Recommended update for libzypp, zypper, libsolv and PackageKit SUSE Patch security@suse.de SUSE Security Team SUSE-RU-2019:2742-1 Final 1 1 2019-10-22T13:40:42Z current 2019-10-22T13:40:42Z 2019-10-22T13:40:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for libzypp, zypper, libsolv and PackageKit This update for libzypp, zypper, libsolv and PackageKit fixes the following issues: Security issues fixed in libsolv: - CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c (function testcase_read) (bsc#1120629). - CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a (bsc#1120630). - CVE-2018-20534: Fixed illegal address access at src/pool.h (function pool_whatprovides) in libsolv.a (bsc#1120631). Other issues addressed in libsolv: - Fixed an issue where libsolv failed to build against swig 4.0 by updating the version to 0.7.5 (bsc#1135749). - Fixed an issue with the package name (bsc#1131823). - repo_add_rpmdb: do not copy bad solvables from the old solv file - Fixed an issue with cleandeps updates in which all packages were not updated - Experimental DISTTYPE_CONDA and REL_CONDA support - Fixed cleandeps jobs when using patterns (bsc#1137977) - Fixed favorq leaking between solver runs if the solver is reused - Fixed SOLVER_FLAG_FOCUS_BEST updateing packages without reason - Be more correct with multiversion packages that obsolete their own name (bnc#1127155) - Fix repository priority handling for multiversion packages - Make code compatible with swig 4.0, remove obj0 instances - repo2solv: support zchunk compressed data - Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will not strip debug info for archives Issues fixed in libzypp: - Fix empty metalink downloads if filesize is unknown (bsc#1153557) - Recognize riscv64 as architecture - Fix installation of new header file (fixes #185) - zypp.conf: Introduce `solver.focus` to define the resolvers general attitude when resolving jobs. (bsc#1146415) - New container detection algorithm for zypper ps (bsc#1146947) - Fix leaking filedescriptors in MediaCurl. (bsc#1116995) - Run file conflict check on dry-run. (bsc#1140039) - Do not remove orphan products if the .prod file is owned by a package. (bsc#1139795) - Rephrase file conflict check summary. (bsc#1140039) - Fix bash completions option detection. (bsc#1049825) - Fixes a bug where zypper exited on SIGPIPE when downloading packages (bsc#1145521) - Fixes an issue where zypper exited with a segmentation fault when updating via YaST2 (bsc#1146027) - PublicKey::algoName: supply key algorithm and length Issues fixed in zypper: - Update to version 1.14.30 - Ignore SIGPIPE while STDOUT/STDERR are OK (bsc#1145521) - Dump stacktrace on SIGPIPE (bsc#1145521) - info: The requested info must be shown in QUIET mode (fixes #287) - Fix local/remote url classification. - Rephrase file conflict check summary (bsc#1140039) - Fix bash completions option detection (bsc#1049825) - man: split '--with[out]' like options to ease searching. - Unhided 'ps' command in help - Added option to show more conflict information - Rephrased `zypper ps` hint (bsc#859480) - Fixed repo refresh not returning 106-ZYPPER_EXIT_INF_REPOS_SKIPPED if --root is used (bsc#1134226) - Fixed unknown package handling in zypper install (bsc#1127608) - Re-show progress bar after pressing retry upon install error (bsc#1131113) Issues fixed in PackageKit: - Port the cron configuration variables to the systemd timer script, and add -sendwait parameter to mail in the script(bsc#1130306). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2019-2742,Container caasp/v4/busybox:1.34.1-2019-2742,Container caasp/v4/caasp-dex:2.16.0-2019-2742,Container caasp/v4/cert-exporter:2.3.0-2019-2742,Container caasp/v4/cilium-etcd-operator:2.0.5-2019-2742,Container caasp/v4/cilium-init:1.5.3-2019-2742,Container caasp/v4/cilium-operator:1.6.6-2019-2742,Container caasp/v4/cilium:1.6.6-2019-2742,Container caasp/v4/cloud-provider-openstack:1.15.0-2019-2742,Container caasp/v4/configmap-reload:0.3.0-2019-2742,Container caasp/v4/coredns:1.6.7-2019-2742,Container caasp/v4/curl:7.60.0-2019-2742,Container caasp/v4/etcd:3.4.13-2019-2742,Container caasp/v4/gangway:3.1.0-2019-2742,Container caasp/v4/grafana:7.5.12-2019-2742,Container caasp/v4/helm-tiller:2.16.12-2019-2742,Container caasp/v4/hyperkube:v1.17.17-2019-2742,Container caasp/v4/k8s-sidecar:0.1.75-2019-2742,Container caasp/v4/kube-state-metrics:1.9.3-2019-2742,Container caasp/v4/kubernetes-client:1.17.17-2019-2742,Container caasp/v4/kucero:1.3.0-2019-2742,Container caasp/v4/kured:1.3.0-2019-2742,Container caasp/v4/metrics-server:0.3.6-2019-2742,Container caasp/v4/prometheus-alertmanager:0.16.2-2019-2742,Container caasp/v4/prometheus-node-exporter:1.1.2-2019-2742,Container caasp/v4/prometheus-pushgateway:0.6.0-2019-2742,Container caasp/v4/prometheus-server:2.7.1-2019-2742,Container caasp/v4/rsyslog:8.39.0-2019-2742,Container caasp/v4/skuba-tooling:0.1.0-2019-2742,Container caasp/v4/test-update:beta-2019-2742,Container caasp/v4/velero-plugin-for-aws:1.0.1-2019-2742,Container caasp/v4/velero-plugin-for-gcp:1.0.1-2019-2742,Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1-2019-2742,Container caasp/v4/velero-restic-restore-helper:1.3.1-2019-2742,Container caasp/v4/velero:1.3.1-2019-2742,Container ses/6/cephcsi/cephcsi:latest-2019-2742,Container ses/6/rook/ceph:latest-2019-2742,Container suse/sle15:15.1-2019-2742,SUSE-2019-2742,SUSE-SLE-Module-Basesystem-15-SP1-2019-2742,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-2742,SUSE-SLE-Module-Development-Tools-15-SP1-2019-2742,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2742,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2019-2742,SUSE-SLE-Product-WE-15-SP1-2019-2742 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement//suse-ru-20192742-1/ Link for SUSE-RU-2019:2742-1 https://lists.suse.com/pipermail/sle-updates/2019-October/012808.html E-Mail link for SUSE-RU-2019:2742-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1049825 SUSE Bug 1049825 https://bugzilla.suse.com/1116995 SUSE Bug 1116995 https://bugzilla.suse.com/1120629 SUSE Bug 1120629 https://bugzilla.suse.com/1120630 SUSE Bug 1120630 https://bugzilla.suse.com/1120631 SUSE Bug 1120631 https://bugzilla.suse.com/1127155 SUSE Bug 1127155 https://bugzilla.suse.com/1127608 SUSE Bug 1127608 https://bugzilla.suse.com/1130306 SUSE Bug 1130306 https://bugzilla.suse.com/1131113 SUSE Bug 1131113 https://bugzilla.suse.com/1131823 SUSE Bug 1131823 https://bugzilla.suse.com/1134226 SUSE Bug 1134226 https://bugzilla.suse.com/1135749 SUSE Bug 1135749 https://bugzilla.suse.com/1137977 SUSE Bug 1137977 https://bugzilla.suse.com/1139795 SUSE Bug 1139795 https://bugzilla.suse.com/1140039 SUSE Bug 1140039 https://bugzilla.suse.com/1145521 SUSE Bug 1145521 https://bugzilla.suse.com/1146027 SUSE Bug 1146027 https://bugzilla.suse.com/1146415 SUSE Bug 1146415 https://bugzilla.suse.com/1146947 SUSE Bug 1146947 https://bugzilla.suse.com/1153557 SUSE Bug 1153557 https://bugzilla.suse.com/859480 SUSE Bug 859480 https://www.suse.com/security/cve/CVE-2018-20532/ SUSE CVE CVE-2018-20532 page https://www.suse.com/security/cve/CVE-2018-20533/ SUSE CVE CVE-2018-20533 page https://www.suse.com/security/cve/CVE-2018-20534/ SUSE CVE CVE-2018-20534 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.34.1 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.5.12 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.17 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.1.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container suse/sle15:15.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1 libsolv-tools-0.7.6-3.7.2 libzypp-17.15.0-3.9.1 zypper-1.14.30-3.7.2 PackageKit-1.1.10-12.3.5 PackageKit-backend-zypp-1.1.10-12.3.5 PackageKit-branding-upstream-1.1.10-12.3.5 PackageKit-devel-1.1.10-12.3.5 PackageKit-gstreamer-plugin-1.1.10-12.3.5 PackageKit-gtk3-module-1.1.10-12.3.5 PackageKit-lang-1.1.10-12.3.5 libpackagekit-glib2-18-1.1.10-12.3.5 libpackagekit-glib2-18-32bit-1.1.10-12.3.5 libpackagekit-glib2-18-64bit-1.1.10-12.3.5 libpackagekit-glib2-devel-1.1.10-12.3.5 libpackagekit-glib2-devel-32bit-1.1.10-12.3.5 libpackagekit-glib2-devel-64bit-1.1.10-12.3.5 libsolv-demo-0.7.6-3.7.2 libsolv-devel-0.7.6-3.7.2 libyui-ncurses-pkg-devel-2.48.9-7.3.5 libyui-ncurses-pkg-doc-2.48.9-7.3.3 libyui-ncurses-pkg9-2.48.9-7.3.5 libyui-qt-pkg-devel-2.45.27-3.3.5 libyui-qt-pkg-doc-2.45.27-3.3.3 libyui-qt-pkg9-2.45.27-3.3.5 libzypp-devel-17.15.0-3.9.1 libzypp-devel-doc-17.15.0-3.9.1 perl-solv-0.7.6-3.7.2 python-solv-0.7.6-3.7.2 python3-solv-0.7.6-3.7.2 ruby-solv-0.7.6-3.7.2 typelib-1_0-PackageKitGlib-1_0-1.1.10-12.3.5 yast2-pkg-bindings-4.1.2-3.3.5 yast2-pkg-bindings-devel-doc-4.1.2-3.3.5 zypper-aptitude-1.14.30-3.7.2 zypper-log-1.14.30-3.7.2 zypper-needs-restarting-1.14.30-3.7.2 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/389-ds:1.4.2 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/389-ds:1.4.2 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/389-ds:1.4.2 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/busybox:1.34.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/busybox:1.34.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/busybox:1.34.1 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/caasp-dex:2.16.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/caasp-dex:2.16.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/caasp-dex:2.16.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/cert-exporter:2.3.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/cert-exporter:2.3.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/cert-exporter:2.3.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/cilium-init:1.5.3 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/cilium-init:1.5.3 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/cilium-init:1.5.3 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/cilium-operator:1.6.6 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/cilium-operator:1.6.6 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/cilium-operator:1.6.6 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/cilium:1.6.6 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/cilium:1.6.6 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/cilium:1.6.6 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/configmap-reload:0.3.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/configmap-reload:0.3.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/configmap-reload:0.3.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/coredns:1.6.7 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/coredns:1.6.7 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/coredns:1.6.7 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/curl:7.60.