shield
Security update for libsolv, libzypp, zypper
SUSE-SLE-SAP-12-SP3-2019-2265
This update for libsolv, libzypp and zypper fixes the following issues: libsolv was updated to version 0.6.36 and fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629). - CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630). - CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631). Non-security issues fixed: - Made cleandeps jobs on patterns work (bsc#1137977). - Fixed an issue multiversion packages that obsolete their own name (bsc#1127155). - Keep consistent package name if there are multiple alternatives (bsc#1131823). Fixes for libzypp: - Fixes a bug where locking the kernel was not possible (bsc#1113296) - Fixes a file descriptor leak (bsc#1116995) - Will now run file conflict check on dry-run (best with download-only) (bsc#1140039) Fixes for zypper: - Fixes a bug where the wrong exit code was set when refreshing repos if --root was used (bsc#1134226) - Improved the displaying of locks (bsc#1112911) - Fixes an issue where `https` repository urls caused an error prompt to appear twice (bsc#1110542) - zypper will now always warn when no repositories are defined (bsc#1109893) - Fixes bash completion option detection (bsc#1049825)
-
Release DateSep 2 2019
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le
-
Packageslibsolv
Package dependency solver using a satisfiability algorithmlibsolv-tools0.6.36-2.27.19.8 lock src
Utilities to work with .solv fileslibzypp0.6.36-2.27.19.8 lock rpm
Package, Patch, Pattern, and Product Managementperl-solv16.20.2-27.60.4 lock rpm lock src
Perl bindings for the libsolv librarypython-solv0.6.36-2.27.19.8 lock rpm
Python bindings for the libsolv libraryzypper0.6.36-2.27.19.8 lock rpm
Command line software manager using libzyppzypper-log1.13.54-18.40.2 lock rpm lock src
CLI for accessing the zypper logfile1.13.54-18.40.2 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.3 x86_64
-
Packageslibsolv
Package dependency solver using a satisfiability algorithmlibsolv-tools0.6.36-2.27.19.8 lock src
Utilities to work with .solv fileslibzypp0.6.36-2.27.19.8 lock rpm
Package, Patch, Pattern, and Product Managementperl-solv16.20.2-27.60.4 lock rpm lock src
Perl bindings for the libsolv librarypython-solv0.6.36-2.27.19.8 lock rpm
Python bindings for the libsolv libraryzypper0.6.36-2.27.19.8 lock rpm
Command line software manager using libzyppzypper-log1.13.54-18.40.2 lock rpm lock src
CLI for accessing the zypper logfile1.13.54-18.40.2 lock rpm