Summary
[0.6.34-4]
- Polish the changelog
[0.6.34-3]
- Make sure that targeted updates dont do reinstalls
- Resolves: bug#1668256
- Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533)
- Resolves: bug#1669562
- Resolves: bug#1669576
- Fix illegal address access in pool_whatprovides (CVE-2018-20534)
- Resolves: bug#1670453
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libsolv | 0:0.6.34-4.el7 |
| Oracle Linux · 7 | libsolv-demo | 0:0.6.34-4.el7 |
| Oracle Linux · 7 | libsolv-devel | 0:0.6.34-4.el7 |
| Oracle Linux · 7 | libsolv-tools | 0:0.6.34-4.el7 |
| Oracle Linux · 7 | python2-solv | 0:0.6.34-4.el7 |
Vulnerabilities 3
-
Unscored —
There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2…
-
Unscored —
There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv th…
-
Unscored —
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of …