Wind River Support Network

HomeDefectsLINCD-6907

Fixed

LINCD-6907 : Security Advisory - rpm - CVE-2021-3521

Created: Oct 7, 2021 Updated: Aug 28, 2022

Resolved Date: Jan 27, 2022

Found In Version: 10.20.6.0

Fix Version: 10.22.09.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

rpm: RPM does not require subkeys to have a valid binding signature
https://github.com/rpm-software-management/rpm/pull/1788


CREATE(Triage):(User=admin) CVE-2021-3521 (https://nvd.nist.gov/vuln/detail/CVE-2021-3521)

CVEs

CVE-2021-3521