OESA-2021-1163

Dashboard / Vulnerabilities / OESA-2021-1163

OESA-2021-1163

Summary: rpm security update

Details: The RPM Package Manager (RPM) is a powerful package management system capability as below -building computer software from source into easily distributable packages -installing, updating and uninstalling packaged software -querying detailed information about the packaged software, whether installed or not -verifying integrity of packaged software and resulting software installation Security Fix(es): A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.(CVE-2021-20271)

References: https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1163, https://nvd.nist.gov/vuln/detail/CVE-2021-20271