critical
Security update for libzypp, zypper
SUSE-SLE-Module-Basesystem-15-SP7-2026-4092
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state [LIBZYPP-LEGACY-CACHE-01] (bsc#1274625). - hasCredentials() requires both username AND password to be non-empty (bsc#1273242). - GPG Key hints in repoindex.xml require at least a long id to allow auto-import (bsc#1271730). Non security issues fixed: - Econf parser adds tags in drop-in files outside any section to [main] (bsc#1272534). - libzypp: X-ZYpp-AnonymousId header anomaly (bsc#1268321). - Need zypper option to disable services to fix Dockerfile builds in OBS (bsc#1257249). - zypper loads repository data and installed packages prior to checking for required arguments (bsc#1274091). - Zypper patch doesn't give enough details about conflicts (bsc#1277790). - dependency issue for package "python3-vsts-cd-manager" after starting the upgrade (bsc#1261038). Changes for libzypp: - Update to version 17.38.15: - Prevent libgpgme from launching gpg-agents; we don't need them. - defaultLoadSystem: Hand out the ZYpp::Ptr as return value. - Replace popen cat/zcat with solv_xfopen for testcase loaders (fixes #749) - zypp: Improve Testcase Loading for MCP Tools. - spec: Remove useless %bcond visibility_hidden (is always ON in cmake) - zypp.conf: add solver.NoUpdateProvide (default: false) option. Changes for zypper: - Update to version 1.14.101.
-
Release DateSep 8 2026
-
References
-
Typesecurity
-
Severitycritical
cloud_download Downloads
Basesystem Module 15.7 ppc64le
-
Packageslibzypp
Library for package, patch, pattern and product managementlibzypp-devel17.38.15-150700.6.16.1 lock rpm lock src
Header files for libzypp, a library for package managementzypper17.38.15-150700.6.16.1 lock rpm
Command line software manager using libzyppzypper-log1.14.101-150700.13.9.1 lock rpm lock src
CLI for accessing the zypper logfilezypper-needs-restarting1.14.101-150700.13.9.1 lock rpm
needs-restarting compatibility with zypper1.14.101-150700.13.9.1 lock rpm
Basesystem Module 15.7 aarch64
-
Packageslibzypp
Library for package, patch, pattern and product managementlibzypp-devel17.38.15-150700.6.16.1 lock rpm lock src
Header files for libzypp, a library for package managementzypper17.38.15-150700.6.16.1 lock rpm
Command line software manager using libzyppzypper-log1.14.101-150700.13.9.1 lock rpm lock src
CLI for accessing the zypper logfilezypper-needs-restarting1.14.101-150700.13.9.1 lock rpm
needs-restarting compatibility with zypper1.14.101-150700.13.9.1 lock rpm
Basesystem Module 15.7 s390x
-
Packageslibzypp
Library for package, patch, pattern and product managementlibzypp-devel17.38.15-150700.6.16.1 lock rpm lock src
Header files for libzypp, a library for package managementzypper17.38.15-150700.6.16.1 lock rpm
Command line software manager using libzyppzypper-log1.14.101-150700.13.9.1 lock rpm lock src
CLI for accessing the zypper logfilezypper-needs-restarting1.14.101-150700.13.9.1 lock rpm
needs-restarting compatibility with zypper1.14.101-150700.13.9.1 lock rpm
Basesystem Module 15.7 x86_64
-
Packageslibzypp
Library for package, patch, pattern and product managementlibzypp-devel17.38.15-150700.6.16.1 lock rpm lock src
Header files for libzypp, a library for package managementzypper17.38.15-150700.6.16.1 lock rpm
Command line software manager using libzyppzypper-log1.14.101-150700.13.9.1 lock rpm lock src
CLI for accessing the zypper logfilezypper-needs-restarting1.14.101-150700.13.9.1 lock rpm
needs-restarting compatibility with zypper1.14.101-150700.13.9.1 lock rpm