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/curl:7.60.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/curl:7.60.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/etcd:3.4.13 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/etcd:3.4.13 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/etcd:3.4.13 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/gangway:3.1.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/gangway:3.1.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/gangway:3.1.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/grafana:7.5.12 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/grafana:7.5.12 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/grafana:7.5.12 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/helm-tiller:2.16.12 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/helm-tiller:2.16.12 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/helm-tiller:2.16.12 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/hyperkube:v1.17.17 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/hyperkube:v1.17.17 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/hyperkube:v1.17.17 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/k8s-sidecar:0.1.75 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/k8s-sidecar:0.1.75 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/kube-state-metrics:1.9.3 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/kube-state-metrics:1.9.3 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/kube-state-metrics:1.9.3 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/kubernetes-client:1.17.17 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/kubernetes-client:1.17.17 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/kubernetes-client:1.17.17 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/kucero:1.3.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/kucero:1.3.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/kucero:1.3.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/kured:1.3.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/kured:1.3.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/kured:1.3.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/metrics-server:0.3.6 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/metrics-server:0.3.6 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/metrics-server:0.3.6 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/prometheus-server:2.7.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/prometheus-server:2.7.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/prometheus-server:2.7.1 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/rsyslog:8.39.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/rsyslog:8.39.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/rsyslog:8.39.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/skuba-tooling:0.1.0 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/skuba-tooling:0.1.0 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/skuba-tooling:0.1.0 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/test-update:beta libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/test-update:beta zypper-1.14.30-3.7.2 as a component of Container caasp/v4/test-update:beta libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 libsolv-tools-0.7.6-3.7.2 as a component of Container caasp/v4/velero:1.3.1 libzypp-17.15.0-3.9.1 as a component of Container caasp/v4/velero:1.3.1 zypper-1.14.30-3.7.2 as a component of Container caasp/v4/velero:1.3.1 libsolv-tools-0.7.6-3.7.2 as a component of Container ses/6/cephcsi/cephcsi:latest libzypp-17.15.0-3.9.1 as a component of Container ses/6/cephcsi/cephcsi:latest zypper-1.14.30-3.7.2 as a component of Container ses/6/cephcsi/cephcsi:latest libsolv-tools-0.7.6-3.7.2 as a component of Container ses/6/rook/ceph:latest libzypp-17.15.0-3.9.1 as a component of Container ses/6/rook/ceph:latest zypper-1.14.30-3.7.2 as a component of Container ses/6/rook/ceph:latest libsolv-tools-0.7.6-3.7.2 as a component of Container suse/sle15:15.1 libzypp-17.15.0-3.9.1 as a component of Container suse/sle15:15.1 zypper-1.14.30-3.7.2 as a component of Container suse/sle15:15.1 libsolv-devel-0.7.6-3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libsolv-tools-0.7.6-3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libyui-ncurses-pkg-devel-2.48.9-7.3.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libyui-ncurses-pkg-doc-2.48.9-7.3.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libyui-ncurses-pkg9-2.48.9-7.3.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libyui-qt-pkg-doc-2.45.27-3.3.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libyui-qt-pkg9-2.45.27-3.3.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libzypp-17.15.0-3.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libzypp-devel-17.15.0-3.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-solv-0.7.6-3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 yast2-pkg-bindings-4.1.2-3.3.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 zypper-1.14.30-3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 zypper-log-1.14.30-3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 zypper-needs-restarting-1.14.30-3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 PackageKit-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 PackageKit-backend-zypp-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 PackageKit-devel-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 PackageKit-lang-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libpackagekit-glib2-18-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libpackagekit-glib2-devel-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libyui-qt-pkg-devel-2.45.27-3.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 typelib-1_0-PackageKitGlib-1_0-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 perl-solv-0.7.6-3.7.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 ruby-solv-0.7.6-3.7.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 python-solv-0.7.6-3.7.2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 PackageKit-gstreamer-plugin-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 PackageKit-gtk3-module-1.1.10-12.3.5 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. CVE-2018-20532 Container caasp/v4/389-ds:1.4.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/389-ds:1.4.2:libzypp-17.15.0-3.9.1 Container caasp/v4/389-ds:1.4.2:zypper-1.14.30-3.7.2 Container caasp/v4/busybox:1.34.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/busybox:1.34.1:libzypp-17.15.0-3.9.1 Container caasp/v4/busybox:1.34.1:zypper-1.14.30-3.7.2 Container caasp/v4/caasp-dex:2.16.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/caasp-dex:2.16.0:libzypp-17.15.0-3.9.1 Container caasp/v4/caasp-dex:2.16.0:zypper-1.14.30-3.7.2 Container caasp/v4/cert-exporter:2.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cert-exporter:2.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/cert-exporter:2.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-etcd-operator:2.0.5:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-etcd-operator:2.0.5:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-etcd-operator:2.0.5:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-init:1.5.3:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-init:1.5.3:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-init:1.5.3:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-operator:1.6.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-operator:1.6.6:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-operator:1.6.6:zypper-1.14.30-3.7.2 Container caasp/v4/cilium:1.6.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium:1.6.6:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium:1.6.6:zypper-1.14.30-3.7.2 Container caasp/v4/cloud-provider-openstack:1.15.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cloud-provider-openstack:1.15.0:libzypp-17.15.0-3.9.1 Container caasp/v4/cloud-provider-openstack:1.15.0:zypper-1.14.30-3.7.2 Container caasp/v4/configmap-reload:0.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/configmap-reload:0.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/configmap-reload:0.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/coredns:1.6.7:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/coredns:1.6.7:libzypp-17.15.0-3.9.1 Container caasp/v4/coredns:1.6.7:zypper-1.14.30-3.7.2 Container caasp/v4/curl:7.60.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/curl:7.60.0:libzypp-17.15.0-3.9.1 Container caasp/v4/curl:7.60.0:zypper-1.14.30-3.7.2 Container caasp/v4/etcd:3.4.13:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/etcd:3.4.13:libzypp-17.15.0-3.9.1 Container caasp/v4/etcd:3.4.13:zypper-1.14.30-3.7.2 Container caasp/v4/gangway:3.1.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/gangway:3.1.0:libzypp-17.15.0-3.9.1 Container caasp/v4/gangway:3.1.0:zypper-1.14.30-3.7.2 Container caasp/v4/grafana:7.5.12:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/grafana:7.5.12:libzypp-17.15.0-3.9.1 Container caasp/v4/grafana:7.5.12:zypper-1.14.30-3.7.2 Container caasp/v4/helm-tiller:2.16.12:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/helm-tiller:2.16.12:libzypp-17.15.0-3.9.1 Container caasp/v4/helm-tiller:2.16.12:zypper-1.14.30-3.7.2 Container caasp/v4/hyperkube:v1.17.17:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/hyperkube:v1.17.17:libzypp-17.15.0-3.9.1 Container caasp/v4/hyperkube:v1.17.17:zypper-1.14.30-3.7.2 Container caasp/v4/k8s-sidecar:0.1.75:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/k8s-sidecar:0.1.75:libzypp-17.15.0-3.9.1 Container caasp/v4/k8s-sidecar:0.1.75:zypper-1.14.30-3.7.2 Container caasp/v4/kube-state-metrics:1.9.3:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kube-state-metrics:1.9.3:libzypp-17.15.0-3.9.1 Container caasp/v4/kube-state-metrics:1.9.3:zypper-1.14.30-3.7.2 Container caasp/v4/kubernetes-client:1.17.17:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kubernetes-client:1.17.17:libzypp-17.15.0-3.9.1 Container caasp/v4/kubernetes-client:1.17.17:zypper-1.14.30-3.7.2 Container caasp/v4/kucero:1.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kucero:1.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/kucero:1.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/kured:1.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kured:1.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/kured:1.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/metrics-server:0.3.