Red Hat Security AdvisoryRHSA-2019:2290
libsolv security and bug fix update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsolv-0.6.34-4.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libsolv-demo-0.6.34-4.el7, libsolv-devel-0.6.34-4.el7, libsolv-tools-0.6.34-4.el7 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) libsolv-0.6.34-4.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsolv-demo-0.6.34-4.el7, libsolv-devel-0.6.34-4.el7, libsolv-tools-0.6.34-4.el7 +1
- Red Hat Enterprise Linux Server (v. 7) libsolv-0.6.34-4.el7, libsolv-0.6.34-4.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libsolv-demo-0.6.34-4.el7, libsolv-devel-0.6.34-4.el7, libsolv-devel-0.6.34-4.el7.ppc +3
- Red Hat Enterprise Linux Workstation (v. 7) libsolv-0.6.34-4.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsolv-demo-0.6.34-4.el7, libsolv-devel-0.6.34-4.el7, libsolv-tools-0.6.34-4.el7 +1
Fixes 3 records
Priority LOW 33
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02239 · Published 2018-12-28 · Fixed CWE-119
Priority LOW 33
There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02079 · Published 2018-12-28 · Fixed CWE-476
Priority LOW 33
There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02062 · Published 2018-12-28 · Fixed CWE-476
THREATIST.IORead the docs