633 matches found
Red Hat libdnf 数据伪造问题漏洞
Red Hat libdnf is an application from Red Hat USA. provides a library that provides a simplified C and Python API for libsolv. A data forgery vulnerability exists in libdnf, which arises from the signature feature allowing an attacker to achieve code execution...
USN-4851-1: Libsolv vulnerabilities
It was discovered that Libsolv incorrectly handled certain malformed input. An attacker could use this issue to cause Libsolv to crash, resulting in a denial of service...
USN-4851-1 libsolv vulnerabilities
It was discovered that Libsolv incorrectly handled certain malformed input. An attacker could use this issue to cause Libsolv to crash, resulting in a denial of service...
SUSE SLES15 Security Update : libsolv, libzypp, yast2-installation, zypper (SUSE-SU-2021:0770-1)
This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues : Update zypper to version 1.14.43 : doc: give more details about creating versioned package locks bsc1181622 man: Document synonymously used patch categories bsc1179847 Fix source-download commnds help...
NewStart CGSL CORE 5.04 / MAIN 5.04 : libsolv Multiple Vulnerabilities (NS-SA-2021-0014)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libsolv packages installed that are affected by multiple vulnerabilities: - There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of...
NewStart CGSL MAIN 6.02 : libsolv Vulnerability (NS-SA-2021-0060)
The remote NewStart CGSL host, running version MAIN 6.02, has libsolv packages installed that are affected by a vulnerability: - repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...
[SECURITY] Fedora 33 Update: libzypp-17.25.6-1.fc33
libzypp is a library for package management built on top of the libsolv library. It is the foundation for the Zypper package manager...
CentOS 8 : libsolv (CESA-2020:4508)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4508 advisory. - libsolv: out-of-bounds read in repodataschema2id in repodata.c CVE-2019-20387 Note that Nessus has not tested for this issue but has instead relied only on th...
CentOS 8 : yum (CESA-2019:3583)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3583 advisory. - libsolv: illegal address access in poolwhatprovides in src/pool.h CVE-2018-20534 - libcomps: use after free when merging two objmrtrees CVE-2019-3817...
Important Photon OS Security Update - PHSA-2021-0355
Updates of 'nodejs10' packages of Photon OS have been released...
SUSE SLES12 Security Update : libsolv (SUSE-SU-2020:2660-1)
This update for libsolv fixes the following issues : This is a reissue of an existing libsolv update that also included libsolv-devel for LTSS products. libsolv was updated to version 0.6.36 fixes the following issues : Security issues fixed : CVE-2018-20532: Fixed a NULL pointer dereference in...
Oracle Linux 8 : libsolv (ELSA-2020-4508)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4508 advisory. 0.7.11-1 - Update to 0.7.11 - selected bug fixes: support archnoarch package changes when creating patch conflicts from the updateinfo data also support other r...
Moderate: Red Hat Security Advisory: libsolv security, bug fix, and enhancement update
An update for libsolv is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
libsolv: out-of-bounds read in repodata_schema2id in repodata.c
An out-of-bounds read was discovered in Libsolv when the last schema has a length that is less than the length of the input schema. A remote attacker may abuse this flaw to crash an application that uses Libsolv...
RHEL 8 : libsolv (RHSA-2020:4508)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4508 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. The following packages have been upgraded...
Moderate: libsolv security, bug fix, and enhancement update
The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. The following packages have been upgraded to a later upstream version: libsolv 0.7.11. BZ1809106 Security Fixes: libsolv: out-of-bounds read in repodataschema2id in repodata.c CVE-2019-2038...
EulerOS 2.0 SP5 : libsolv (EulerOS-SA-2020-2255)
According to the version of the libsolv package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties...
Huawei EulerOS: Security Advisory for libsolv (EulerOS-SA-2020-2255)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for libdnf (FEDORA-2020-5d9f0ce2b3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...