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/metrics-server:0.3.6:libzypp-17.15.0-3.9.1 Container caasp/v4/metrics-server:0.3.6:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-alertmanager:0.16.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-alertmanager:0.16.2:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-alertmanager:0.16.2:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-node-exporter:1.1.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-node-exporter:1.1.2:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-node-exporter:1.1.2:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-pushgateway:0.6.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-pushgateway:0.6.0:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-pushgateway:0.6.0:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-server:2.7.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-server:2.7.1:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-server:2.7.1:zypper-1.14.30-3.7.2 Container caasp/v4/rsyslog:8.39.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/rsyslog:8.39.0:libzypp-17.15.0-3.9.1 Container caasp/v4/rsyslog:8.39.0:zypper-1.14.30-3.7.2 Container caasp/v4/skuba-tooling:0.1.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/skuba-tooling:0.1.0:libzypp-17.15.0-3.9.1 Container caasp/v4/skuba-tooling:0.1.0:zypper-1.14.30-3.7.2 Container caasp/v4/test-update:beta:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/test-update:beta:libzypp-17.15.0-3.9.1 Container caasp/v4/test-update:beta:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero:1.3.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero:1.3.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero:1.3.1:zypper-1.14.30-3.7.2 Container ses/6/cephcsi/cephcsi:latest:libsolv-tools-0.7.6-3.7.2 Container ses/6/cephcsi/cephcsi:latest:libzypp-17.15.0-3.9.1 Container ses/6/cephcsi/cephcsi:latest:zypper-1.14.30-3.7.2 Container ses/6/rook/ceph:latest:libsolv-tools-0.7.6-3.7.2 Container ses/6/rook/ceph:latest:libzypp-17.15.0-3.9.1 Container ses/6/rook/ceph:latest:zypper-1.14.30-3.7.2 Container suse/sle15:15.1:libsolv-tools-0.7.6-3.7.2 Container suse/sle15:15.1:libzypp-17.15.0-3.9.1 Container suse/sle15:15.1:zypper-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libsolv-devel-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libsolv-tools-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg-devel-2.48.9-7.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg-doc-2.48.9-7.3.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg9-2.48.9-7.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-qt-pkg-doc-2.45.27-3.3.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-qt-pkg9-2.45.27-3.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzypp-17.15.0-3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzypp-devel-17.15.0-3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:yast2-pkg-bindings-4.1.2-3.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-log-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-needs-restarting-1.14.30-3.7.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-backend-zypp-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-devel-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-lang-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpackagekit-glib2-18-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpackagekit-glib2-devel-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libyui-qt-pkg-devel-2.45.27-3.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-PackageKitGlib-1_0-1.1.10-12.3.5 SUSE Linux Enterprise Module for Development Tools 15 SP1:perl-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Development Tools 15 SP1:ruby-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Package Hub 15 SP1:python-solv-0.7.6-3.7.2 SUSE Linux Enterprise Workstation Extension 15 SP1:PackageKit-gstreamer-plugin-1.1.10-12.3.5 SUSE Linux Enterprise Workstation Extension 15 SP1:PackageKit-gtk3-module-1.1.10-12.3.5 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement//suse-ru-20192742-1/ https://www.suse.com/security/cve/CVE-2018-20532.html CVE-2018-20532 https://bugzilla.suse.com/1120629 SUSE Bug 1120629 There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. CVE-2018-20533 Container caasp/v4/389-ds:1.4.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/389-ds:1.4.2:libzypp-17.15.0-3.9.1 Container caasp/v4/389-ds:1.4.2:zypper-1.14.30-3.7.2 Container caasp/v4/busybox:1.34.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/busybox:1.34.1:libzypp-17.15.0-3.9.1 Container caasp/v4/busybox:1.34.1:zypper-1.14.30-3.7.2 Container caasp/v4/caasp-dex:2.16.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/caasp-dex:2.16.0:libzypp-17.15.0-3.9.1 Container caasp/v4/caasp-dex:2.16.0:zypper-1.14.30-3.7.2 Container caasp/v4/cert-exporter:2.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cert-exporter:2.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/cert-exporter:2.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-etcd-operator:2.0.5:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-etcd-operator:2.0.5:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-etcd-operator:2.0.5:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-init:1.5.3:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-init:1.5.3:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-init:1.5.3:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-operator:1.6.