CVE-2021-3521 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-3521 Interim 1 60 2023-09-25T23:37:36Z current 2021-10-01T01:02:58Z 2023-09-25T23:37:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-3521 There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Proxy Module 4.2 SUSE Manager Proxy Module 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server Module 4.2 SUSE Manager Server Module 4.3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed librpmbuild9-4.17.1-1.1 rpm rpm-32bit rpm-32bit-4.17.1-1.1 rpm-4.17.1-1.1 rpm-build rpm-build-4.17.1-1.1 rpm-build-perl-4.17.1-1.1 rpm-devel rpm-devel-4.17.1-1.1 librpmbuild9-4.17.1-1.1 as a component of openSUSE Tumbleweed rpm-4.17.1-1.1 as a component of openSUSE Tumbleweed rpm-32bit-4.17.1-1.1 as a component of openSUSE Tumbleweed rpm-build-4.17.1-1.1 as a component of openSUSE Tumbleweed rpm-build-perl-4.17.1-1.1 as a component of openSUSE Tumbleweed rpm-devel-4.17.1-1.1 as a component of openSUSE Tumbleweed rpm as a component of HPE Helion OpenStack 8 rpm-32bit as a component of HPE Helion OpenStack 8 rpm-build as a component of HPE Helion OpenStack 8 rpm as a component of SUSE CaaS Platform 4.0 rpm-32bit as a component of SUSE CaaS Platform 4.0 rpm-build as a component of SUSE CaaS Platform 4.0 rpm-devel as a component of SUSE CaaS Platform 4.0 rpm as a component of SUSE Enterprise Storage 6 rpm as a component of SUSE Enterprise Storage 7 rpm as a component of SUSE Enterprise Storage 7.1 rpm-32bit as a component of SUSE Enterprise Storage 7.1 rpm-build as a component of SUSE Enterprise Storage 7.1 rpm-devel as a component of SUSE Enterprise Storage 7.1 rpm as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 rpm as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS rpm-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS rpm-build as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS rpm-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS rpm as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS rpm-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS rpm-build as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS rpm-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS rpm as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS rpm-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS rpm-build as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS rpm-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS rpm as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rpm-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rpm-build as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rpm-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rpm as a component of SUSE Linux Enterprise Micro 5.1 rpm as a component of SUSE Linux Enterprise Micro 5.2 rpm as a component of SUSE Linux Enterprise Micro 5.3 rpm as a component of SUSE Linux Enterprise Micro 5.4 rpm as a component of SUSE Linux Enterprise Micro 5.5 rpm as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 rpm-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 rpm-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 rpm as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 rpm-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 rpm-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 rpm-build as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 rpm as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 rpm-build as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 rpm as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 rpm as a component of SUSE Linux Enterprise Point of Service 11 SP3 rpm as a component of SUSE Linux Enterprise Real Time 15 SP3 rpm-32bit as a component of SUSE Linux Enterprise Real Time 15 SP3 rpm-build as a component of SUSE Linux Enterprise Real Time 15 SP3 rpm-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 rpm as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata rpm as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata rpm as a component of SUSE Linux Enterprise Server 11 SP4 LTSS rpm as a component of SUSE Linux Enterprise Server 12 SP2-BCL rpm-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL rpm-build as a component of SUSE Linux Enterprise Server 12 SP2-BCL rpm as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS rpm-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS rpm-build as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS rpm as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rpm-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rpm-build as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rpm as a component of SUSE Linux Enterprise