436 matches found
NewStart CGSL MAIN 6.02 : libsolv Multiple Vulnerabilities (NS-SA-2022-0092)
The remote NewStart CGSL host, running version MAIN 6.02, has libsolv packages installed that are affected by multiple vulnerabilities: - Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. CVE-2021-33928 ...
libsolv bug fix and enhancement update
An update is available for libsolv. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...
Amazon Linux 2022 : libsolv, libsolv-demo, libsolv-devel (ALAS2022-2022-167)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-167 advisory. A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-3200 Tenable has extracted th...
Security update for libsolv, libzypp, zypper (important)
openSUSE Security Update: Security update for libsolv, libzypp, zypper Announcement ID: openSUSE-SU-2022:1157-1 Rating: important References: 1184501 1194848 1195999 1196061 1196317 1196368 1196514 1196925 1197134 Affected Products: openSUSE Leap Micro 5.2 An update that contains security fixes c...
libsolv: heap-based buffer overflow in pool_installable() in src/repo.h
A flaw was found in libsolv. A buffer overflow in the poolinstallable function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability...
libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h
A flaw was found in libsolv. A buffer overflow vulnerability in the pooldisabledsolvable function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability...
libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h
A flaw was found in libsolv. A buffer overflow vulnerability in the poolinstallablewhatprovides function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability...
libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c
A flaw was found in libsolv. A buffer overflow vulnerability in the prunetorecommend function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability...
libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c
A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability...
new packages: libsolv
An update is available for libsolv. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...
openSUSE: Security Advisory for libsolv, (SUSE-SU-2022:1157-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libsolv bug fix and enhancement update
An update is available for libsolv. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...
libsolv bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALBA-2022:2050 libsolv bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
SUSE: Security Advisory (SUSE-SU-2022:1157-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : libsolv, libzypp, zypper (SUSE-SU-2022:1157-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1157-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
SUSE-SU-2022:1157-1 Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues: Security relevant fix: - Harden package signature checks bsc1184501. libsolv update to 0.7.22: - reworked choice rule generation to cover more usecases - support SOLVABLEPREREQIGNOREINST in the ordering code bsc1196514 - support...
SUSE: Security Advisory (SUSE-SU-2022:1130-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:1131-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : libsolv, libzypp, zypper (SUSE-SU-2022:1131-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1131-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...