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-operator:1.6.6:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-operator:1.6.6:zypper-1.14.30-3.7.2 Container caasp/v4/cilium:1.6.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium:1.6.6:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium:1.6.6:zypper-1.14.30-3.7.2 Container caasp/v4/cloud-provider-openstack:1.15.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cloud-provider-openstack:1.15.0:libzypp-17.15.0-3.9.1 Container caasp/v4/cloud-provider-openstack:1.15.0:zypper-1.14.30-3.7.2 Container caasp/v4/configmap-reload:0.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/configmap-reload:0.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/configmap-reload:0.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/coredns:1.6.7:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/coredns:1.6.7:libzypp-17.15.0-3.9.1 Container caasp/v4/coredns:1.6.7:zypper-1.14.30-3.7.2 Container caasp/v4/curl:7.60.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/curl:7.60.0:libzypp-17.15.0-3.9.1 Container caasp/v4/curl:7.60.0:zypper-1.14.30-3.7.2 Container caasp/v4/etcd:3.4.13:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/etcd:3.4.13:libzypp-17.15.0-3.9.1 Container caasp/v4/etcd:3.4.13:zypper-1.14.30-3.7.2 Container caasp/v4/gangway:3.1.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/gangway:3.1.0:libzypp-17.15.0-3.9.1 Container caasp/v4/gangway:3.1.0:zypper-1.14.30-3.7.2 Container caasp/v4/grafana:7.5.12:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/grafana:7.5.12:libzypp-17.15.0-3.9.1 Container caasp/v4/grafana:7.5.12:zypper-1.14.30-3.7.2 Container caasp/v4/helm-tiller:2.16.12:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/helm-tiller:2.16.12:libzypp-17.15.0-3.9.1 Container caasp/v4/helm-tiller:2.16.12:zypper-1.14.30-3.7.2 Container caasp/v4/hyperkube:v1.17.17:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/hyperkube:v1.17.17:libzypp-17.15.0-3.9.1 Container caasp/v4/hyperkube:v1.17.17:zypper-1.14.30-3.7.2 Container caasp/v4/k8s-sidecar:0.1.75:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/k8s-sidecar:0.1.75:libzypp-17.15.0-3.9.1 Container caasp/v4/k8s-sidecar:0.1.75:zypper-1.14.30-3.7.2 Container caasp/v4/kube-state-metrics:1.9.3:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kube-state-metrics:1.9.3:libzypp-17.15.0-3.9.1 Container caasp/v4/kube-state-metrics:1.9.3:zypper-1.14.30-3.7.2 Container caasp/v4/kubernetes-client:1.17.17:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kubernetes-client:1.17.17:libzypp-17.15.0-3.9.1 Container caasp/v4/kubernetes-client:1.17.17:zypper-1.14.30-3.7.2 Container caasp/v4/kucero:1.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kucero:1.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/kucero:1.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/kured:1.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kured:1.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/kured:1.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/metrics-server:0.3.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/metrics-server:0.3.6:libzypp-17.15.0-3.9.1 Container caasp/v4/metrics-server:0.3.6:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-alertmanager:0.16.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-alertmanager:0.16.2:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-alertmanager:0.16.2:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-node-exporter:1.1.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-node-exporter:1.1.2:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-node-exporter:1.1.2:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-pushgateway:0.6.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-pushgateway:0.6.0:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-pushgateway:0.6.0:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-server:2.7.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-server:2.7.1:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-server:2.7.1:zypper-1.14.30-3.7.2 Container caasp/v4/rsyslog:8.39.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/rsyslog:8.39.0:libzypp-17.15.0-3.9.1 Container caasp/v4/rsyslog:8.39.0:zypper-1.14.30-3.7.2 Container caasp/v4/skuba-tooling:0.1.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/skuba-tooling:0.1.0:libzypp-17.15.0-3.9.1 Container caasp/v4/skuba-tooling:0.1.0:zypper-1.14.30-3.7.2 Container caasp/v4/test-update:beta:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/test-update:beta:libzypp-17.15.0-3.9.1 Container caasp/v4/test-update:beta:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero:1.3.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero:1.3.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero:1.3.1:zypper-1.14.30-3.7.2 Container ses/6/cephcsi/cephcsi:latest:libsolv-tools-0.7.6-3.7.2 Container ses/6/cephcsi/cephcsi:latest:libzypp-17.15.0-3.9.1 Container ses/6/cephcsi/cephcsi:latest:zypper-1.14.30-3.7.2 Container ses/6/rook/ceph:latest:libsolv-tools-0.7.6-3.7.2 Container ses/6/rook/ceph:latest:libzypp-17.15.0-3.9.1 Container ses/6/rook/ceph:latest:zypper-1.14.30-3.7.2 Container suse/sle15:15.1:libsolv-tools-0.7.6-3.7.2 Container suse/sle15:15.1:libzypp-17.15.0-3.9.1 Container suse/sle15:15.1:zypper-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libsolv-devel-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libsolv-tools-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg-devel-2.48.9-7.