| Revision Date: | 2021-03-11 | Version: | 1 |
| Title: | Security update for libsolv, libzypp, yast2-installation, zypper (Moderate) |
| Description: |
This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues:
Update zypper to version 1.14.43:
- doc: give more details about creating versioned package locks (bsc#1181622) - man: Document synonymously used patch categories (bsc#1179847) - Fix source-download commnds help (bsc#1180663) - man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816) - Extend apt packagemap (fixes #366) - --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077) - Prefer /run over /var/run.
Update libzypp to 17.25.8:
- Try to provide a mounted /proc in --root installs (bsc#1181328) Some systemd tools require /proc to be mounted and fail if it's not there. - Enable release packages to request a releaxed suse/opensuse vendorcheck in dup when migrating. (bsc#1182629) - Patch: Identify well-known category names (bsc#1179847) This allows to use the RH and SUSE patch categrory names synonymously: (recommended = bugfix) and (optional = feature = enhancement). - Fix %posttrans script execution (fixes #265) The scripts are execuable. No need to call them through 'sh -c'. - Commit: Fix rpmdb compat symlink in case rpm got removed. - Repo: Allow multiple baseurls specified on one line (fixes #285) - Regex: Fix memory leak and undefined behavior. - Add rpm buildrequires for test suite (fixes #279) - Use rpmdb2solv new -D switch to tell the location ob the rpmdatabase to use. - BuildRequires: libsolv-devel >= 0.7.17. - CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583) - RepoManager: Force refresh if repo url has changed (bsc#1174016) - RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966) - RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427). - RpmDb: If no database exists use the _dbpath configured in rpm. Still makes sure a compat symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910) - Fixed update of gpg keys with elongated expire date (bsc#1179222) - needreboot: remove udev from the list (bsc#1179083) - Fix lsof monitoring (bsc#1179909) - Rephrase solver problem descriptions (jsc#SLE-8482) - Adapt to changed gpg2/libgpgme behavior (bsc#1180721) - Multicurl backend breaks with with unknown filesize (fixes #277)
Update yast2-installation to 4.0.77:
- Do not cleanup the libzypp cache when the system has low memory, incomplete cache confuses libzypp later (bsc#1179415)
Update libsolv to 0.7.17:
- repo_write: fix handling of nested flexarray - improve choicerule generation a bit more to cover more cases - harden testcase parser against repos being added too late - support python-3.10 - check %_dbpath macro in rpmdb code - handle default/visible/langonly attributes in comps parser - support multiple collections in updateinfo parser - add '-D' option in rpmdb2solv to set the dbpath
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1008644
1050625
1167976
1173986
1173991
1174016
1174284
1174420
1175686
1176756
1177238
1177275
1177427
1177583
1178910
1178966
1179083
1179222
1179415
1179847
1179909
1181328
1181622
1182629
CVE-2016-9180
CVE-2017-9271
CVE-2020-15663
CVE-2020-15664
CVE-2020-15670
CVE-2020-15673
CVE-2020-15676
CVE-2020-15677
CVE-2020-15678
SUSE-SU-2020:2172-1
SUSE-SU-2020:2749-1
SUSE-SU-2021:0770-1
|
| Platform(s): | SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND perl-XML-Twig-3.52-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed
AND Package Information
MozillaFirefox-78.3.0-8.6 is installed
OR MozillaFirefox-devel-78.3.0-8.6 is installed
OR MozillaFirefox-translations-common-78.3.0-8.6 is installed
OR MozillaFirefox-translations-other-78.3.0-8.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
libsolv-devel-0.7.17-3.40.1 is installed
OR libsolv-tools-0.7.17-3.40.1 is installed
OR libzypp-17.25.8-3.66.1 is installed
OR libzypp-devel-17.25.8-3.66.1 is installed
OR perl-solv-0.7.17-3.40.1 is installed
OR python-solv-0.7.17-3.40.1 is installed
OR python3-solv-0.7.17-3.40.1 is installed
OR ruby-solv-0.7.17-3.40.1 is installed
OR yast2-installation-4.0.77-3.22.5 is installed
OR zypper-1.14.43-3.49.1 is installed
OR zypper-log-1.14.43-3.49.1 is installed
|