Vulnerabilities in rpm 4.0