Server 12 SP5 rpm-32bit as a component of SUSE Linux Enterprise Server 12 SP5 rpm-build as a component of SUSE Linux Enterprise Server 12 SP5 rpm as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rpm-32bit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rpm-build as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rpm-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rpm as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rpm-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rpm-build as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rpm-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rpm as a component of SUSE Linux Enterprise Server Teradata 12 SP3 rpm as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rpm-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rpm-build as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rpm as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 rpm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 rpm-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 rpm-build as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 rpm-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 rpm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 rpm-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 rpm-build as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 rpm-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 rpm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rpm-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rpm-build as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rpm-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rpm as a component of SUSE Manager Proxy 4.2 rpm-32bit as a component of SUSE Manager Proxy 4.2 rpm-devel as a component of SUSE Manager Proxy 4.2 rpm-build as a component of SUSE Manager Proxy Module 4.2 rpm as a component of SUSE Manager Proxy Module 4.2 rpm-build as a component of SUSE Manager Proxy Module 4.3 rpm as a component of SUSE Manager Proxy Module 4.3 rpm as a component of SUSE Manager Retail Branch Server 4.2 rpm-32bit as a component of SUSE Manager Retail Branch Server 4.2 rpm-devel as a component of SUSE Manager Retail Branch Server 4.2 rpm as a component of SUSE Manager Server 4.2 rpm-32bit as a component of SUSE Manager Server 4.2 rpm-devel as a component of SUSE Manager Server 4.2 rpm-build as a component of SUSE Manager Server Module 4.2 rpm as a component of SUSE Manager Server Module 4.2 rpm-build as a component of SUSE Manager Server Module 4.3 rpm as a component of SUSE Manager Server Module 4.3 rpm as a component of SUSE OpenStack Cloud 8 rpm-32bit as a component of SUSE OpenStack Cloud 8 rpm-build as a component of SUSE OpenStack Cloud 8 rpm as a component of SUSE OpenStack Cloud 9 rpm-32bit as a component of SUSE OpenStack Cloud 9 rpm-build as a component of SUSE OpenStack Cloud 9 rpm as a component of SUSE OpenStack Cloud Crowbar 8 rpm-32bit as a component of SUSE OpenStack Cloud Crowbar 8 rpm-build as a component of SUSE OpenStack Cloud Crowbar 8 rpm as a component of SUSE OpenStack Cloud Crowbar 9 rpm-32bit as a component of SUSE OpenStack Cloud Crowbar 9 rpm-build as a component of SUSE OpenStack Cloud Crowbar 9 There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources. CVE-2021-3521 openSUSE Tumbleweed:librpmbuild9-4.17.1-1.1 openSUSE Tumbleweed:rpm-4.17.1-1.1 openSUSE Tumbleweed:rpm-32bit-4.17.1-1.1 openSUSE Tumbleweed:rpm-build-4.17.1-1.1 openSUSE Tumbleweed:rpm-build-perl-4.17.1-1.1 openSUSE Tumbleweed:rpm-devel-4.17.1-1.1 SUSE Linux Enterprise Point of Service 11 SP3:rpm SUSE Linux Enterprise Server 11 SP1 for Teradata:rpm SUSE Linux Enterprise Server 11 SP3 for Teradata:rpm SUSE Linux Enterprise Server 11 SP4 LTSS:rpm HPE Helion OpenStack 8:rpm HPE Helion OpenStack 8:rpm-32bit HPE Helion OpenStack 8:rpm-build SUSE CaaS Platform 4.0:rpm SUSE CaaS Platform 4.0:rpm-32bit SUSE CaaS Platform 4.0:rpm-build SUSE CaaS Platform 4.0:rpm-devel SUSE Enterprise Storage 6:rpm SUSE Enterprise Storage 7.1:rpm SUSE Enterprise Storage 7.1:rpm-32bit SUSE Enterprise Storage 7.1:rpm-build SUSE Enterprise Storage 7.1:rpm-devel SUSE Enterprise Storage 7:rpm SUSE Linux Enterprise High Performance Computing 12 SP5:rpm SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:rpm SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:rpm-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:rpm-build SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:rpm-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:rpm SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:rpm-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:rpm-build SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:rpm-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:rpm SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:rpm-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:rpm-build SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:rpm-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rpm SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rpm-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rpm-build SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rpm-devel SUSE Linux Enterprise Micro 5.1:rpm SUSE Linux Enterprise Micro 5.2:rpm SUSE Linux Enterprise Micro 5.3:rpm SUSE Linux Enterprise Micro 5.4:rpm SUSE Linux Enterprise Micro 5.5:rpm SUSE Linux Enterprise Module for Basesystem 15 SP4:rpm SUSE Linux Enterprise Module for Basesystem 15 SP4:rpm-32bit SUSE Linux Enterprise Module for Basesystem 15 SP4:rpm-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:rpm SUSE Linux Enterprise Module for Basesystem 15 SP5:rpm-32bit SUSE Linux Enterprise Module for Basesystem 15 SP5:rpm-devel SUSE Linux Enterprise Module for Development Tools 15 SP4:rpm SUSE Linux Enterprise Module for Development Tools 15 SP4:rpm-build SUSE Linux Enterprise Module for Development Tools 15 SP5:rpm SUSE Linux Enterprise Module for Development Tools 15 SP5:rpm-build SUSE Linux Enterprise Real Time 15 SP3:rpm SUSE Linux Enterprise Real Time 15 SP3:rpm-32bit SUSE Linux Enterprise Real Time 15 SP3:rpm-build SUSE Linux Enterprise Real Time 15 SP3:rpm-devel SUSE Linux Enterprise Server 12 SP2-BCL:rpm SUSE Linux Enterprise Server 12 SP2-BCL:rpm-32bit SUSE Linux Enterprise Server 12 SP2-BCL:rpm-build SUSE Linux Enterprise Server 12 SP4-ESPOS:rpm SUSE Linux Enterprise Server 12 SP4-ESPOS:rpm-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:rpm-build SUSE Linux Enterprise Server 12 SP4-LTSS:rpm SUSE Linux Enterprise Server 12 SP4-LTSS:rpm-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:rpm-build SUSE Linux Enterprise Server 12 SP5:rpm SUSE Linux Enterprise Server 12 SP5:rpm-32bit SUSE Linux Enterprise Server 12 SP5:rpm-build SUSE Linux Enterprise Server 15 SP1-LTSS:rpm SUSE Linux Enterprise Server 15 SP1-LTSS:rpm-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:rpm-build SUSE Linux Enterprise Server 15 SP1-LTSS:rpm-devel SUSE Linux Enterprise Server 15 SP2-LTSS:rpm SUSE Linux Enterprise Server 15 SP2-LTSS:rpm-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:rpm-build SUSE Linux Enterprise Server 15 SP2-LTSS:rpm-devel SUSE Linux Enterprise Server Teradata 12 SP3:rpm SUSE Linux Enterprise Server for SAP Applications 12 SP4:rpm SUSE Linux Enterprise Server for SAP Applications 12 SP4:rpm-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:rpm-build SUSE Linux Enterprise Server for SAP Applications 12 SP5:rpm SUSE Linux Enterprise Server for SAP Applications 15 SP1:rpm SUSE Linux Enterprise Server for SAP Applications 15 SP1:rpm-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP1:rpm-build SUSE Linux Enterprise Server for SAP Applications 15 SP1:rpm-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:rpm SUSE Linux Enterprise Server for SAP Applications 15 SP2:rpm-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP2:rpm-build SUSE Linux Enterprise Server for SAP Applications 15 SP2:rpm-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:rpm SUSE Linux Enterprise Server for SAP Applications 15 SP3:rpm-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP3:rpm-build SUSE Linux Enterprise Server for SAP Applications 15 SP3:rpm-devel SUSE Manager Proxy 4.2:rpm SUSE Manager Proxy 4.2:rpm-32bit SUSE Manager Proxy 4.2:rpm-devel SUSE Manager Proxy Module 4.2:rpm SUSE Manager Proxy Module 4.2:rpm-build SUSE Manager Proxy Module 4.3:rpm SUSE Manager Proxy Module 4.3:rpm-build SUSE Manager Retail Branch Server 4.2:rpm SUSE Manager Retail Branch Server 4.2:rpm-32bit SUSE Manager Retail Branch Server 4.2:rpm-devel SUSE Manager Server 4.2:rpm SUSE Manager Server 4.2:rpm-32bit SUSE Manager Server 4.2:rpm-devel SUSE Manager Server Module 4.2:rpm SUSE Manager Server Module 4.2:rpm-build SUSE Manager Server Module 4.3:rpm SUSE Manager Server Module 4.3:rpm-build SUSE OpenStack Cloud 8:rpm SUSE OpenStack Cloud 8:rpm-32bit SUSE OpenStack Cloud 8:rpm-build SUSE OpenStack Cloud 9:rpm SUSE OpenStack Cloud 9:rpm-32bit SUSE OpenStack Cloud 9:rpm-build SUSE OpenStack Cloud Crowbar 8:rpm SUSE OpenStack Cloud Crowbar 8:rpm-32bit SUSE OpenStack Cloud Crowbar 8:rpm-build SUSE OpenStack Cloud Crowbar 9:rpm SUSE OpenStack Cloud Crowbar 9:rpm-32bit SUSE OpenStack Cloud Crowbar 9:rpm-build moderate 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N