Fedora 29 : createrepo_c / dnf / dnf-plugins-core / dnf-plugins-extras / etc (2019-1fccede810)

createrepoc - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past - Support of zchunk libcomps librepo - Add zchunk support libdnf - Enhance modular solver to handle enabled and default module streams differently RhBug:1648839 - Add support of wild car...

The vulnerability of the `comps_objmrtree_unite` function in the libcomps library, which is related to memory usage after its deallocation, allows an attacker to execute arbitrary code.

The vulnerability of the compsobjmrtreeunite function in the libcomps library for working with XML files is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created XML file...

CVE-2019-3817

A use-after-free flaw has been discovered in libcomps in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code...

PT-2019-1351

Name of the Vulnerable Software and Affected Versions libcomps versions prior to 0.1.10 Description A use-after-free flaw has been discovered in the way ObjMRTrees are merged, related to the comps objmrtree unite function in the comps objmradix.c file. This issue is associated with the use of...