{"id":"SUSE-SU-2021:3444-1","summary":"Security update for rpm","details":"This update for rpm fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements (bsc#1183543, bsc#1183545, bsc#1183632)\n- PGP hardening changes (bsc#1185299)\n- Fixed potential access of freed mem in ndb's glue code (bsc#1179416)\n\nMaintaince issues fixed:\n\n- Fixed zstd detection (bsc#1187670)\n- Added ndb rofs support (bsc#1188548)\n- Fixed deadlock when multiple rpm processes try tp acquire the database lock (bsc#1183659)\n","modified":"2026-03-11T07:18:10.505041Z","published":"2021-10-15T07:03:27Z","related":["CVE-2021-20266","CVE-2021-20271","CVE-2021-3421"],"upstream":["CVE-2021-20266","CVE-2021-20271","CVE-2021-3421"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213444-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179416"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183543"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183545"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183632"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183659"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185299"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187670"},{"type":"REPORT","url":"https://bugzilla.suse.com/1188548"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-20266"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-20271"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3421"}],"affected":[{"package":{"name":"python-rpm","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","purl":"pkg:rpm/suse/python-rpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rpm":"4.14.1-22.4.1","rpm-32bit":"4.14.1-22.4.2","rpm-devel":"4.14.1-22.4.2","rpm":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"rpm","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","purl":"pkg:rpm/suse/rpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"ecosystem_specific":{"binaries":[{"rpm-devel":"4.14.1-22.4.2","rpm":"4.14.1-22.4.2","python3-rpm":"4.14.1-22.4.1","rpm-32bit":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"rpm","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","purl":"pkg:rpm/suse/rpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"ecosystem_specific":{"binaries":[{"rpm-build":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"rpm-ndb","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","purl":"pkg:rpm/suse/rpm-ndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"ecosystem_specific":{"binaries":[{"rpm-ndb":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"python-rpm","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","purl":"pkg:rpm/suse/python-rpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%202%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"ecosystem_specific":{"binaries":[{"python2-rpm":"4.14.1-22.4.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"rpm","ecosystem":"SUSE:Manager Proxy Module 4.1","purl":"pkg:rpm/suse/rpm&distro=SUSE%20Manager%20Proxy%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"ecosystem_specific":{"binaries":[{"rpm-build":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"rpm","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/rpm&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"ecosystem_specific":{"binaries":[{"rpm-build":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"python-rpm","ecosystem":"SUSE:Linux Enterprise Micro 5.0","purl":"pkg:rpm/suse/python-rpm&distro=SUSE%20Linux%20Enterprise%20Micro%205.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rpm":"4.14.1-22.4.1","rpm":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}},{"package":{"name":"rpm","ecosystem":"SUSE:Linux Enterprise Micro 5.0","purl":"pkg:rpm/suse/rpm&distro=SUSE%20Linux%20Enterprise%20Micro%205.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"ecosystem_specific":{"binaries":[{"python3-rpm":"4.14.1-22.4.1","rpm":"4.14.1-22.4.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3444-1.json"}}],"schema_version":"1.7.5"}