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg-doc-2.48.9-7.3.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg9-2.48.9-7.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-qt-pkg-doc-2.45.27-3.3.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-qt-pkg9-2.45.27-3.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzypp-17.15.0-3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzypp-devel-17.15.0-3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:yast2-pkg-bindings-4.1.2-3.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-log-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-needs-restarting-1.14.30-3.7.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-backend-zypp-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-devel-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-lang-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpackagekit-glib2-18-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpackagekit-glib2-devel-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libyui-qt-pkg-devel-2.45.27-3.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-PackageKitGlib-1_0-1.1.10-12.3.5 SUSE Linux Enterprise Module for Development Tools 15 SP1:perl-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Development Tools 15 SP1:ruby-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Package Hub 15 SP1:python-solv-0.7.6-3.7.2 SUSE Linux Enterprise Workstation Extension 15 SP1:PackageKit-gstreamer-plugin-1.1.10-12.3.5 SUSE Linux Enterprise Workstation Extension 15 SP1:PackageKit-gtk3-module-1.1.10-12.3.5 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement//suse-ru-20192742-1/ https://www.suse.com/security/cve/CVE-2018-20533.html CVE-2018-20533 https://bugzilla.suse.com/1120630 SUSE Bug 1120630 There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application CVE-2018-20534 Container caasp/v4/389-ds:1.4.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/389-ds:1.4.2:libzypp-17.15.0-3.9.1 Container caasp/v4/389-ds:1.4.2:zypper-1.14.30-3.7.2 Container caasp/v4/busybox:1.34.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/busybox:1.34.1:libzypp-17.15.0-3.9.1 Container caasp/v4/busybox:1.34.1:zypper-1.14.30-3.7.2 Container caasp/v4/caasp-dex:2.16.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/caasp-dex:2.16.0:libzypp-17.15.0-3.9.1 Container caasp/v4/caasp-dex:2.16.0:zypper-1.14.30-3.7.2 Container caasp/v4/cert-exporter:2.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cert-exporter:2.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/cert-exporter:2.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-etcd-operator:2.0.5:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-etcd-operator:2.0.5:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-etcd-operator:2.0.5:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-init:1.5.3:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-init:1.5.3:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-init:1.5.3:zypper-1.14.30-3.7.2 Container caasp/v4/cilium-operator:1.6.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium-operator:1.6.6:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium-operator:1.6.6:zypper-1.14.30-3.7.2 Container caasp/v4/cilium:1.6.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cilium:1.6.6:libzypp-17.15.0-3.9.1 Container caasp/v4/cilium:1.6.6:zypper-1.14.30-3.7.2 Container caasp/v4/cloud-provider-openstack:1.15.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/cloud-provider-openstack:1.15.0:libzypp-17.15.0-3.9.1 Container caasp/v4/cloud-provider-openstack:1.15.0:zypper-1.14.30-3.7.2 Container caasp/v4/configmap-reload:0.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/configmap-reload:0.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/configmap-reload:0.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/coredns:1.6.7:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/coredns:1.6.7:libzypp-17.15.0-3.9.1 Container caasp/v4/coredns:1.6.7:zypper-1.14.30-3.7.2 Container caasp/v4/curl:7.60.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/curl:7.60.0:libzypp-17.15.0-3.9.1 Container caasp/v4/curl:7.60.0:zypper-1.14.30-3.7.2 Container caasp/v4/etcd:3.4.13:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/etcd:3.4.13:libzypp-17.15.0-3.9.1 Container caasp/v4/etcd:3.4.13:zypper-1.14.30-3.7.2 Container caasp/v4/gangway:3.1.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/gangway:3.1.0:libzypp-17.15.0-3.9.1 Container caasp/v4/gangway:3.1.0:zypper-1.14.30-3.7.2 Container caasp/v4/grafana:7.5.12:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/grafana:7.5.12:libzypp-17.15.0-3.9.1 Container caasp/v4/grafana:7.5.12:zypper-1.14.30-3.7.2 Container caasp/v4/helm-tiller:2.16.12:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/helm-tiller:2.16.12:libzypp-17.15.0-3.9.1 Container caasp/v4/helm-tiller:2.16.12:zypper-1.14.30-3.7.2 Container caasp/v4/hyperkube:v1.17.17:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/hyperkube:v1.17.17:libzypp-17.15.0-3.9.1 Container caasp/v4/hyperkube:v1.17.17:zypper-1.14.30-3.7.2 Container caasp/v4/k8s-sidecar:0.1.75:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/k8s-sidecar:0.1.75:libzypp-17.15.0-3.9.1 Container caasp/v4/k8s-sidecar:0.1.75:zypper-1.14.30-3.7.2 Container caasp/v4/kube-state-metrics:1.9.3:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kube-state-metrics:1.9.3:libzypp-17.15.0-3.9.1 Container caasp/v4/kube-state-metrics:1.9.3:zypper-1.14.30-3.7.2 Container caasp/v4/kubernetes-client:1.17.17:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kubernetes-client:1.17.17:libzypp-17.15.0-3.9.1 Container caasp/v4/kubernetes-client:1.17.17:zypper-1.14.30-3.7.2 Container caasp/v4/kucero:1.