CVE:CVE-2021-3445
CNNVD:CNNVD-202103-1024
Red Hat libdnf是美国红帽（Red Hat）公司的一个应用软件。提供一个为libsolv提供简化的C和Python API的库。
libdnf 存在数据伪造问题漏洞，该漏洞源于signature功能允许攻击者实现代码执行。
solution:Upgrade rpm libdnf to a higher version than 0.60.1,and avoid the version (,0.60.1); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0