Vulnerability Database
Blog
FAQ
Docs
RHSA-2024:0424
See a problem?
Source
https://access.redhat.com/errata/RHSA-2024:0424
Import Source
https://security.access.redhat.com/data/osv/RHSA-2024:0424.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2024:0424
Related
CVE-2021-35937
CVE-2021-35938
CVE-2021-35939
Published
2024-09-16T12:46:38Z
Modified
2024-09-16T12:46:38Z
Severity
6.5 (Medium)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: rpm security update
Details
References
https://access.redhat.com/errata/RHSA-2024:0424
https://access.redhat.com/security/updates/classification/#moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1964114
https://bugzilla.redhat.com/show_bug.cgi?id=1964125
https://bugzilla.redhat.com/show_bug.cgi?id=1964129
https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0424.json
https://access.redhat.com/security/cve/CVE-2021-35937
https://www.cve.org/CVERecord?id=CVE-2021-35937
https://nvd.nist.gov/vuln/detail/CVE-2021-35937
https://access.redhat.com/security/cve/CVE-2021-35938
https://www.cve.org/CVERecord?id=CVE-2021-35938
https://nvd.nist.gov/vuln/detail/CVE-2021-35938
https://rpm.org/wiki/Releases/4.18.0
https://access.redhat.com/security/cve/CVE-2021-35939
https://www.cve.org/CVERecord?id=CVE-2021-35939
https://nvd.nist.gov/vuln/detail/CVE-2021-35939
Affected packages
Red Hat:rhel_eus:8.6::appstream
/
python3-rpm
Package
Name
python3-rpm
Purl
pkg:rpm/redhat/python3-rpm
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
python3-rpm-debuginfo
Package
Name
python3-rpm-debuginfo
Purl
pkg:rpm/redhat/python3-rpm-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm
Package
Name
rpm
Purl
pkg:rpm/redhat/rpm
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-apidocs
Package
Name
rpm-apidocs
Purl
pkg:rpm/redhat/rpm-apidocs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-build
Package
Name
rpm-build
Purl
pkg:rpm/redhat/rpm-build
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-build-debuginfo
Package
Name
rpm-build-debuginfo
Purl
pkg:rpm/redhat/rpm-build-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-build-libs
Package
Name
rpm-build-libs
Purl
pkg:rpm/redhat/rpm-build-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-build-libs-debuginfo
Package
Name
rpm-build-libs-debuginfo
Purl
pkg:rpm/redhat/rpm-build-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-cron
Package
Name
rpm-cron
Purl
pkg:rpm/redhat/rpm-cron
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-debuginfo
Package
Name
rpm-debuginfo
Purl
pkg:rpm/redhat/rpm-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-debugsource
Package
Name
rpm-debugsource
Purl
pkg:rpm/redhat/rpm-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-devel
Package
Name
rpm-devel
Purl
pkg:rpm/redhat/rpm-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-devel-debuginfo
Package
Name
rpm-devel-debuginfo
Purl
pkg:rpm/redhat/rpm-devel-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-libs
Package
Name
rpm-libs
Purl
pkg:rpm/redhat/rpm-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-libs-debuginfo
Package
Name
rpm-libs-debuginfo
Purl
pkg:rpm/redhat/rpm-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-fapolicyd
Package
Name
rpm-plugin-fapolicyd
Purl
pkg:rpm/redhat/rpm-plugin-fapolicyd
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-fapolicyd-debuginfo
Package
Name
rpm-plugin-fapolicyd-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-fapolicyd-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-ima
Package
Name
rpm-plugin-ima
Purl
pkg:rpm/redhat/rpm-plugin-ima
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-ima-debuginfo
Package
Name
rpm-plugin-ima-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-ima-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-prioreset
Package
Name
rpm-plugin-prioreset
Purl
pkg:rpm/redhat/rpm-plugin-prioreset
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-prioreset-debuginfo
Package
Name
rpm-plugin-prioreset-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-prioreset-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-selinux
Package
Name
rpm-plugin-selinux
Purl
pkg:rpm/redhat/rpm-plugin-selinux
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-selinux-debuginfo
Package
Name
rpm-plugin-selinux-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-selinux-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-syslog
Package
Name
rpm-plugin-syslog
Purl
pkg:rpm/redhat/rpm-plugin-syslog
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-syslog-debuginfo
Package
Name
rpm-plugin-syslog-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-syslog-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-systemd-inhibit
