Oval Definition:oval:org.opensuse.security:def:110403
Revision Date:2020-02-27Version:1
Title:Security update for libsolv, libzypp, zypper (Moderate)
Description:

This update for libsolv, libzypp, zypper fixes the following issues:



Security issue fixed:

- CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).

Bug fixes

- Fixed removing orphaned packages dropped by to-be-installed products (bsc#1155819). - Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules (bsc#1155198). - Do not enforce 'en' being in RequestedLocales If the user decides to have a system without explicit language support he may do so (bsc#1155678). - Load only target resolvables for zypper rm (bsc#1157377). - Fix broken search by filelist (bsc#1135114). - Replace python by a bash script in zypper-log (fixes#304, fixes#306, bsc#1156158). - Do not sort out requested locales which are not available (bsc#1155678). - Prevent listing duplicate matches in tables. XML result is provided within the new list-patches-byissue element (bsc#1154805). - XML add patch issue-date and issue-list (bsc#1154805). - Fix zypper lp --cve/bugzilla/issue options (bsc#1155298). - Always execute commit when adding/removing locales (fixes bsc#1155205). - Fix description of --table-style,-s in man page (bsc#1154804).

This update was imported from the SUSE:SLE-15-SP1:Update update project.
Family:unixClass:patch
Status:Reference(s):1135114
1154804
1154805
1155198
1155205
1155298
1155678
1155819
1156158
1157377
1158763
CVE-2019-18900
openSUSE-SU-2020:0255-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libsolv-demo-0.7.10-lp151.2.10.1 is installed
  • OR libsolv-devel-0.7.10-lp151.2.10.1 is installed
  • OR libsolv-tools-0.7.10-lp151.2.10.1 is installed
  • OR libzypp-17.19.0-lp151.2.10.1 is installed
  • OR libzypp-devel-17.19.0-lp151.2.10.1 is installed
  • OR libzypp-devel-doc-17.19.0-lp151.2.10.1 is installed
  • OR perl-solv-0.7.10-lp151.2.10.1 is installed
  • OR python-solv-0.7.10-lp151.2.10.1 is installed
  • OR python3-solv-0.7.10-lp151.2.10.1 is installed
  • OR ruby-solv-0.7.10-lp151.2.10.1 is installed
  • OR zypper-1.14.33-lp151.2.10.1 is installed
  • OR zypper-aptitude-1.14.33-lp151.2.10.1 is installed
  • OR zypper-log-1.14.33-lp151.2.10.1 is installed
  • OR zypper-needs-restarting-1.14.33-lp151.2.10.1 is installed
  • BACK