n\nUpdate to version 0.55.0\n\n+ Add vendor to dnf API (rh#1876561)\n+ Add formatting function for solver error\n+ Add error types in ModulePackageContainer\n+ Implement module enable for context part\n+ Improve string formatting for translation\n+ Remove redundant printf and change logging info to notice (rh#1827424)\n+ Add allow_vendor_change option (rh#1788371) (rh#1788371)\n\nUpdate to version 0.54.2\n\n+ history: Fix dnf history rollback when a package was removed (rh#1683134)\n+ Add support for HY_GT, HY_LT in query nevra_strict\n+ Fix parsing empty lines in config files\n+ Accept '==' as an operator in reldeps (rh#1847946)\n+ Add log file level main config option (rh#1802074)\n+ Add protect_running_kernel configuration option (rh#1698145)\n+ Context part of libdnf cannot assume zchunk is on (rh#1851841, rh#1779104)\n+ Fix memory leak of resultingModuleIndex and handle g_object refs\n+ Redirect librepo logs to libdnf logs with different source\n+ Add hy_goal_lock\n+ Enum/String conversions for Transaction Store/Replay\n+ utils: Add a method to decode URLs\n+ Unify hawkey.log line format with the rest of the logs\n\nUpdate to version 0.48.0\n\n+ Add prereq_ignoreinst \u0026 regular_requires properties for pkg (rh#1543449)\n+ Reset active modules when no module enabled or default (rh#1767351)\n+ Add comment option to transaction (rh#1773679)\n+ Failing to get module defauls is a recoverable error\n+ Baseurl is not exclusive with mirrorlist/metalink (rh#1775184)\n+ Add new function to reset all modules in C API (dnf_context_reset_all_modules)\n+ [context] Fix to preserve additionalMetadata content (rh#1808677)\n+ Fix filtering of DepSolvables with source rpms (rh#1812596)\n+ Add setter for running kernel protection setting\n+ Handle situation when an unprivileged user cannot create history database (rh#1634385)\n+ Add query filter: latest by priority\n+ Add DNF_NO_PROTECTED flag to allow empty list of protected packages\n+ Remove 'dim' option from terminal colors to make them more readable (rh#1807774, rh#1814563)\n+ [context] Error when main config file can't be opened (rh#1794864)\n+ [context] Add function function dnf_context_is_set_config_file_path\n+ swdb: Catch only SQLite3 exceptions and simplify the messages\n+ MergedTransaction list multiple comments (rh#1773679)\n+ Modify CMake to pull *.po files from weblate\n+ Optimize DependencyContainer creation from an existing queue\n+ fix a memory leak in dnf_package_get_requires()\n+ Fix memory leaks on g_build_filename()\n+ Fix memory leak in dnf_context_setup()\n+ Add `hy_goal_favor` and `hy_goal_disfavor`\n+ Define a cleanup function for `DnfPackageSet`\n+ dnf-repo: fix dnf_repo_get_public_keys double-free\n+ Do not cache RPMDB\n+ Use single-quotes around string literals used in SQL statements\n+ SQLite3: Do not close the database if it wasn't opened (rh#1761976)\n+ Don't create a new history DB connection for in-memory DB\n+ transaction/Swdb: Use a single logger variable in constructor\n+ utils: Add a safe version of pathExists()\n+ swdb: Handle the case when pathExists() fails on e.g. permission\n+ Repo: prepend 'file://' if a local path is used as baseurl\n+ Move urlEncode() to utils\n+ utils: Add 'exclude' argument to urlEncode()\n+ Encode package URL for downloading through librepo (rh#1817130)\n+ Replace std::runtime_error with libdnf::RepoError\n+ Fixes and error handling improvements of the File class\n+ [context] Use ConfigRepo for gpgkey and baseurl (rh#1807864)\n+ [context] support 'priority' option in .repo config file (rh#1797265)\n","status":"published","published":"2021-08-13T09:21:40Z","modified":"2026-02-04T03:54:13.727095Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:2682-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\n- Changed default package verification level to 'none' to be compatible to rpm-4.14.1\n- Made illegal obsoletes a warning\n- Fixed a potential access of freed mem in ndb's glue code (bsc#1179416)\n- Added support for enforcing signature policy and payload verification step to\n  transactions (jsc#SLE-17817)\n- Added :humansi and :hmaniec query formatters for human readable output\n- Added query selectors for whatobsoletes and whatconflicts\n- Added support for sorting caret higher than base version\n- rpm does no longer require the signature header to be in a contiguous\n  region when signing (bsc#1181805)\n\nSecurity fixes:\n\n- CVE-2021-3421: A flaw was found in the RPM package in the read functionality. This flaw allows an\n  attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM\n  repository, to cause RPM database corruption. The highest threat from this vulnerability is to\n  data integrity (bsc#1183543)\n\n- CVE-2021-20271: A flaw was found in RPM's signature check functionality when reading a package file.\n  This flaw allows an attacker who can convince a victim to install a seemingly verifiable package,\n  whose signature header was modified, to cause RPM database corruption and execute code. The highest\n  threat from this vulnerability is to data integrity, confidentiality, and system availability (bsc#1183545)\n\n- CVE-2021-20266: A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker\n  who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability\n  is to system availability.\n","status":"published","published":"2021-08-12T18:06:48Z","modified":"2026-02-04T02:59:41.683552Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3444-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements (bsc#1183543, bsc#1183545, bsc#1183632)\n- PGP hardening changes (bsc#1185299)\n- Fixed potential access of freed mem in ndb's glue code (bsc#1179416)\n\nMaintaince issues fixed:\n\n- Fixed zstd detection (bsc#1187670)\n- Added ndb rofs support (bsc#1188548)\n- Fixed deadlock when multiple rpm processes try tp acquire the database lock (bsc#1183659)\n","status":"published","published":"2021-10-15T07:03:27Z","modified":"2026-02-04T03:29:54.499225Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:3939-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\n- Fixed PGP parsing bugs (bsc#1185299).\n- Fixed various format handling bugs (bsc#996280).\n- CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543). \n- CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545).\n- CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632).\n\nBugfixes:\n\n- Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659).\n","status":"published","published":"2022-11-10T13:32:14Z","modified":"2026-02-04T02:15:30.378308Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5273-1","title":"rpm vulnerabilities","description":"Demi M. Obenour discovered that RPM Package Manager incorrectly handled\ncertain files. An attacker could possibly use this issue to corrupt the\ndatabase and cause a denial of service. (CVE-2021-3421, CVE-2021-20271)\n\nDemi M. Obenour discovered that RPM Package Manager incorrectly handled\nmemory when processing certain data from the database. An attacker could\npossibly use this issue to cause a denial of service. This issue only\naffects Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2021-20266)\n","status":"published","published":"2022-07-21T06:56:30Z","modified":"2026-06-25T13:31:01.017658691Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}