AlmaLinux 8 : yum (ALSA-2019:3583)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2019:3583 advisory. - DISPUTED There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third...

CentOS 8 : yum (CESA-2019:3583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3583 advisory. - libsolv: illegal address access in poolwhatprovides in src/pool.h CVE-2018-20534 - libcomps: use after free when merging two objmrtrees CVE-2019-3817...

RHEL 7 : libcomps (RHSA-2019:3898)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3898 advisory. Libcomps is library for structure-like manipulation with content of comps XML files. Supports read/write XML file, structures modification. Security...

Moderate: Red Hat Security Advisory: libcomps security update

An update for libcomps is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 8 : yum (RHSA-2019:3583)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3583 advisory. Yum is a command-line utility that allows the user to check for updates and automatically download and install updated RPM packages. Yum...

Moderate: Red Hat Security Advisory: yum security, bug fix, and enhancement update

An update for yum is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Moderate: yum security, bug fix, and enhancement update

Yum is a command-line utility that allows the user to check for updates and automatically download and install updated RPM packages. Yum automatically obtains and downloads dependencies, prompting the user for permission as necessary. The following packages have been upgraded to a later upstream...

CVE-2019-3817

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code...

CVE-2019-3817

CVE-2019-3817 affects libcomps: a use-after-free in merging ObjMRTrees when reading crafted comps XML can crash the application or allow code execution. Affected: libcomps versions prior to 0.1.10. Public details come from multiple advisories (RHSA-2019:3898, RHSA-2019:3583, CESA entries) and Ope...

OPENSUSE-SU-2019:0328-1 Security update for libcomps

This update for libcomps fixes the following issue: Security issue fixed: - CVE-2019-3817: Fixed a use-after-free vulnerability in compsobjmradix.c:compsobjmrtreeunite function where could allow to application crash or code execution bsc1122841. This update was imported from the...

Security update for libcomps (moderate)

openSUSE Security Update: Security update for libcomps Announcement ID: openSUSE-SU-2019:0328-1 Rating: moderate References: 1122841 Cross-References: CVE-2019-3817 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...

Security update for libcomps (moderate)

openSUSE Security Update: Security update for libcomps Announcement ID: openSUSE-SU-2019:0323-1 Rating: moderate References: 1122841 Cross-References: CVE-2019-3817 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libcomps...