{"id":"CVE-2021-3521","aliases":["ALPINE-CVE-2021-3521","ALSA-2022:0368","AZL-10637","BELL-CVE-2021-3521","CLSA-2022-1644869406","CLSA-2022-1644869807","CLSA-2026-1777539108","CLSA-2026-1777539405","CLSA-2026-1777545003","DEBIAN-CVE-2021-3521","EUVD-2021-26837","GHSA-pr6x-p264-jrpq","MGASA-2022-0321","OESA-2021-1431","RHSA-2022:0254","RHSA-2022:0368","RHSA-2022:0634","RLSA-2022:0368","SUSE-SU-2024:1557-1","SUSE-SU-2024:1557-2","SUSE-SU-2024:1557-3","UBUNTU-CVE-2021-3521","openSUSE-SU-2024:12245-1"],"status":"published","title":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00325,"percentile":0.25882,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-347"],"published":"2021-11-12T11:04:42Z","modified":"2026-11-03T06:32:47Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"rpm","fixed_in":["4.17.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rpm-build","fixed_in":["4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rpm-plugin-fapolicyd","fixed_in":["4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rpm","fixed_in":["4.18.0-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-rpm","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-apidocs","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-build","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-build-libs","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-cron","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-devel","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-libs","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-fapolicyd","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-ima","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-prioreset","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-selinux","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-syslog","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-systemd-inhibit","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rpm-sign","fixed_in":["4.14.3-19.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-apidocs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-build","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-build-libs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-cron","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-devel","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-libs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-plugin-systemd-inhibit","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-python","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rpm-sign","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-apidocs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-build","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-build-libs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-cron","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-devel","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-libs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-plugin-systemd-inhibit","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-python","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"rpm-sign","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-apidocs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-build","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-build-libs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-cron","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-devel","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-libs","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-plugin-systemd-inhibit","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-python","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rpm-sign","fixed_in":["4.11.3-48.0.3.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rpm","fixed_in":["4.18.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rpm","fixed_in":["4.18.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rpm","fixed_in":["4.18.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"rpm","fixed_in":["4.16.1.3-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"rpm","fixed_in":["4.15.1-26.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"rpm","fixed_in":["4.15.1-30.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-build","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-build-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-debugsource","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-fapolicyd","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-fapolicyd-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"python3-rpm","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-apidocs","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-build-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-build-libs","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-cron","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-debugsource","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-devel","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-libs","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-fapolicyd-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-ima","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-prioreset","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-selinux","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-syslog","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-sign","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.3-14.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debugsource","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-apidocs","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-cron","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debugsource","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-fapolicyd-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-debugsource","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"python3-rpm","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-apidocs","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-libs","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-cron","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-debugsource","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-devel","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-libs","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-ima","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-prioreset","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-selinux","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-syslog","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-sign","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.2-40.el8_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"rpm","fixed_in":["0:4.14.3-19.el8_5.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"rpm","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"rpm-ndb","fixed_in":["4.14.3-150400.59.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rpm","fixed_in":["4.17.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.3-48.0.3.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.1-26.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.1-30.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-14.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.2-40.el8_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8_5.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-150400.59.16.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.1-2","4.11.1-3","4.11.1-3ubuntu0.1","4.11.1-3ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.0.1+dfsg1-3build2","4.12.0.1+dfsg1-3build3","4.12.0.1+dfsg1-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.0.2+dfsg1-2build2","4.14.0+dfsg1-2","4.14.1+dfsg1-2","4.14.1+dfsg1-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.14.2.1+dfsg1-1","4.14.2.1+dfsg1-1build1","4.14.2.1+dfsg1-1build2","4.14.2.1+dfsg1-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.16.1.2+dfsg1-3ubuntu1","4.16.1.2+dfsg1-3ubuntu3","4.17.0+dfsg1-1","4.17.0+dfsg1-3","4.17.0+dfsg1-4","4.17.0+dfsg1-4build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0+dfsg-1build1","4.18.0+dfsg-1build2","4.18.2+dfsg-1","4.18.2+dfsg-2","4.18.2+dfsg-2.1build1","4.18.2+dfsg-2.1build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.1+dfsg-1","4.20.1+dfsg-2","4.20.1+dfsg-2build1","4.20.1+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1-1build1","6.1.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.1+dfsg-3","6.0.0-2","6.0.1-1","6.0.1-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1-1.1"}]}]}],"products":[{"vendor":"red hat, inc.","product":"rpm"},{"vendor":"rpm","product":"rpm"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941098","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3521","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/rpm-software-management/rpm/pull/1795/","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/rpm-software-management/rpm/commit/bd36c5dc9fb6d90c46fbfed8c2d67516fc571ec8","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202210-22","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3521","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0254","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0368","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0634","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pr6x-p264-jrpq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3521","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-3521","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3521","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1644869406.