RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.
| Software | From | Fixed in |
|---|---|---|
| redhat / redhat_package_manager | 4.0.2-71 | 4.0.2-71.x |
| redhat / redhat_package_manager | 4.0.2-72 | 4.0.2-72.x |