{"id":"RHSA-2021:4464","summary":"Red Hat Security Advisory: dnf security and bug fix update","modified":"2026-06-27T10:14:32Z","published":"2024-09-16T06:07:33Z","upstream":["CVE-2021-3445"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2021:4464"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804234"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1818118"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847035"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893176"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898293"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904490"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906970"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913962"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914827"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918475"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926261"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926771"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929163"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929667"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932079"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934499"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940345"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951409"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951411"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951414"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957280"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961632"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961633"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961634"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967454"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4464.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2021-3445"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2021-3445"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3445"}],"affected":[{"package":{"name":"dnf","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/dnf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"dnf-automatic","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/dnf-automatic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"dnf-data","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/dnf-data"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"dnf-plugins-core","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/dnf-plugins-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.21-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"libdnf","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/libdnf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"libdnf-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/libdnf-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"libdnf-debugsource","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/libdnf-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-dnf","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-dnf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-dnf-plugin-post-transaction-actions","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-dnf-plugin-post-transaction-actions"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.21-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-dnf-plugin-versionlock","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-dnf-plugin-versionlock"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.21-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-dnf-plugins-core","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-dnf-plugins-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.21-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-hawkey","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-hawkey"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-hawkey-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-hawkey-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-libdnf","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-libdnf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-libdnf-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/python3-libdnf-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"yum","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/yum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-4.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"yum-utils","ecosystem":"Red Hat:enterprise_linux:8::baseos","purl":"pkg:rpm/redhat/yum-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.21-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"libdnf-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::crb","purl":"pkg:rpm/redhat/libdnf-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"libdnf-debugsource","ecosystem":"Red Hat:enterprise_linux:8::crb","purl":"pkg:rpm/redhat/libdnf-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"libdnf-devel","ecosystem":"Red Hat:enterprise_linux:8::crb","purl":"pkg:rpm/redhat/libdnf-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-hawkey-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::crb","purl":"pkg:rpm/redhat/python3-hawkey-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}},{"package":{"name":"python3-libdnf-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::crb","purl":"pkg:rpm/redhat/python3-libdnf-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.63.0-3.el8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:4464.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"}]}