tocsin

Debian/libsolv: high 7.5

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A rem

Action: Upgrade libsolv to 0.7.38-1 or later.

Affected

introducedfixedlast affected
00.7.38-1-

Fixed versions

0.7.38-1

Sources

published · modified · JSON