shield
Security update for libsolv, libzypp, zypper
SUSE-SLE-SAP-12-SP3-2019-1972
This update for libsolv, libzypp and zypper fixes the following issues: libsolv was updated to version 0.6.36 fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629). - CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630). - CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631). Non-security issues fixed: - Made cleandeps jobs on patterns work (bsc#1137977). - Fixed an issue multiversion packages that obsolete their own name (bsc#1127155). - Keep consistent package name if there are multiple alternatives (bsc#1131823). libzypp received following fixes: - Fixes a bug where locking the kernel was not possible (bsc#1113296) zypper received following fixes: - Fixes a bug where the wrong exit code was set when refreshing repos if --root was used (bsc#1134226) - Improved the displaying of locks (bsc#1112911) - Fixes an issue where `https` repository urls caused an error prompt to appear twice (bsc#1110542) - zypper will now always warn when no repositories are defined (bsc#1109893)
-
Release DateJul 25 2019
-
ReferencesBugzilla: 1111319, 1109893, 1110542, 1134226, 1113296, 1112911, 1120629, 1137977, 1120630, 1131823, 1127155, 1120631
CVEs: CVE-2018-20533, CVE-2018-20532, CVE-2018-20534 -
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le
-
Packageslibsolv
Package dependency solver using a satisfiability algorithmlibsolv-tools0.6.36-2.16.2 lock src
Utilities to work with .solv fileslibzypp0.6.36-2.16.2 lock rpm
Package, Patch, Pattern, and Product Managementperl-solv16.20.0-2.39.4 lock rpm lock src
Perl bindings for the libsolv librarypython-solv0.6.36-2.16.2 lock rpm
Python bindings for the libsolv libraryzypper0.6.36-2.16.2 lock rpm
Command line software manager using libzyppzypper-log1.13.51-21.26.4 lock rpm lock src
CLI for accessing the zypper logfile1.13.51-21.26.4 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.3 x86_64
-
Packageslibsolv
Package dependency solver using a satisfiability algorithmlibsolv-tools0.6.36-2.16.2 lock src
Utilities to work with .solv fileslibzypp0.6.36-2.16.2 lock rpm
Package, Patch, Pattern, and Product Managementperl-solv16.20.0-2.39.4 lock rpm lock src
Perl bindings for the libsolv librarypython-solv0.6.36-2.16.2 lock rpm
Python bindings for the libsolv libraryzypper0.6.36-2.16.2 lock rpm
Command line software manager using libzyppzypper-log1.13.51-21.26.4 lock rpm lock src
CLI for accessing the zypper logfile1.13.51-21.26.4 lock rpm