OESA-2021-1209

Dashboard / Vulnerabilities / OESA-2021-1209

OESA-2021-1209

Summary: libsolv security update

Details: A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies. Security Fix(es): Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service(CVE-2021-3200)

References: https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1209, https://nvd.nist.gov/vuln/detail/CVE-2021-3200