| Revision Date: | 2021-06-23 | Version: | 1 |
| Title: | Security update for libsolv (Moderate) |
| Description: |
This update for libsolv fixes the following issues:
Security issues fixed:
- CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id (bsc#1161510) - CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late (bsc#1186229)
Other issues fixed:
- backport support for blacklisted packages to support ptf packages and retracted patches - fix ruleinfo of complex dependencies returning the wrong origin - fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason - fix add_complex_recommends() selecting conflicted packages in rare cases - fix potential segfault in resolve_jobrules - fix solv_zchunk decoding error if large chunks are used
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1161510
1186229
CVE-2019-20387
CVE-2021-3200
|
| Platform(s): | SUSE Linux Enterprise Server 12 SP2-LTSS-SAP
| Product(s): | |