编号撤回

libsolv is a library for checking package dependencies. libsolv is vulnerable to a heap overflow vulnerability, which stems from the existence of two memory vulnerabilities in libsolv located in the resolveweak function in src/solver.c. No detailed vulnerability details are currently available...

CVE-2021-44568: Out-of-bounds Write

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies function at src/solver.c line 1940 & line 1995, which could cause a remote Denial of Service...

编号撤回

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

Huawei EulerOS: Security Advisory for libsolv (EulerOS-SA-2022-1077)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : libsolv (EulerOS-SA-2022-1077)

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job...

AlmaLinux 8 : libsolv (ALSA-2021:4408)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4408 advisory. - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job, char resultp, int resultflagsp...

Rocky Linux 8 : libsolv (RLSA-2021:4060)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4060 advisory. - Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

AlmaLinux 8 : libsolv (ALSA-2021:4060)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4060 advisory. - Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

AlmaLinux 8 : libsolv (ALSA-2020:4508)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4508 advisory. - repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input...

Mageia: Security Advisory (MGASA-2021-0351)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0117)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.1 : libsolv (EulerOS-SA-2021-2762)

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job...

Oracle Linux 8 : libsolv (ELSA-2021-4408)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4408 advisory. 0.7.19-1 - Update to 0.7.19 - repoaddconda: add flag to skip v2 packages - fix rare segfault in resolvejobrules that could happen if new rules are learnt - fix...

Huawei EulerOS: Security Advisory for libsolv (EulerOS-SA-2021-2790)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : libsolv (EulerOS-SA-2021-2790)

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job...

libsolv security and bug fix update

0.7.19-1 - Update to 0.7.19 - repoaddconda: add flag to skip v2 packages - fix rare segfault in resolvejobrules that could happen if new rules are learnt - fix error handling in solvxfopenfd - fix memory leaks 0.7.17-2 - Fix rpm dependency 0.7.17-1 - Update to 0.7.17 - selected bug fixes:...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the prunetorecommended function in policy.c, allowing an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the poolinstallablewhatprovides function in repo.h, allowing an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the pooldisabledsolvable function in repo.h, allowing an attacker to crash the application via malicious input...