StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · rpm

`rpm` CVE matrix across Linux distros

88 CVEs tracked across 8 distro releases. Showing the 88 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2005-2096→ fixed in4.0.4-31.1
CVE-2005-4889→ fixed in4.7.0-1
CVE-2006-5466→ fixed in4.4.1-11
CVE-2010-2059→ fixed in4.8.1-1
CVE-2010-2197→ fixed in4.8.1-1
CVE-2011-3378→ fixed in4.9.1.2-1
CVE-2012-0060→ fixed in4.9.1.3-1
CVE-2012-0061→ fixed in4.9.1.3-1
+7 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y rpm

Debian bookworm

Source: Debian

CVE-2005-2096→ fixed in4.0.4-31.1
CVE-2005-4889→ fixed in4.7.0-1
CVE-2006-5466→ fixed in4.4.1-11
CVE-2010-2059→ fixed in4.8.1-1
CVE-2010-2197→ fixed in4.8.1-1
CVE-2011-3378→ fixed in4.9.1.2-1
CVE-2012-0060→ fixed in4.9.1.3-1
CVE-2012-0061→ fixed in4.9.1.3-1
+11 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y rpm

Debian trixie

Source: Debian

CVE-2005-2096→ fixed in4.0.4-31.1
CVE-2005-4889→ fixed in4.7.0-1
CVE-2006-5466→ fixed in4.4.1-11
CVE-2010-2059→ fixed in4.8.1-1
CVE-2010-2197→ fixed in4.8.1-1
CVE-2011-3378→ fixed in4.9.1.2-1
CVE-2012-0060→ fixed in4.9.1.3-1
CVE-2012-0061→ fixed in4.9.1.3-1
+11 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y rpm

Alpine v3.20

Source: Alpine secdb

CVE-2021-20266→ fixed in4.16.1.3-r0
CVE-2021-20271→ fixed in4.16.1.3-r0
CVE-2021-3421→ fixed in4.16.1.3-r0
CVE-2021-3521→ fixed in4.17.1-r0
CVE-2021-35937→ fixed in4.18.0-r0
CVE-2021-35938→ fixed in4.18.0-r0
CVE-2021-35939→ fixed in4.18.0-r0

Single command to patch all of these:

apk add --upgrade rpm

Alpine v3.21

Source: Alpine secdb

CVE-2021-20266→ fixed in4.16.1.3-r0
CVE-2021-20271→ fixed in4.16.1.3-r0
CVE-2021-3421→ fixed in4.16.1.3-r0
CVE-2021-3521→ fixed in4.17.1-r0
CVE-2021-35937→ fixed in4.18.0-r0
CVE-2021-35938→ fixed in4.18.0-r0
CVE-2021-35939→ fixed in4.18.0-r0

Single command to patch all of these:

apk add --upgrade rpm

Alpine edge

Source: Alpine secdb

CVE-2021-20266→ fixed in4.16.1.3-r0
CVE-2021-20271→ fixed in4.16.1.3-r0
CVE-2021-3421→ fixed in4.16.1.3-r0
CVE-2021-3521→ fixed in4.17.1-r0
CVE-2021-35937→ fixed in4.18.0-r0
CVE-2021-35938→ fixed in4.18.0-r0
CVE-2021-35939→ fixed in4.18.0-r0

Single command to patch all of these:

apk add --upgrade rpm

Alpine v3.18

Source: Alpine secdb

CVE-2021-20266→ fixed in4.16.1.3-r0
CVE-2021-20271→ fixed in4.16.1.3-r0
CVE-2021-3421→ fixed in4.16.1.3-r0
CVE-2021-3521→ fixed in4.17.1-r0
CVE-2021-35937→ fixed in4.18.0-r0
CVE-2021-35938→ fixed in4.18.0-r0
CVE-2021-35939→ fixed in4.18.0-r0

Single command to patch all of these:

apk add --upgrade rpm

Alpine v3.19

Source: Alpine secdb

CVE-2021-20266→ fixed in4.16.1.3-r0
CVE-2021-20271→ fixed in4.16.1.3-r0
CVE-2021-3421→ fixed in4.16.1.3-r0
CVE-2021-3521→ fixed in4.17.1-r0
CVE-2021-35937→ fixed in4.18.0-r0
CVE-2021-35938→ fixed in4.18.0-r0
CVE-2021-35939→ fixed in4.18.0-r0

Single command to patch all of these:

apk add --upgrade rpm

Is YOUR rpm patched?

5-second check on your actual server. The quickscan reads your installed rpm version and matches against the same 88-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)