Debian/libsolv: medium 6.5
Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which
Action: Upgrade libsolv to 0.7.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.17-1 | - |
Fixed versions
| 0.7.17-1 |
Sources
- osv: DEBIAN-CVE-2021-44568#Debian:13/libsolv
- https://security-tracker.debian.org/tracker/CVE-2021-44568
published · modified · JSON