repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolvUpgrade python3-solv | May 4, 2022 | Jan 21, 2020 |
| Centos_linux | — | Upgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade python3-solvUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-debuginfo | Nov 5, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade libsolv | Feb 3, 2020 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv | Nov 12, 2020 | Jan 21, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 15, 2021 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade libsolvUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoNo solution existsUpgrade python3-solv-debuginfoUpgrade libsolv-debuginfoUpgrade python3-solvUpgrade ruby-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade perl-solv-debuginfo | Nov 5, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsolv-toolsUpgrade perl-solvUpgrade libzypp-develUpgrade libzyppUpgrade libzypp-devel-docUpgrade libsolv-develUpgrade python-solv | Jun 24, 2021 | Jan 21, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 21, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub