[Rpm-maint] [rpm-software-management/rpm] segfault installing packages (in very strange edge cases) (Issue #1833)

[Demi Marie Obenour]

Is this an exploitable vulnerability?  This also shows why IMA and fsverity signatures belong in the main header, where they cannot be tampered with.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1833#issuecomment-971627016
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211117/619da51e/attachment.html>