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1644869807.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777539108.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777539405.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777545003.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3521","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0321.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29987","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1431","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0254.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3521","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0368.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0634.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0368","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241557-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1189495","tags":["report"]},{"url":"https://bugzilla.suse.com/1191175","tags":["report"]},{"url":"https://bugzilla.suse.com/1218686","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3521","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241557-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241557-3/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3521","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3521","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T00:00:00Z","modified":"2024-08-03T17:01:07.975Z","cwes":["CWE-347"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26837","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T00:00:00Z","modified":"2024-08-03T17:01:07Z","updated_at":"2026-11-03T03:25:12.535968Z"}],"ghsa":[{"id":"GHSA-pr6x-p264-jrpq","title":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-23T00:00:16Z","modified":"2023-02-10T05:07:24Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:54:03.896291Z"}],"nvd":[{"id":"CVE-2021-3521","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T15:15:13.473Z","modified":"2026-06-17T04:05:17.293Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"ALPINE-CVE-2021-3521","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T15:15:13.473Z","modified":"2026-11-03T06:32:47.571699608Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"AZL-10637","title":"CVE-2021-3521 affecting package rpm for versions less than 4.18.0-1","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T15:15:13Z","modified":"2026-04-21T04:21:19.929179Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:01.408755Z"},{"id":"BELL-CVE-2021-3521","title":"CVE-2021-3521 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:48.986061Z","modified":"2026-01-26T09:46:37.279474Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3521","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T15:15:13.473Z","modified":"2026-10-20T14:25:21.643454591Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3521","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T15:15:13.473Z","modified":"2026-10-23T18:04:00.105951888Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1431","title":"rpm security update","description":"The RPM Package Manager (RPM) is a powerful package management system capability as below\r\n\r\nSecurity Fix(es):\r\n\r\nThe OpenPGP subkey is associated with the master key through a binding signature. RPM will not check their binding signature before importing the subkey; if the attacker can add it or the other party of social engineering adds the malicious subkey to the legal public Key, RPM may mistakenly trust malicious signatures.(CVE-2021-3521)","status":"published","published":"2021-11-12T11:04:42Z","modified":"2026-08-18T01:16:10.402164108Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:0254","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T07:01:43Z","modified":"2026-06-26T12:21:17.287219963Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0368","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T07:01:52Z","modified":"2026-06-26T12:22:06.240457121Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0634","title":"Red Hat Security Advisory: rpm security update","status":"published","published":"2024-09-16T07:01:59Z","modified":"2026-06-26T12:22:28.448789091Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2022:0368","title":"Moderate: rpm security update","description":"The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.\n\nSecurity Fix(es):\n\n* rpm: RPM does not require subkeys to have a valid binding signature (CVE-2021-3521)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-02-01T20:13:05Z","modified":"2026-02-05T10:45:09.886746Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3521","description":"There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources.","status":"published","published":"2022-08-22T15:15:00Z","modified":"2026-10-17T12:55:53.98657082Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2022:0368","title":"Moderate: rpm security update","description":"The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.\n\nSecurity Fix(es):\n\n* rpm: RPM does not require subkeys to have a valid binding signature (CVE-2021-3521)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-02-01T20:13:05Z","modified":"2026-10-29T11:00:39.415857256Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1644869406","title":"Fix of CVE: CVE-2021-3521","description":"- CVE-2021-3521: RPM does not require subkeys to have a valid binding signature","status":"published","published":"2022-02-14T20:10:06Z","modified":"2026-06-01T00:33:20.126132303Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1644869807","title":"Fix of CVE: CVE-2021-3521, CVE-2021-20266","description":"- CVE-2021-20266: missing length checks in hdrblobInit()\n- CVE-2021-3521: RPM does not require subkeys to have a valid binding signature\n- Address important covscan issues (#1996665, #2022537)","status":"published","published":"2022-02-14T20:16:47Z","modified":"2026-10-21T10:47:08.442044788Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2026-1777539108","title":"rpm: Fix of CVE-2021-3521","description":"- CVE-2021-3521: validate and require subkey binding signatures on PGP\n  public keys","status":"published","published":"2026-04-30T08:51:52Z","modified":"2026-06-01T00:33:27.288249914Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777539405","title":"rpm: Fix of CVE-2021-3521","description":"- CVE-2021-3521: validate and require subkey binding signatures on PGP\n  public keys","status":"published","published":"2026-04-30T08:56:50Z","modified":"2026-06-01T00:33:20.195732206Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777545003","title":"rpm: Fix of CVE-2021-3521","description":"- CVE-2021-3521: validate and require subkey binding signatures on PGP\n  public keys","status":"published","published":"2026-05-02T01:16:46Z","modified":"2026-06-01T00:33:18.661747852Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"MGASA-2022-0321","title":"Updated rpm packages fix security vulnerability","description":"RPM does not require subkeys to have a valid binding signature\n(CVE-2021-3521)\n","status":"published","published":"2022-09-10T20:26:43Z","modified":"2026-04-16T04:41:52.449882598Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12245-1","title":"librpmbuild9-4.17.1-1.1 on GA media","description":"These are all security issues fixed in the librpmbuild9-4.17.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:07.240607Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2024:1557-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity fixes:\n- CVE-2021-3521: Fixed missing subkey binding signature checking (bsc#1191175)\n\nOther fixes:\n\n- accept more signature subpackets marked as critical (bsc#1218686)\n- backport limit support for the autopatch macro (bsc#1189495)\n","status":"published","published":"2024-05-08T09:42:44Z","modified":"2026-02-04T03:59:18.588368Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1557-2","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity fixes:\n- CVE-2021-3521: Fixed missing subkey binding signature checking (bsc#1191175)\n\nOther fixes:\n\n- accept more signature subpackets marked as critical (bsc#1218686)\n- backport limit support for the autopatch macro (bsc#1189495)\n","status":"published","published":"2024-05-30T11:34:08Z","modified":"2026-02-04T03:42:42.195065Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1557-3","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity fixes:\n- CVE-2021-3521: Fixed missing subkey binding signature checking (bsc#1191175)\n\nOther fixes:\n\n- accept more signature subpackets marked as critical (bsc#1218686)\n- backport limit support for the autopatch macro (bsc#1189495)\n","status":"published","published":"2024-05-08T09:43:05Z","modified":"2026-02-04T02:12:58.979265Z","updated_at":"2026-11-02T15:53:54.652421Z"}]}}