Oval Definition:oval:org.opensuse.security:def:84174
Revision Date:2021-06-28Version:1
Title:Security update for libsolv (Important)
Description:

This update for libsolv fixes the following issues:

Security issues fixed:

- CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id (bsc#1161510) - CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late (bsc#1186229)

Other issues fixed:

- backport support for blacklisted packages to support ptf packages and retracted patches - fix ruleinfo of complex dependencies returning the wrong origin - fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason - fix add_complex_recommends() selecting conflicted packages in rare cases - fix potential segfault in resolve_jobrules - fix solv_zchunk decoding error if large chunks are used
Family:unixClass:patch
Status:Reference(s):1161510
1186229
CVE-2019-20387
CVE-2021-3200
SUSE-SU-2021:2180-1
Platform(s):SUSE OpenStack Cloud 8
Product(s):
Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • libsolv-devel-0.6.37-2.33.1 is installed
  • OR libsolv-tools-0.6.37-2.33.1 is installed
  • OR libzypp-16.21.4-2.51.1 is installed
  • OR libzypp-devel-16.21.4-2.51.1 is installed
  • OR perl-solv-0.6.37-2.33.1 is installed
  • OR python-solv-0.6.37-2.33.1 is installed
  • BACK