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kucero:1.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/kucero:1.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/kured:1.3.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/kured:1.3.0:libzypp-17.15.0-3.9.1 Container caasp/v4/kured:1.3.0:zypper-1.14.30-3.7.2 Container caasp/v4/metrics-server:0.3.6:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/metrics-server:0.3.6:libzypp-17.15.0-3.9.1 Container caasp/v4/metrics-server:0.3.6:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-alertmanager:0.16.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-alertmanager:0.16.2:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-alertmanager:0.16.2:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-node-exporter:1.1.2:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-node-exporter:1.1.2:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-node-exporter:1.1.2:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-pushgateway:0.6.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-pushgateway:0.6.0:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-pushgateway:0.6.0:zypper-1.14.30-3.7.2 Container caasp/v4/prometheus-server:2.7.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/prometheus-server:2.7.1:libzypp-17.15.0-3.9.1 Container caasp/v4/prometheus-server:2.7.1:zypper-1.14.30-3.7.2 Container caasp/v4/rsyslog:8.39.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/rsyslog:8.39.0:libzypp-17.15.0-3.9.1 Container caasp/v4/rsyslog:8.39.0:zypper-1.14.30-3.7.2 Container caasp/v4/skuba-tooling:0.1.0:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/skuba-tooling:0.1.0:libzypp-17.15.0-3.9.1 Container caasp/v4/skuba-tooling:0.1.0:zypper-1.14.30-3.7.2 Container caasp/v4/test-update:beta:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/test-update:beta:libzypp-17.15.0-3.9.1 Container caasp/v4/test-update:beta:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-aws:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero-restic-restore-helper:1.3.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:zypper-1.14.30-3.7.2 Container caasp/v4/velero:1.3.1:libsolv-tools-0.7.6-3.7.2 Container caasp/v4/velero:1.3.1:libzypp-17.15.0-3.9.1 Container caasp/v4/velero:1.3.1:zypper-1.14.30-3.7.2 Container ses/6/cephcsi/cephcsi:latest:libsolv-tools-0.7.6-3.7.2 Container ses/6/cephcsi/cephcsi:latest:libzypp-17.15.0-3.9.1 Container ses/6/cephcsi/cephcsi:latest:zypper-1.14.30-3.7.2 Container ses/6/rook/ceph:latest:libsolv-tools-0.7.6-3.7.2 Container ses/6/rook/ceph:latest:libzypp-17.15.0-3.9.1 Container ses/6/rook/ceph:latest:zypper-1.14.30-3.7.2 Container suse/sle15:15.1:libsolv-tools-0.7.6-3.7.2 Container suse/sle15:15.1:libzypp-17.15.0-3.9.1 Container suse/sle15:15.1:zypper-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libsolv-devel-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libsolv-tools-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg-devel-2.48.9-7.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg-doc-2.48.9-7.3.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-ncurses-pkg9-2.48.9-7.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-qt-pkg-doc-2.45.27-3.3.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:libyui-qt-pkg9-2.45.27-3.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzypp-17.15.0-3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libzypp-devel-17.15.0-3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:yast2-pkg-bindings-4.1.2-3.3.5 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-log-1.14.30-3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:zypper-needs-restarting-1.14.30-3.7.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-backend-zypp-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-devel-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:PackageKit-lang-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpackagekit-glib2-18-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpackagekit-glib2-devel-1.1.10-12.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libyui-qt-pkg-devel-2.45.27-3.3.5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-PackageKitGlib-1_0-1.1.10-12.3.5 SUSE Linux Enterprise Module for Development Tools 15 SP1:perl-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Development Tools 15 SP1:ruby-solv-0.7.6-3.7.2 SUSE Linux Enterprise Module for Package Hub 15 SP1:python-solv-0.7.6-3.7.2 SUSE Linux Enterprise Workstation Extension 15 SP1:PackageKit-gstreamer-plugin-1.1.10-12.3.5 SUSE Linux Enterprise Workstation Extension 15 SP1:PackageKit-gtk3-module-1.1.10-12.3.5 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement//suse-ru-20192742-1/ https://www.suse.com/security/cve/CVE-2018-20534.html CVE-2018-20534 https://bugzilla.suse.com/1120631 SUSE Bug 1120631