ELSA-2021-4408

ELSA-2021-4408 - libsolv security and bug fix update

Type:	SECURITY
Severity:	LOW
Release Date:	2021-11-16

Description

[0.7.19-1]
- Update to 0.7.19
- repo_add_conda: add flag to skip v2 packages
- fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
- fix error handling in solv_xfopen_fd()
- fix memory leaks

[0.7.17-2]
- Fix rpm dependency

[0.7.17-1]
- Update to 0.7.17
- selected bug fixes:
* repo_write: fix handling of nested flexarray
* improve choicerule generation a bit more to cover more cases
* harden testcase parser against repos being added too late
* support python-3.10
* check /var/lib/rpm macro in rpmdb code
- new features:
* handle default/visible/langonly attributes in comps parser
* support multiple collections in updateinfo parser
* add '-D' option in rpmdb2solv to set the dbpath

Related CVEs

CVE-2021-3200

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	libsolv-0.7.19-1.el8.src.rpm	16ddc8ebe2f3c7deb82ce58f0072dadc	-
	libsolv-0.7.19-1.el8.aarch64.rpm	cc7a8ffc848d5238fbfcbf506781b7e1	-
	libsolv-devel-0.7.19-1.el8.aarch64.rpm	65f3d97d760afc83dfd2bb6270ff411d	-
	libsolv-tools-0.7.19-1.el8.aarch64.rpm	7213e356dec44dd57dc72f7a0c63d05f	-
	python3-solv-0.7.19-1.el8.aarch64.rpm	37c8dcdceb7f4ae21f8d05aec2fb11fe	-
Oracle Linux 8 (x86_64)	libsolv-0.7.19-1.el8.src.rpm	16ddc8ebe2f3c7deb82ce58f0072dadc	-
	libsolv-0.7.19-1.el8.i686.rpm	301982b8d202cfcab56219ea885d5ca1	-
	libsolv-0.7.19-1.el8.x86_64.rpm	ff62b74e14b3892a2b9c22c1b40e337a	-
	libsolv-devel-0.7.19-1.el8.i686.rpm	ef7195401b22a1c0798c910b02683524	-
	libsolv-devel-0.7.19-1.el8.x86_64.rpm	de492bc699acb782fe33c0316aca7bf5	-
	libsolv-tools-0.7.19-1.el8.x86_64.rpm	5594e496bf7c4f8e5579bdaf295696c0	-
	python3-solv-0.7.19-1.el8.x86_64.rpm	8cb8493a68329b00f02516ba43dbf39a	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team