{
  "cveId": "CVE-2021-20271",
  "url": "https://patchblox.com/security/cve/CVE-2021-20271",
  "summary": "CVE-2021-20271 is fixed in 24 products on 1 platform, first by debugedit 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1, released May 19, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "rpm-plugin-prioreset: The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling,...",
  "description": "The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.\n\nSecurity Fix(es):\n\n* rpm: Signature checks bypass via corrupted rpm package (CVE-2021-20271)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2021-03-26T10:15:00Z",
  "severity": "Moderate",
  "cvss": 7,
  "epss": 0.00772,
  "epssPercentile": 0.55924,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "debugedit",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "debugedit 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-debugedit-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "debugedit",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "debugedit 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-debugedit-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpm8",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "librpm8 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-librpm8-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpm8",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "librpm8 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-librpm8-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpmbuild8",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "librpmbuild8 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-librpmbuild8-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpmbuild8",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "librpmbuild8 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-librpmbuild8-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpmio8",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "librpmio8 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-librpmio8-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpmio8",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "librpmio8 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-librpmio8-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpmsign8",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "librpmsign8 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-librpmsign8-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librpmsign8",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "librpmsign8 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-librpmsign8-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-rpm",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "python-rpm 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-rpm-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-rpm",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "python-rpm 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python-rpm-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rpm",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rpm",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "python3-rpm 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-rpm-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rpm",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "python3-rpm 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-rpm-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rpm",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "rpm 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-rpm-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "rpm 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-rpm-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-apidocs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-apidocs",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-build-libs",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "rpm-common 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-rpm-common-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "rpm-common 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-rpm-common-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-cron",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-cron",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-i18n",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "rpm-i18n 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-rpm-i18n-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-i18n",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "rpm-i18n 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-rpm-i18n-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-libs",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-fapolicyd",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-fapolicyd",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-ima",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-ima",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-prioreset",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-prioreset",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-selinux",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-selinux",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-syslog",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-syslog",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-systemd-inhibit",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-plugin-systemd-inhibit",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-sign",
      "release": "RHEL 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "RHSA-2021:2574",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2574",
      "released": "2021-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm-sign",
      "release": "ol 8",
      "fixedVersion": "0:4.14.3-14.el8_4",
      "fix": "ELSA-2021-2574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2574",
      "released": "2021-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm2cpio",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "fix": "rpm2cpio 4.14.1\u002Bdfsg1-2ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-rpm2cpio-4.14.1-dfsg1-2ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rpm2cpio",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "rpm2cpio 4.14.2.1\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-rpm2cpio-4.14.2.1-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-05-19T07:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}