Lucene search

K
oraclelinuxOracleLinuxELSA-2021-4408
HistoryNov 16, 2021 - 12:00 a.m.

libsolv security and bug fix update

2021-11-1600:00:00
linux.oracle.com
12

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

[0.7.19-1]

  • Update to 0.7.19
  • repo_add_conda: add flag to skip v2 packages
  • fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  • fix error handling in solv_xfopen_fd()
  • fix memory leaks
    [0.7.17-2]
  • Fix rpm dependency
    [0.7.17-1]
  • Update to 0.7.17
  • selected bug fixes:
    • repo_write: fix handling of nested flexarray
    • improve choicerule generation a bit more to cover more cases
    • harden testcase parser against repos being added too late
    • support python-3.10
    • check /var/lib/rpm macro in rpmdb code
  • new features:
    • handle default/visible/langonly attributes in comps parser
    • support multiple collections in updateinfo parser
    • add ‘-D’ option in rpmdb2solv to set the dbpath

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P