openSUSE Leap 15.3 Security Update: RPM Issues Fixes and Enhancements

This update for rpm fixes the following issues:

- Changed default package verification level to 'none' to be compatible to

rpm-4.14.1

- Made illegal obsoletes a warning

- Fixed a potential access of freed mem in ndb's glue code (bsc#1179416)

- Added support for enforcing signature policy and payload verification

step to transactions (jsc#SLE-17817)

- Added :humansi and :hmaniec query formatters for human readable output

- Added query selectors for whatobsoletes and whatconflicts

- Added support for sorting caret higher than base version

- rpm does no longer require the signature header to be in a contiguous

region when signing (bsc#1181805)

Security fixes:

- CVE-2021-3421: A flaw was found in the RPM package in the read

functionality. This flaw allows an attacker who can convince a victim to

install a seemingly verifiable package or compromise an RPM repository,

to cause RPM database corruption. The highest threat from...