Low: libsolv security update (Amazon Linux 2)

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-20534: 99999: CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h 1665538: CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h ** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application. CVE-2018-20533: There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. 99999: CVE-2018-20533 libsolv: NULL pointer dereference in function testcase_str2dep_complex 1665535: CVE-2018-20533 libsolv: NULL pointer dereference in function testcase_str2dep_complex CVE-2018-20532: There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. 99999: CVE-2018-20532 libsolv: NULL pointer dereference in function testcase_read 1665532: CVE-2018-20532 libsolv: NULL pointer dereference in function testcase_read