AlmaLinux 8 : rpm (ALSA-2021:4489)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4489 advisory. - A flaw was found in RPM's hdrblobInit in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat...

Mageia: Security Advisory (MGASA-2021-0167)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : rpm (ELSA-2021-4489)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4489 advisory. - Fixes CVE-2021-20266 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested f...

rpm security, bug fix, and enhancement update

4.14.3-19 - Unbreak in-tree kmod strip by reverting brp-strip fix 1967291 4.14.3-18 - Address important covscan issues 1996665, vol. 2 4.14.3-17 - Address important covscan issues 1996665 4.14.3-16 - Add support for read-only sqlite rpmdb 1938928 - Drop compat .decode method from returned Py3...

CentOS 8 : rpm (CESA-2021:4489)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4489 advisory. - rpm: missing length checks in hdrblobInit CVE-2021-20266 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 8 : rpm (RHSA-2021:4489)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4489 advisory. The RPM Package Manager RPM is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating...

RLSA-2021:4489 Low: rpm security, bug fix, and enhancement update

The RPM Package Manager RPM is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Security Fixes: rpm: missing length checks in hdrblobInit CVE-2021-20266 For more details about the security issues, including t...

ALSA-2021:4489 Low: rpm security, bug fix, and enhancement update

The RPM Package Manager RPM is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Security Fixes: rpm: missing length checks in hdrblobInit CVE-2021-20266 For more details about the security issues, including t...

openSUSE 15 Security Update : rpm (openSUSE-SU-2021:1366-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1366-1 advisory. - A flaw was found in RPM's hdrblobInit in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds...

SUSE: Security Advisory (SUSE-SU-2021:3444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: python2-rpm / python3-rpm / rpm / rpm-32bit / rpm-build / rpm-devel / etc (SUSE-SU-2021:3444-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3444-1 advisory. Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545,...

openSUSE: Security Advisory for rpm (openSUSE-SU-2021:2682-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:2682-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : rpm (EulerOS-SA-2021-2254)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly...

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-2254)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : rpm (EulerOS-SA-2021-2280)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly...

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-2280)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-20266 affecting package rpm 4.14.2-15

CVE-2021-20266 affecting package rpm 4.14.2-15. A patched version of the package is available...

EulerOS Virtualization for ARM 64 3.0.6.0 : rpm (EulerOS-SA-2021-2015)

According to the versions of the rpm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can...

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-1992)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...