Red Hat Security Advisory

RHSA-2019:3583

yum security, bug fix, and enhancement update

Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) createrepo_c-0.11.0-3.el8, createrepo_c-devel-0.11.0-3.el8, createrepo_c-libs-0.11.0-3.el8 +1
Red Hat Enterprise Linux BaseOS (v. 8) dnf-4.2.7-6.el8, dnf-automatic-4.2.7-6.el8, dnf-data-4.2.7-6.el8 +17

TI-2019-02829 CVE-2019-3817 · GHSA-3rh7-494q-3mjq

MEDIUM 41

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01721 Published 2019-03-27 Fixed CWE-416

TI-2018-14559 CVE-2018-20534 · GHSA-qghc-5fvm-f36w

LOW 33

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02239 Published 2018-12-28 Fixed CWE-119