CVE:CVE-2021-20271
CNNVD:CNNVD-202103-853
Red Hat Package Manager是美国红帽（Red Hat）公司的一种用于互联网下载包的打包及安装工具。它包含在某些Linux分发版中。它生成具有.RPM扩展名的文件。与Dpkg类似。
Red Hat Package Manager存在数据伪造问题漏洞，该漏洞允许攻击者说服受害者安装一个看似可验证的包，其签名头被修改，从而导致RPM数据库损坏。
solution:Upgrade rpm rpm to a higher version than 4.15.1.3,4.16.1.3,4.15.0:alpha,4.15.0:beta1,4.15.0:rc1,4.16.0:alpha,4.16.0:beta2,4.16.0:beta3,4.16.0:rc1,and avoid the version [4.15.0,4.15.1.3),[4.16.0,4.16.1.3),4.15.0:alpha,4.15.0:beta1,4.15.0:rc1,4.16.0:alpha,4.16.0:beta2,4.16.0:beta3,4.16.0:rc1; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade starwindsoftware starwind_virtual_san to a higher version than v8:build14398,and avoid the version v8:build14398