| Package | Affected versions | Patched versions |
|---|---|---|
| libsolv | < 0.7.6 | 0.7.6 |
repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free