Поиск уязвимостей

ELSA-2019-3583: yum security, bug fix, and enhancement update (MODERATE)

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

There is an illegal address access at ext/testcase.c in libsolv.a in l ...

Security update for libcomps

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.

Уязвимость функции comps_objmrtree_unite библиотеки для работы с XML-файлами libcomps, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код

** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application.

Уязвимость функции pool_whatprovides библиотеки libsolv, позволяющая нарушителю вызвать отказ в обслуживании

ALT-PU-2019-1736: package `libcomps` update to version 0.1.11-alt1_1

Security update for zypper, libzypp and libsolv

Security update for libsolv

Security update for libsolv, libzypp, zypper

Security update for zypper, libzypp and libsolv

Security update for libsolv, libzypp, zypper

Recommended update for libzypp, zypper, libsolv and PackageKit

ELSA-2019-2290: libsolv security and bug fix update (LOW)