CVE:CVE-2021-3421
CNNVD:CNNVD-202103-851
Red Hat Package Manager是美国Red Hat公司的一种用于互联网下载包的打包及安装工具。它包含在某些Linux分发版中。它生成具有.RPM扩展名的文件。与Dpkg类似。
Red Hat Package Manager 存在数据伪造问题漏洞，该漏洞源于RPM包的读取功能。
solution:Upgrade rpm rpm to a higher version than 4.16.1.3,and avoid the version (,4.16.1.3); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34