Advisory ROSA-SA-2021-1891

Software: libsolv 0.6.34
OS: Cobalt 7.9

CVE-ID: CVE-2019-20387
CVE-Crit: HIGH
CVE-DESC: repodata_schema2id in repodata.c in libsolv before version 0.7.6 has an excessive heap-based buffer read due to the last schema being less than the length of the input schema.
CVE-STATUS: default
CVE-REV: default

CVE-ID: CVE-2021-3200
CVE-Crit: MEDIUM
CVE-DESC: Buffer overflow vulnerability in libsolv 2020-12-13 via Solver * testcase_read (Pool * pool, FILE * fp, const char * testcase, Queue * job, char ** resultp, int * resultflagsp function at src / testcase .c: line 2334, which could cause a denial of service.
CVE-STATUS: default
CVE-REV: default