gpp_maybe
Security update for libzypp, libsolv
SUSE-SLE-Micro-6.1-560
This update for libzypp, libsolv fixes the following issues: libsolv was updated to 0.7.39. - fix solv_chksum_free segfault when called with a NULL pointer - made repo_add_solv more robust against corrupt files [bsc#1265935] [CVE-2026-9149] - fix potential buffer overflow when verifying EdDSA signatures [bsc#1266039] [CVE-2026-48863] - added limit checks in multiple places to catch overflows - reduce the size of the language id cache - fixed Debian canon selection - fixed dbpath detection in repo_rpmdb_librpm - reduced stack usage in repo page compression (needed for musl) - fixed in earlier release: [bsc#1265938] [CVE-2026-9150] - fix parsing of recommends in the old Mandriva synthesis format libzypp was updated to 17.38.11: - Fix potential crash on malformed or malicious repository metadata (fixes #740) - Repo metadata: discard entries referring to a location outside the repo (bsc#1259802, CVE-2026-25707) Mirroring those data locally would refer to a location outside the repo's local cache directory. Those data entries are reported and discarded. - zypp.conf: Allow [env] section to add environment variables. This feature is designed to enable environment-specific settings or debugging options over an extended period. See zypp.conf(5).
-
Release DateJun 2 2026
-
ReferencesBugzilla: 1259802, 1265935, 1265938, 1266039
CVEs: CVE-2026-9149, CVE-2026-9150, CVE-2026-25707, CVE-2026-48863 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.1 ppc64le
-
Packageslibsolv-tools-base
Utilities used by libzypp to manage .solv fileslibzypp0.7.39-slfo.1.1_1.1 lock rpm
Library for package, patch, pattern and product management17.38.11-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 aarch64
-
Packageslibsolv-tools-base
Utilities used by libzypp to manage .solv fileslibzypp0.7.39-slfo.1.1_1.1 lock rpm
Library for package, patch, pattern and product management17.38.11-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 s390x
-
Packageslibsolv-tools-base
Utilities used by libzypp to manage .solv fileslibzypp0.7.39-slfo.1.1_1.1 lock rpm
Library for package, patch, pattern and product management17.38.11-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 x86_64
-
Packageslibsolv-tools-base
Utilities used by libzypp to manage .solv fileslibzypp0.7.39-slfo.1.1_1.1 lock rpm
Library for package, patch, pattern and product management17.38.11-slfo.1.1_1.1 lock rpm