Security update for libsolv, libzypp, zypper SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2265-1 Final 1 1 2019-09-02T07:09:12Z current 2019-09-02T07:09:12Z 2019-09-02T07:09:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libsolv, libzypp, zypper This update for libsolv, libzypp and zypper fixes the following issues: libsolv was updated to version 0.6.36 and fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629). - CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630). - CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631). Non-security issues fixed: - Made cleandeps jobs on patterns work (bsc#1137977). - Fixed an issue multiversion packages that obsolete their own name (bsc#1127155). - Keep consistent package name if there are multiple alternatives (bsc#1131823). Fixes for libzypp: - Fixes a bug where locking the kernel was not possible (bsc#1113296) - Fixes a file descriptor leak (bsc#1116995) - Will now run file conflict check on dry-run (best with download-only) (bsc#1140039) Fixes for zypper: - Fixes a bug where the wrong exit code was set when refreshing repos if --root was used (bsc#1134226) - Improved the displaying of locks (bsc#1112911) - Fixes an issue where `https` repository urls caused an error prompt to appear twice (bsc#1110542) - zypper will now always warn when no repositories are defined (bsc#1109893) - Fixes bash completion option detection (bsc#1049825) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2019-2265,SUSE-2019-2265,SUSE-OpenStack-Cloud-7-2019-2265,SUSE-OpenStack-Cloud-8-2019-2265,SUSE-OpenStack-Cloud-Crowbar-8-2019-2265,SUSE-SLE-DESKTOP-12-SP4-2019-2265,SUSE-SLE-SAP-12-SP2-2019-2265,SUSE-SLE-SAP-12-SP3-2019-2265,SUSE-SLE-SERVER-12-SP2-2019-2265,SUSE-SLE-SERVER-12-SP2-BCL-2019-2265,SUSE-SLE-SERVER-12-SP3-2019-2265,SUSE-SLE-SERVER-12-SP3-BCL-2019-2265,SUSE-SLE-SERVER-12-SP4-2019-2265,SUSE-Storage-4-2019-2265,SUSE-Storage-5-2019-2265 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1/ Link for SUSE-SU-2019:2265-1 https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1.html E-Mail link for SUSE-SU-2019:2265-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1049825 SUSE Bug 1049825 https://bugzilla.suse.com/1109893 SUSE Bug 1109893 https://bugzilla.suse.com/1110542 SUSE Bug 1110542 https://bugzilla.suse.com/1111319 SUSE Bug 1111319 https://bugzilla.suse.com/1112911 SUSE Bug 1112911 https://bugzilla.suse.com/1113296 SUSE Bug 1113296 https://bugzilla.suse.com/1116995 SUSE Bug 1116995 https://bugzilla.suse.com/1120629 SUSE Bug 1120629 https://bugzilla.suse.com/1120630 SUSE Bug 1120630 https://bugzilla.suse.com/1120631 SUSE Bug 1120631 https://bugzilla.suse.com/1127155 SUSE Bug 1127155 https://bugzilla.suse.com/1131823 SUSE Bug 1131823 https://bugzilla.suse.com/1134226 SUSE Bug 1134226 https://bugzilla.suse.com/1137977 SUSE Bug 1137977 https://bugzilla.suse.com/1140039 SUSE Bug 1140039 https://bugzilla.suse.com/1145521 SUSE Bug 1145521 https://www.suse.com/security/cve/CVE-2018-20532/ SUSE CVE CVE-2018-20532 page https://www.suse.com/security/cve/CVE-2018-20533/ SUSE CVE CVE-2018-20533 page https://www.suse.com/security/cve/CVE-2018-20534/ SUSE CVE CVE-2018-20534 page HPE Helion OpenStack 8 SUSE Enterprise Storage 4 SUSE Enterprise Storage 5 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 libsolv-tools-0.6.36-2.27.19.8 libzypp-16.20.2-27.60.4 perl-solv-0.6.36-2.27.19.8 python-solv-0.6.36-2.27.19.8 zypper-1.13.54-18.40.2 zypper-log-1.13.54-18.40.2 libsolv-demo-0.6.36-2.27.19.8 libsolv-devel-0.6.36-2.27.19.8 libzypp-devel-16.20.2-27.60.4 libzypp-devel-doc-16.20.2-27.60.4 python3-solv-0.6.36-2.27.19.8 ruby-solv-0.6.36-2.27.19.8 zypper-aptitude-1.13.54-18.40.2 libsolv-tools-0.6.36-2.27.19.8 as a component of HPE Helion OpenStack 8 libzypp-16.20.2-27.60.4 as a component of HPE Helion OpenStack 8 perl-solv-0.6.36-2.27.19.8 as a component of HPE Helion OpenStack 8 python-solv-0.6.36-2.27.19.8 as a component of HPE Helion OpenStack 8 zypper-1.13.54-18.40.2 as a component of HPE Helion OpenStack 8 zypper-log-1.13.54-18.40.2 as a component of HPE Helion OpenStack 8 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Enterprise Storage 4 libzypp-16.20.2-27.60.4 as a component of SUSE Enterprise Storage 4 perl-solv-0.6.36-2.27.19.8 as a component of SUSE Enterprise Storage 4 python-solv-0.6.36-2.27.19.8 as a component of SUSE Enterprise Storage 4 zypper-1.13.54-18.40.2 as a component of SUSE Enterprise Storage 4 zypper-log-1.13.54-18.40.2 as a component of SUSE Enterprise Storage 4 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Enterprise Storage 5 libzypp-16.20.2-27.60.4 as a component of SUSE Enterprise Storage 5 perl-solv-0.6.36-2.27.19.8 as a component of SUSE Enterprise Storage 5 python-solv-0.6.36-2.27.19.8 as a component of SUSE Enterprise Storage 5 zypper-1.13.54-18.40.2 as a component of SUSE Enterprise Storage 5 zypper-log-1.13.54-18.40.2 as a component of SUSE Enterprise Storage 5 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Desktop 12 SP4 libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Desktop 12 SP4 python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Desktop 12 SP4 zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server 12 SP2-BCL perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP2-BCL zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server 12 SP3-BCL perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP3-BCL zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP4 libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server 12 SP4 perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP4 python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server 12 SP4 zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP4 zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server 12 SP4 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libzypp-16.20.2-27.60.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 perl-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-solv-0.6.36-2.27.19.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 zypper-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 zypper-log-1.13.54-18.40.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud 7 libzypp-16.20.2-27.60.4 as a component of SUSE OpenStack Cloud 7 perl-solv-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud 7 python-solv-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud 7 zypper-1.13.54-18.40.2 as a component of SUSE OpenStack Cloud 7 zypper-log-1.13.54-18.40.2 as a component of SUSE OpenStack Cloud 7 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud 8 libzypp-16.20.2-27.60.4 as a component of SUSE OpenStack Cloud 8 perl-solv-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud 8 python-solv-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud 8 zypper-1.13.54-18.40.2 as a component of SUSE OpenStack Cloud 8 zypper-log-1.13.54-18.40.2 as a component of SUSE OpenStack Cloud 8 libsolv-tools-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud Crowbar 8 libzypp-16.20.2-27.60.4 as a component of SUSE OpenStack Cloud Crowbar 8 perl-solv-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud Crowbar 8 python-solv-0.6.36-2.27.19.8 as a component of SUSE OpenStack Cloud Crowbar 8 zypper-1.13.54-18.40.2 as a component of SUSE OpenStack Cloud Crowbar 8 zypper-log-1.13.54-18.40.2 as a component of SUSE OpenStack Cloud Crowbar 8 There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. CVE-2018-20532 HPE Helion OpenStack 8:libsolv-tools-0.6.36-2.27.19.8 HPE Helion OpenStack 8:libzypp-16.20.2-27.60.4 HPE Helion OpenStack 8:perl-solv-0.6.36-2.27.19.8 HPE Helion OpenStack 8:python-solv-0.6.36-2.27.19.8 HPE Helion OpenStack 8:zypper-1.13.54-18.40.2 HPE Helion OpenStack 8:zypper-log-1.13.54-18.40.2 SUSE Enterprise Storage 4:libsolv-tools-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:libzypp-16.20.2-27.60.4 SUSE Enterprise Storage 4:perl-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:python-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:zypper-1.13.54-18.40.2 SUSE Enterprise Storage 4:zypper-log-1.13.54-18.40.2 SUSE Enterprise Storage 5:libsolv-tools-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:libzypp-16.20.2-27.60.4 SUSE Enterprise Storage 5:perl-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:python-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:zypper-1.13.54-18.40.2 SUSE Enterprise Storage 5:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Desktop 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Desktop 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Desktop 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Desktop 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Desktop 12 SP4:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP2-BCL:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-BCL:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-LTSS:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP2-LTSS:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-LTSS:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-BCL:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP3-BCL:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-BCL:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-LTSS:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP3-LTSS:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-LTSS:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP4:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP4:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud 7:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud 7:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud 7:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud 8:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud 8:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud 8:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud Crowbar 8:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud Crowbar 8:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud Crowbar 8:zypper-log-1.13.54-18.40.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1/ https://www.suse.com/security/cve/CVE-2018-20532.html CVE-2018-20532 https://bugzilla.suse.com/1120629 SUSE Bug 1120629 There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. CVE-2018-20533 HPE Helion OpenStack 8:libsolv-tools-0.6.36-2.27.19.8 HPE Helion OpenStack 8:libzypp-16.20.2-27.60.4 HPE Helion OpenStack 8:perl-solv-0.6.36-2.27.19.8 HPE Helion OpenStack 8:python-solv-0.6.36-2.27.19.8 HPE Helion OpenStack 8:zypper-1.13.54-18.40.2 HPE Helion OpenStack 8:zypper-log-1.13.54-18.40.2 SUSE Enterprise Storage 4:libsolv-tools-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:libzypp-16.20.2-27.60.4 SUSE Enterprise Storage 4:perl-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:python-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:zypper-1.13.54-18.40.2 SUSE Enterprise Storage 4:zypper-log-1.13.54-18.40.2 SUSE Enterprise Storage 5:libsolv-tools-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:libzypp-16.20.2-27.60.4 SUSE Enterprise Storage 5:perl-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:python-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:zypper-1.13.54-18.40.2 