rpm-software-management/libcomps

Releases41

Frequency3 months 3 weeks

Last Release 4 months ago

Stars30

Libcomps is alternative for yum.comps library. It's written in pure C as library and there's bindings for python2 and python3.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-3817 ↗	Mar 27, 2019Wednesday, 27 March 2019, 13:29	—	6.8 MEDIUM
A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.