Security update for libsolv, libzypp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1128-1 Final 1 1 2022-04-07T14:19:28Z current 2022-04-07T14:19:28Z 2022-04-07T14:19:28Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libsolv, libzypp This update for libsolv, libzypp fixes the following issues: libsolv to 0.6.39: - fix memory leaks in SWIG generated code - fix misparsing of '&' in attributes with libxml2 - try to keep packages from a cycle close togther in the transaction order (bsc#1189622) - fix split provides not working if the update includes a forbidden vendor change (bsc#1195485) - fix segfault on conflict resolution when using bindings - do not replace noarch problem rules with arch dependent ones in problem reporting - fix and simplify pool_vendor2mask implementation - bump version to 0.6.39 libzypp to 16.22.4: - Hint on ptf resolver conflicts (bsc#1194848) - Fix package signature check (bsc#1184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Set ZYPP_RPM_DEBUG=1 to capture verbose rpm command output. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-1128,SUSE-SLE-SERVER-12-SP2-BCL-2022-1128 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221128-1/ Link for SUSE-SU-2022:1128-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010668.html E-Mail link for SUSE-SU-2022:1128-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1184501 SUSE Bug 1184501 https://bugzilla.suse.com/1189622 SUSE Bug 1189622 https://bugzilla.suse.com/1194848 SUSE Bug 1194848 https://bugzilla.suse.com/1195485 SUSE Bug 1195485 SUSE Linux Enterprise Server 12 SP2-BCL libsolv-demo-0.6.39-2.27.32.2 libsolv-devel-0.6.39-2.27.32.2 libsolv-tools-0.6.39-2.27.32.2 libzypp-16.22.4-27.85.2 libzypp-devel-16.22.4-27.85.2 libzypp-devel-doc-16.22.4-27.85.2 perl-solv-0.6.39-2.27.32.2 python-solv-0.6.39-2.27.32.2 python3-solv-0.6.39-2.27.32.2 ruby-solv-0.6.39-2.27.32.2 libsolv-devel-0.6.39-2.27.32.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsolv-tools-0.6.39-2.27.32.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libzypp-16.22.4-27.85.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libzypp-devel-16.22.4-27.85.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL perl-solv-0.6.39-2.27.32.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python-solv-0.6.39-2.27.32.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL