CVE-2019-20534: 
NixOS vulnerability analysis and mitigation

CVE-2018-20534 is a security vulnerability affecting the libsolv package, which is a library for resolving package dependencies using a satisfiability algorithm. The vulnerability was discovered in 2018 and involves illegal address access in the pool_whatprovides function in src/pool.h (Red Hat Advisory).

The vulnerability is classified as having a Low severity impact according to Red Hat's security advisory. It specifically affects the pool_whatprovides function in src/pool.h of the libsolv package, causing illegal address access issues (Red Hat Advisory).

The vulnerability affects various versions of Red Hat Enterprise Linux 7 and 8, including Server, Workstation, Desktop, and other variants. It impacts the libsolv package which is crucial for package dependency resolution in these systems (Red Hat Advisory).

Red Hat has released security updates to address this vulnerability. The fix is included in libsolv version 0.6.34-4.el7 for RHEL 7 systems and updated versions for RHEL 8. Users are advised to update their systems with the provided security patches (Red Hat Advisory).