ALAS2022-2022-167

Related Vulnerabilities: CVE-2021-3200  

A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability. (CVE-2021-3200)

ALAS2022-2022-167


Amazon Linux 2022 Security Advisory: ALAS-2022-167
Advisory Release Date: 2022-11-01 21:23 Pacific
Advisory Updated Date: 2022-11-03 21:02 Pacific
Severity: Low
References: CVE-2021-3200 

Issue Overview:

A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability. (CVE-2021-3200)


Affected Packages:

libsolv


Issue Correction:
Run dnf update libsolv --releasever=2022.0.20221102 to update your system.

New Packages:
aarch64:
    perl-solv-debuginfo-0.7.22-1.amzn2022.0.1.aarch64
    ruby-solv-debuginfo-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-debugsource-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-devel-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-tools-debuginfo-0.7.22-1.amzn2022.0.1.aarch64
    perl-solv-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-demo-debuginfo-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-debuginfo-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-tools-0.7.22-1.amzn2022.0.1.aarch64
    python3-solv-0.7.22-1.amzn2022.0.1.aarch64
    python3-solv-debuginfo-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-demo-0.7.22-1.amzn2022.0.1.aarch64
    ruby-solv-0.7.22-1.amzn2022.0.1.aarch64
    libsolv-0.7.22-1.amzn2022.0.1.aarch64

i686:
    python3-solv-debuginfo-0.7.22-1.amzn2022.0.1.i686
    libsolv-debuginfo-0.7.22-1.amzn2022.0.1.i686
    perl-solv-debuginfo-0.7.22-1.amzn2022.0.1.i686
    libsolv-debugsource-0.7.22-1.amzn2022.0.1.i686
    libsolv-0.7.22-1.amzn2022.0.1.i686
    ruby-solv-debuginfo-0.7.22-1.amzn2022.0.1.i686
    perl-solv-0.7.22-1.amzn2022.0.1.i686
    python3-solv-0.7.22-1.amzn2022.0.1.i686
    libsolv-tools-debuginfo-0.7.22-1.amzn2022.0.1.i686
    libsolv-tools-0.7.22-1.amzn2022.0.1.i686
    ruby-solv-0.7.22-1.amzn2022.0.1.i686
    libsolv-devel-0.7.22-1.amzn2022.0.1.i686
    libsolv-demo-debuginfo-0.7.22-1.amzn2022.0.1.i686
    libsolv-demo-0.7.22-1.amzn2022.0.1.i686

src:
    libsolv-0.7.22-1.amzn2022.0.1.src

x86_64:
    libsolv-debuginfo-0.7.22-1.amzn2022.0.1.x86_64
    ruby-solv-debuginfo-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-devel-0.7.22-1.amzn2022.0.1.x86_64
    perl-solv-debuginfo-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-tools-debuginfo-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-debugsource-0.7.22-1.amzn2022.0.1.x86_64
    python3-solv-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-demo-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-demo-debuginfo-0.7.22-1.amzn2022.0.1.x86_64
    perl-solv-0.7.22-1.amzn2022.0.1.x86_64
    python3-solv-debuginfo-0.7.22-1.amzn2022.0.1.x86_64
    ruby-solv-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-0.7.22-1.amzn2022.0.1.x86_64
    libsolv-tools-0.7.22-1.amzn2022.0.1.x86_64