A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

...

Fedora 33 : rpm (2021-8d52a8a999)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8d52a8a999 advisory. - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to...

SUSE-SU-2021:0770-1 Security update for libsolv, libzypp, yast2-installation, zypper

This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues: Update zypper to version 1.14.43: - doc: give more details about creating versioned package locks bsc1181622 - man: Document synonymously used patch categories bsc1179847 - Fix source-download commnds help...

PT-2021-7696 · Rpm +10 · Rpm +10

Name of the Vulnerable Software and Affected Versions: RPM affected versions not specified Description: A flaw was found in RPM's hdrblobInit function in lib/header.c, which allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is t...

OPENSUSE-SU-2021:0059-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Update zypper to version 1.14.41 Update libzypp to 17.25.4 - CVE-2017-9271: Fixed information leak in the log file bsc1050625 bsc1177583 - RepoManager: Force refresh if repo url has changed bsc1174016 - RepoManager: Carefully tidy up the...

Security update for libzypp, zypper (moderate)

openSUSE Security Update: Security update for libzypp, zypper Announcement ID: openSUSE-SU-2021:0059-1 Rating: moderate References: 1050625 1174016 1177238 1177275 1177427 1177583 1178910 1178966 1179083 1179222 1179415 1179909 Cross-References: CVE-2017-9271 Affected Products: openSUSE Leap 15.2...

SUSE SLED15 / SLES15 Security Update : libzypp, zypper (SUSE-SU-2021:0109-1)

This update for libzypp, zypper fixes the following issues : Update zypper to version 1.14.41 Update libzypp to 17.25.4 CVE-2017-9271: Fixed information leak in the log file bsc1050625 bsc1177583 RepoManager: Force refresh if repo url has changed bsc1174016 RepoManager: Carefully tidy up the...

libsolv security, bug fix, and enhancement update

0.7.11-1 - Update to 0.7.11 - selected bug fixes: support archnoarch package changes when creating patch conflicts from the updateinfo data also support other rpm database types fixed solvzchunk decoding error if large chunks are used treat retracted pathes as irrelevant made addupdatetarget work...

openSUSE Security Update : rpm (openSUSE-SU-2010:0627-1)

This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also following bugs were fixed : - backport nosource/nopatch srpm tag generation fix - backport spurious tar message fix bnc558475 - do not use glibc for passwd/group looku...

MDVA-2008:061 : rpmdrake

This update fixes a minor issue in rpmdrake; it prevents crashing if the RPM database is locked when trying to install some packages bug 40244. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenab...

Mandriva Update for rpmdrake MDVA-2008:061 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:061 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for rpmdrake MDVA-2008:061 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:061 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...