There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librhsm | May 4, 2022 | Dec 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsolv-debuginfoUpgrade libsolv-toolsUpgrade python2-solvUpgrade libsolvUpgrade libsolv-develUpgrade libsolv-demo | Apr 27, 2020 | Dec 28, 2018 |
| Centos_linux | — | Upgrade createrepo_c-develUpgrade python3-createrepo_c-debuginfoUpgrade python3-libcomps-debuginfoUpgrade librhsmUpgrade libdnf-debuginfoUpgrade python3-libdnfUpgrade python3-libcompsUpgrade python3-hawkeyUpgrade librhsm-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-libdnf-debuginfoUpgrade microdnf-debugsourceUpgrade ruby-solv-debuginfoUpgrade libcompsUpgrade librepoUpgrade python3-createrepo_cUpgrade librhsm-debugsourceUpgrade librepo-debugsourceUpgrade dnf-plugins-coreUpgrade python3-dnf-plugin-versionlockUpgrade librepo-debuginfoUpgrade libcomps-debugsourceUpgrade python3-solv-debuginfoUpgrade python3-librepoUpgrade python2-solvUpgrade createrepo_cUpgrade libsolv-demoUpgrade libdnfUpgrade libsolv-debugsourceUpgrade microdnfUpgrade microdnf-debuginfoUpgrade dnfUpgrade libsolv-debuginfoUpgrade createrepo_c-debuginfoUpgrade yumUpgrade yum-utilsUpgrade dnf-automaticUpgrade createrepo_c-debugsourceUpgrade python3-dnfUpgrade dnf-dataUpgrade libcomps-debuginfoUpgrade libsolv-develUpgrade createrepo_c-libs-debuginfoUpgrade python3-hawkey-debuginfoUpgrade libsolv-demo-debuginfoUpgrade python3-librepo-debuginfoUpgrade libcomps-develUpgrade python3-dnf-plugins-coreUpgrade libsolv-tools-debuginfoUpgrade libdnf-debugsourceUpgrade libsolv-toolsUpgrade createrepo_c-libsUpgrade libsolv | Aug 28, 2019 | Dec 28, 2018 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Nov 19, 2019 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Nov 2, 2020 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Jun 27, 2019 | Dec 28, 2018 |
| Oracle_linux | — | Upgrade python3-createrepo_cUpgrade python3-hawkeyUpgrade createrepo_cUpgrade yum-utilsUpgrade dnfUpgrade libdnfUpgrade dnf-dataUpgrade python3-dnf-plugin-versionlockUpgrade python3-dnf-plugins-coreUpgrade python3-dnfUpgrade libsolv-develUpgrade python3-librepoUpgrade createrepo_c-develUpgrade python2-solvUpgrade librepoUpgrade libsolvUpgrade libsolv-demoUpgrade libsolv-toolsUpgrade dnf-plugins-coreUpgrade yumUpgrade librhsmUpgrade libcomps-develUpgrade createrepo_c-libsUpgrade python3-libcompsUpgrade python3-libdnfUpgrade libcompsUpgrade dnf-automaticUpgrade microdnf | Jul 21, 2020 | Nov 22, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade createrepo_c-libsUpgrade libcomps-debuginfoUpgrade dnfUpgrade yum-utilsUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfoUpgrade yumUpgrade python3-dnf-plugins-coreUpgrade libsolv-debuginfoUpgrade libsolv-toolsUpgrade libdnf-debugsourceUpgrade dnf-dataUpgrade libsolv-debugsourceUpgrade createrepo_c-debuginfoUpgrade createrepo_c-libs-debuginfoUpgrade python3-hawkey-debuginfoUpgrade python3-dnfUpgrade dnf-automaticUpgrade libsolv-develUpgrade python3-librepo-debuginfoUpgrade microdnfUpgrade microdnf-debuginfoUpgrade libcomps-develUpgrade createrepo_c-debugsourceUpgrade librepo-debugsourceUpgrade libsolv-demoUpgrade createrepo_cUpgrade python3-libdnfUpgrade librhsm-debugsourceUpgrade python3-createrepo_c-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-libcomps-debuginfoUpgrade librhsm-debuginfoUpgrade createrepo_c-develUpgrade dnf-plugins-coreUpgrade python3-librepoUpgrade libsolvUpgrade libdnf-debuginfoUpgrade ruby-solv-debuginfoUpgrade microdnf-debugsourceUpgrade librepo-debuginfoUpgrade python3-dnf-plugin-versionlockUpgrade libcomps-debugsourceUpgrade python3-libdnf-debuginfoUpgrade librhsmUpgrade python3-solv-debuginfoUpgrade librepoUpgrade python3-createrepo_cUpgrade python3-hawkeyUpgrade python2-solvUpgrade python3-libcompsUpgrade libcompsUpgrade libdnf | Aug 7, 2019 | Dec 28, 2018 |
| Suse | — | Upgrade zypperUpgrade PackageKit-langUpgrade zypper-aptitudeUpgrade libsolv-toolsUpgrade libpackagekit-glib2-18-32bitUpgrade libpackagekit-glib2-develUpgrade PackageKit-gtk3-moduleUpgrade libzypp-develUpgrade libyui-ncurses-pkg8Upgrade libyui-qt-pkg8Upgrade PackageKit-gstreamer-pluginUpgrade libzypp-devel-docUpgrade libpackagekit-glib2-18Upgrade python-solvUpgrade perl-solvUpgrade yast2-pkg-bindingsUpgrade libsolv-develUpgrade zypper-needs-restartingUpgrade libyui-ncurses-pkg-docUpgrade libpackagekit-glib2-devel-32bitUpgrade PackageKit-branding-upstreamUpgrade PackageKitUpgrade libyui-ncurses-pkg-develUpgrade libyui-qt-pkg-develUpgrade ruby-solvUpgrade typelib-1_0-PackageKitGlib-1_0Upgrade PackageKit-develUpgrade python3-solvUpgrade libzyppUpgrade yast2-pkg-bindings-devel-docUpgrade libsolv-demoUpgrade libyui-ncurses-pkg9Upgrade libyui-qt-pkg9Upgrade libyui-qt-pkg-docUpgrade zypper-logUpgrade PackageKit-backend-zypp | Jul 26, 2019 | Dec 28, 2018 |
| Ubuntu | — | Upgrade libsolv0Upgrade libsolv0 (Ubuntu Pro)Upgrade libsolvext0 (Ubuntu Pro)Upgrade libsolvext0Upgrade libsolv-tools | Apr 1, 2019 | Dec 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub