RLSA-2021:4060

Dashboard / Vulnerabilities / RLSA-2021:4060

RLSA-2021:4060

Summary: Moderate: libsolv security update

Details: The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: heap-based buffer overflow in pool_installable() in src/repo.h (CVE-2021-33928) * libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h (CVE-2021-33929) * libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h (CVE-2021-33930) * libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c (CVE-2021-33938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://errata.rockylinux.org/RLSA-2021:4060, https://bugzilla.redhat.com/show_bug.cgi?id=2000699, https://bugzilla.redhat.com/show_bug.cgi?id=2000703, https://bugzilla.redhat.com/show_bug.cgi?id=2000705, https://bugzilla.redhat.com/show_bug.cgi?id=2000707