tocsin

Debian/rpm: unknown

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass R

Action: Upgrade rpm to 4.10.1-2.1 or later.

Affected

introducedfixedlast affected
04.10.1-2.1-

Fixed versions

4.10.1-2.1

Sources

published · modified · JSON