Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2021:0067
Issued: 2021-11-24
Updated: 2021-11-24
Summary
rpm security update
Severity
Moderate
Description
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:
CVE-2021-20271:
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
References
Updated Packages
- aarch64
- rpm-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-build-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-build-libs-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-debuginfo-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-devel-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-libs-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-plugin-systemd-inhibit-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-python-4.11.3-48.1.al7.aarch64.rpm → (download)
- rpm-sign-4.11.3-48.1.al7.aarch64.rpm → (download)
- i686
- rpm-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-build-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-build-libs-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-debuginfo-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-devel-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-libs-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-plugin-systemd-inhibit-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-python-4.11.3-48.1.al7.i686.rpm → (download)
- rpm-sign-4.11.3-48.1.al7.i686.rpm → (download)
- src
- rpm-4.11.3-48.1.al7.src.rpm → (download)
- x86_64
- rpm-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-build-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-build-libs-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-debuginfo-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-devel-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-libs-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-plugin-systemd-inhibit-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-python-4.11.3-48.1.al7.x86_64.rpm → (download)
- rpm-sign-4.11.3-48.1.al7.x86_64.rpm → (download)
- noarch
- rpm-apidocs-4.11.3-48.1.al7.noarch.rpm → (download)
- rpm-cron-4.11.3-48.1.al7.noarch.rpm → (download)