CLSA-2022-1644869807 Fix of CVE: CVE-2021-3521, CVE-2021-20266

CVE-2021-20266: missing length checks in hdrblobInit - CVE-2021-3521: RPM does not require subkeys to have a valid binding signature - Address important covscan issues 1996665, 2022537...