tocsin

Debian/rpm: medium 4.9

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system a

Action: Upgrade rpm to 4.16.1.2+dfsg1-1 or later.

Affected

introducedfixedlast affected
04.16.1.2+dfsg1-1-

Fixed versions

4.16.1.2+dfsg1-1

Sources

published · modified · JSON