Bug 9889

Summary:	libsolv packages security vulnerability (CVE-2018-2053[2-4])
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Zombie Ryushu <zombie.ryushu>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	RESOLVED NOTABUG	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	alzim, andrey.bondrov, denis.silakov, mc2374
Version:	All
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://advisories.mageia.org/MGASA-2019-0154.html
Whiteboard:
Platform:	2016.1	ROSA Vulnerability identifier:	CVE-2018-2053
RPM Package:	libsolv-0.7.4-2.src.rpm	ISO-related:
Bad POT generating:		Upstream:

Description Zombie Ryushu 2019-05-09 14:26:20 MSK

It was discovered that libsolv incorrectly handled certain malformed
input. If a user or automated system were tricked into opening a specially
crafted file, applications that rely on libsolv could be made to crash,
resulting in a denial of service (CVE-2018-2053[2-4]).

Comment 1 Andrey Bondrov 2019-08-27 09:37:17 MSK

We don't have/use libsolv, so closing.