SUSE Enterprise Storage 5:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Desktop 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Desktop 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Desktop 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Desktop 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Desktop 12 SP4:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP2-BCL:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-BCL:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-LTSS:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP2-LTSS:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-LTSS:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-BCL:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP3-BCL:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-BCL:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-LTSS:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP3-LTSS:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-LTSS:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP4:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP4:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud 7:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud 7:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud 7:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud 8:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud 8:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud 8:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud Crowbar 8:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud Crowbar 8:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud Crowbar 8:zypper-log-1.13.54-18.40.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1/ https://www.suse.com/security/cve/CVE-2018-20533.html CVE-2018-20533 https://bugzilla.suse.com/1120630 SUSE Bug 1120630 ** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application. CVE-2018-20534 HPE Helion OpenStack 8:libsolv-tools-0.6.36-2.27.19.8 HPE Helion OpenStack 8:libzypp-16.20.2-27.60.4 HPE Helion OpenStack 8:perl-solv-0.6.36-2.27.19.8 HPE Helion OpenStack 8:python-solv-0.6.36-2.27.19.8 HPE Helion OpenStack 8:zypper-1.13.54-18.40.2 HPE Helion OpenStack 8:zypper-log-1.13.54-18.40.2 SUSE Enterprise Storage 4:libsolv-tools-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:libzypp-16.20.2-27.60.4 SUSE Enterprise Storage 4:perl-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:python-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 4:zypper-1.13.54-18.40.2 SUSE Enterprise Storage 4:zypper-log-1.13.54-18.40.2 SUSE Enterprise Storage 5:libsolv-tools-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:libzypp-16.20.2-27.60.4 SUSE Enterprise Storage 5:perl-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:python-solv-0.6.36-2.27.19.8 SUSE Enterprise Storage 5:zypper-1.13.54-18.40.2 SUSE Enterprise Storage 5:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Desktop 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Desktop 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Desktop 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Desktop 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Desktop 12 SP4:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP2-BCL:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-BCL:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-BCL:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-LTSS:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP2-LTSS:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP2-LTSS:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP2-LTSS:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-BCL:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP3-BCL:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-BCL:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-BCL:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-LTSS:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP3-LTSS:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP3-LTSS:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP3-LTSS:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server 12 SP4:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server 12 SP4:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zypper-log-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsolv-tools-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libzypp-16.20.2-27.60.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-solv-0.6.36-2.27.19.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:zypper-1.13.54-18.40.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud 7:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud 7:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 7:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud 7:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud 8:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud 8:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud 8:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud 8:zypper-log-1.13.54-18.40.2 SUSE OpenStack Cloud Crowbar 8:libsolv-tools-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:libzypp-16.20.2-27.60.4 SUSE OpenStack Cloud Crowbar 8:perl-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:python-solv-0.6.36-2.27.19.8 SUSE OpenStack Cloud Crowbar 8:zypper-1.13.54-18.40.2 SUSE OpenStack Cloud Crowbar 8:zypper-log-1.13.54-18.40.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1/ https://www.suse.com/security/cve/CVE-2018-20534.html CVE-2018-20534 https://bugzilla.suse.com/1120631 SUSE Bug 1120631