CVE-2021-3421
Fixed in a distro release EPSS <1%
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.
Products: rpm, redhat enterprise_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | python2-rpm | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | python3-rpm | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-apidocs | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-build | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-build-libs | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-cron | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-devel | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-libs | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-plugin-systemd-inhibit | 4.11.3-40.amzn2.0.6 |
| Amazon Linux 2 | rpm-sign | 4.11.3-40.amzn2.0.6 |
| Debian 12 | rpm | 4.16.1.2+dfsg1-1 |
| Debian 13 | rpm | 4.16.1.2+dfsg1-1 |
| Debian 14 | rpm | 4.16.1.2+dfsg1-1 |
| Red Hat Enterprise Linux 8 | python3-rpm | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | python3-rpm-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-apidocs | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-build | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-build-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-build-libs | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-build-libs-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-cron | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-debugsource | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-devel | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-devel-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-libs | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-libs-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-fapolicyd | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-fapolicyd-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-ima | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-ima-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-prioreset | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-prioreset-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-selinux | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-selinux-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-syslog | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-syslog-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-systemd-inhibit | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-plugin-systemd-inhibit-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-sign | 0:4.14.3-14.el8_4 |
| Red Hat Enterprise Linux 8 | rpm-sign-debuginfo | 0:4.14.3-14.el8_4 |
| Red Hat rhel eus 8.2 | python3-rpm | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | python3-rpm-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-apidocs | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-build | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-build-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-build-libs | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-build-libs-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-cron | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-debugsource | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-devel | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-devel-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-libs | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-libs-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-ima | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-ima-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-prioreset | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-prioreset-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-selinux | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-selinux-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-syslog | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-syslog-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-systemd-inhibit | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-plugin-systemd-inhibit-debuginfo | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-sign | 0:4.14.2-38.el8_2 |
| Red Hat rhel eus 8.2 | rpm-sign-debuginfo | 0:4.14.2-38.el8_2 |
| Rocky Linux 8 | rpm | 0:4.14.3-14.el8_4 |
| SUSE Linux Enterprise Micro 5.0 | python-rpm | 4.14.1-22.4.1 |
| SUSE Linux Enterprise Micro 5.0 | rpm | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | python-rpm | 4.14.1-22.4.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | rpm | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | python-rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | rpm | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 | rpm-ndb | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP3 | rpm-ndb | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP2 | python-rpm | 4.14.1-22.4.1 |
| SUSE Linux Enterprise Module for Python 2 15 SP3 | python-rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Server 12 SP5 | python3-rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server 12 SP5 | rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server 12 SP5 | rpm-python | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python3-rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | rpm-python | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | rpm | 4.11.2-16.26.1 |
| SUSE Manager Proxy Module 4.1 | rpm | 4.14.1-22.4.2 |
| SUSE Manager Proxy Module 4.2 | rpm | 4.14.3-37.2 |
| SUSE Manager Server Module 4.1 | rpm | 4.14.1-22.4.2 |
| SUSE Manager Server Module 4.2 | rpm | 4.14.3-37.2 |
| Ubuntu Pro 14.04 LTS | rpm | no fix |
| Ubuntu Pro 16.04 LTS | rpm | 4.12.0.1+dfsg1-3ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | rpm | 4.14.1+dfsg1-2ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | rpm | 4.14.2.1+dfsg1-1ubuntu0.1~esm1 |
| openSUSE Leap 15.2 | python-rpm | 4.14.1-lp152.18.3.1 |
| openSUSE Leap 15.2 | rpm | 4.14.1-lp152.18.3.1 |
| openSUSE Leap 15.3 | libdnf | 0.62.0-5.3.1 |
| openSUSE Leap 15.3 | python-rpm | 4.14.3-37.2 |
| openSUSE Leap 15.3 | rpm | 4.14.3-37.2 |
| openSUSE Leap 15.3 | rpm-ndb | 4.14.3-37.2 |
| openSUSE Tumbleweed | rpm | 4.16.1.3-3.2 |