Red Hat Security AdvisoryRHSA-2021:4060
libsolv security update
Released 2021-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libsolv-devel-0.7.16-3.el8_4, libsolv-tools-0.7.16-3.el8_4
- Red Hat Enterprise Linux BaseOS (v. 8) libsolv-0.7.16-3.el8_4, python3-solv-0.7.16-3.el8_4
Fixes 4 records
Priority LOW 36
Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01422 · Published 2021-09-02 · Partial fix CWE-787
Priority LOW 36
Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01462 · Published 2021-09-02 · Partial fix CWE-787
Priority LOW 36
Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01441 · Published 2021-09-02 · Partial fix CWE-787
Priority LOW 36
Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01474 · Published 2021-09-02 · Partial fix CWE-787
THREATIST.IORead the docs