Package
Name
rpm-plugin-systemd-inhibit
Purl
pkg:rpm/redhat/rpm-plugin-systemd-inhibit
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-plugin-systemd-inhibit-debuginfo
Package
Name
rpm-plugin-systemd-inhibit-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-systemd-inhibit-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-sign
Package
Name
rpm-sign
Purl
pkg:rpm/redhat/rpm-sign
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::appstream
/
rpm-sign-debuginfo
Package
Name
rpm-sign-debuginfo
Purl
pkg:rpm/redhat/rpm-sign-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
python3-rpm
Package
Name
python3-rpm
Purl
pkg:rpm/redhat/python3-rpm
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
python3-rpm-debuginfo
Package
Name
python3-rpm-debuginfo
Purl
pkg:rpm/redhat/python3-rpm-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm
Package
Name
rpm
Purl
pkg:rpm/redhat/rpm
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-apidocs
Package
Name
rpm-apidocs
Purl
pkg:rpm/redhat/rpm-apidocs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-build
Package
Name
rpm-build
Purl
pkg:rpm/redhat/rpm-build
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-build-debuginfo
Package
Name
rpm-build-debuginfo
Purl
pkg:rpm/redhat/rpm-build-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-build-libs
Package
Name
rpm-build-libs
Purl
pkg:rpm/redhat/rpm-build-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-build-libs-debuginfo
Package
Name
rpm-build-libs-debuginfo
Purl
pkg:rpm/redhat/rpm-build-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-cron
Package
Name
rpm-cron
Purl
pkg:rpm/redhat/rpm-cron
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-debuginfo
Package
Name
rpm-debuginfo
Purl
pkg:rpm/redhat/rpm-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-debugsource
Package
Name
rpm-debugsource
Purl
pkg:rpm/redhat/rpm-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-devel
Package
Name
rpm-devel
Purl
pkg:rpm/redhat/rpm-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-devel-debuginfo
Package
Name
rpm-devel-debuginfo
Purl
pkg:rpm/redhat/rpm-devel-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-libs
Package
Name
rpm-libs
Purl
pkg:rpm/redhat/rpm-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-libs-debuginfo
Package
Name
rpm-libs-debuginfo
Purl
pkg:rpm/redhat/rpm-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-fapolicyd
Package
Name
rpm-plugin-fapolicyd
Purl
pkg:rpm/redhat/rpm-plugin-fapolicyd
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-fapolicyd-debuginfo
Package
Name
rpm-plugin-fapolicyd-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-fapolicyd-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-ima
Package
Name
rpm-plugin-ima
Purl
pkg:rpm/redhat/rpm-plugin-ima
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-ima-debuginfo
Package
Name
rpm-plugin-ima-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-ima-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-prioreset
Package
Name
rpm-plugin-prioreset
Purl
pkg:rpm/redhat/rpm-plugin-prioreset
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-prioreset-debuginfo
Package
Name
rpm-plugin-prioreset-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-prioreset-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-selinux
Package
Name
rpm-plugin-selinux
Purl
pkg:rpm/redhat/rpm-plugin-selinux
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-selinux-debuginfo
Package
Name
rpm-plugin-selinux-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-selinux-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-syslog
Package
Name
rpm-plugin-syslog
Purl
pkg:rpm/redhat/rpm-plugin-syslog
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-syslog-debuginfo
Package
Name
rpm-plugin-syslog-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-syslog-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-systemd-inhibit
Package
Name
rpm-plugin-systemd-inhibit
Purl
pkg:rpm/redhat/rpm-plugin-systemd-inhibit
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-plugin-systemd-inhibit-debuginfo
Package
Name
rpm-plugin-systemd-inhibit-debuginfo
Purl
pkg:rpm/redhat/rpm-plugin-systemd-inhibit-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-sign
Package
Name
rpm-sign
Purl
pkg:rpm/redhat/rpm-sign
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
Red Hat:rhel_eus:8.6::baseos
/
rpm-sign-debuginfo
Package
Name
rpm-sign-debuginfo
Purl
pkg:rpm/redhat/rpm-sign-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.14.3-26.el8_6
RHSA-2024:0424 - OSV