CVE catalog

CVE-2021-29133

ALPINE-CVE-2021-29133

Severity: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published: Mar 24, 2021, 7:15:13 AM UTC
Updated: Aug 27, 2026, 10:18:01 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.08% · Oct 25, 2026

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Alpine	haserl	3.10	`0.9.36-r0`	fixed
Alpine	haserl	3.11	`0.9.36-r0`	fixed
Alpine	haserl	3.12	`0.9.36-r0`	fixed
Alpine	haserl	3.13	`0.9.36-r0`	fixed
Alpine	haserl	3.14	`0.9.36-r0`	fixed
Alpine	haserl	3.15	`0.9.36-r0`	fixed
Alpine	haserl	3.16	`0.9.36-r0`	fixed
Alpine	haserl	3.17	`0.9.36-r0`	fixed
Alpine	haserl	3.18	`0.9.36-r0`	fixed
Alpine	haserl	3.19	`0.9.36-r0`	fixed
Alpine	haserl	3.20	`0.9.36-r0`	fixed
Alpine	haserl	3.21	`0.9.36-r0`	fixed
Alpine	haserl	3.22	`0.9.36-r0`	fixed
Alpine	haserl	3.23	`0.9.36-r0`	fixed
Alpine	haserl	3.24	`0.9.36-r0`	fixed
Opensuse	haserl	tumbleweed	`0.9.36-1.3`	fixed
Suse	haserl	package hub 15 sp1	`0.9.36-bp153.2.3.1`	fixed
Suse	haserl	package hub 15 sp2	`0.9.36-bp153.2.3.1`	fixed
Suse	haserl	package hub 15 sp3	`0.9.36-bp153.2.3.1`	fixed
Opensuse	haserl	leap 15.2	`0.9.36-bp153.2.3.1`	fixed
Opensuse	haserl	leap 15.3	`0.9.36-bp153.2.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Alpine	haserl	apk	3.10	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.11	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.12	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.13	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.14	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.15	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.16	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.17	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.18	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.19	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.20	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.21	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.22	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.23	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Alpine	haserl	apk	3.24	`0.9.36-r0`	Not reported	ALPINE-CVE-2021-29133	Not reported
Opensuse	haserl	rpm	tumbleweed	`0.9.36-1.3`	Not reported	OPENSUSE-SU-2024:10840-1	Not reported
Suse	haserl	rpm	package hub 15 sp1	`0.9.36-bp153.2.3.1`	Not reported	OPENSUSE-SU-2021:1279-1	Not reported
Suse	haserl	rpm	package hub 15 sp2	`0.9.36-bp153.2.3.1`	Not reported	OPENSUSE-SU-2021:1279-1	Not reported
Suse	haserl	rpm	package hub 15 sp3	`0.9.36-bp153.2.3.1`	Not reported	OPENSUSE-SU-2021:1279-1	Not reported
Opensuse	haserl	rpm	leap 15.2	`0.9.36-bp153.2.3.1`	Not reported	OPENSUSE-SU-2021:1279-1	Not reported
Opensuse	haserl	rpm	leap 15.3	`0.9.36-bp153.2.3.1`	Not reported	OPENSUSE-SU-2021:1279-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[haserl]Fixed
Source package: [haserl]
Details (1)
- 0.9.36-1.20 · x86_64 · tumbleweed
  Fixed · Fixed: 0.9.36-1.3
  pypi · haserl · opensuse · tumbleweed

Observed: Oct 23, 2026, 5:55:58 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]