{"affected":[{"ecosystem_specific":{"binaries":[{"libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","name":"libsolv","purl":"pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","name":"libzypp","purl":"pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","name":"yast2-installation","purl":"pkg:rpm/suse/yast2-installation&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","name":"zypper","purl":"pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","name":"libsolv","purl":"pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","name":"libzypp","purl":"pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","name":"yast2-installation","purl":"pkg:rpm/suse/yast2-installation&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","name":"zypper","purl":"pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","name":"libsolv","purl":"pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","name":"libzypp","purl":"pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","name":"yast2-installation","purl":"pkg:rpm/suse/yast2-installation&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","name":"zypper","purl":"pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","name":"libsolv","purl":"pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","name":"libzypp","purl":"pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","name":"yast2-installation","purl":"pkg:rpm/suse/yast2-installation&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","name":"zypper","purl":"pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","name":"libsolv","purl":"pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","name":"libzypp","purl":"pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","name":"yast2-installation","purl":"pkg:rpm/suse/yast2-installation&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsolv-devel":"0.7.17-3.40.1","libsolv-tools":"0.7.17-3.40.1","libzypp":"17.25.8-3.66.1","libzypp-devel":"17.25.8-3.66.1","perl-solv":"0.7.17-3.40.1","python-solv":"0.7.17-3.40.1","python3-solv":"0.7.17-3.40.1","ruby-solv":"0.7.17-3.40.1","yast2-installation":"4.0.77-3.22.5","zypper":"1.14.43-3.49.1","zypper-log":"1.14.43-3.49.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","name":"zypper","purl":"pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues:\n\nUpdate zypper to version 1.14.43:\n\n- doc: give more details about creating versioned package locks\n  (bsc#1181622)\n- man: Document synonymously used patch categories (bsc#1179847)\n- Fix source-download commnds help (bsc#1180663)\n- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)\n- Extend apt packagemap (fixes #366)\n- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)\n- Prefer /run over /var/run.\n\nUpdate libzypp to 17.25.8:\n\n- Try to provide a mounted /proc in --root installs (bsc#1181328)\n  Some systemd tools require /proc to be mounted and fail if it's\n  not there.\n- Enable release packages to request a releaxed suse/opensuse\n  vendorcheck in dup when migrating. (bsc#1182629)\n- Patch: Identify well-known category names (bsc#1179847)\n  This allows to use the RH and SUSE patch categrory names\n  synonymously:\n  (recommended = bugfix) and (optional = feature = enhancement).\n- Fix %posttrans script execution (fixes #265)\n  The scripts are execuable. No need to call them through 'sh -c'.\n- Commit: Fix rpmdb compat symlink in case rpm got removed.\n- Repo: Allow multiple baseurls specified on one line (fixes #285)\n- Regex: Fix memory leak and undefined behavior.\n- Add rpm buildrequires for test suite (fixes #279)\n- Use rpmdb2solv new -D switch to tell the location ob the\n  rpmdatabase to use.\n- BuildRequires:  libsolv-devel >= 0.7.17.\n- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)\n- RepoManager: Force refresh if repo url has changed (bsc#1174016)\n- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)\n- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).\n- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat\n  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)\n- Fixed update of gpg keys with elongated expire date (bsc#1179222)\n- needreboot: remove udev from the list (bsc#1179083)\n- Fix lsof monitoring (bsc#1179909)\n- Rephrase solver problem descriptions (jsc#SLE-8482)\n- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)\n- Multicurl backend breaks with with unknown filesize (fixes #277)\n\nUpdate yast2-installation to 4.0.77:\n\n- Do not cleanup the libzypp cache when the system has low memory,\n  incomplete cache confuses libzypp later (bsc#1179415)\n\nUpdate libsolv to 0.7.17:\n\n- repo_write: fix handling of nested flexarray\n- improve choicerule generation a bit more to cover more cases\n- harden testcase parser against repos being added too late\n- support python-3.10\n- check %_dbpath macro in rpmdb code\n- handle default/visible/langonly attributes in comps parser\n- support multiple collections in updateinfo parser\n- add '-D' option in rpmdb2solv to set the dbpath\n\n","id":"SUSE-SU-2021:0770-1","modified":"2021-03-11T19:24:20Z","published":"2021-03-11T19:24:20Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210770-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1050625"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174016"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177238"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177275"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177427"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177583"},{"type":"REPORT","url":"https://bugzilla.suse.com/1178910"},{"type":"REPORT","url":"https://bugzilla.suse.com/1178966"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179083"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179222"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179415"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179847"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179909"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181328"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181622"},{"type":"REPORT","url":"https://bugzilla.suse.com/1182629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-9271"}],"related":["CVE-2017-9271"],"summary":"Security update for libsolv, libzypp, yast2-installation, zypper","upstream":["CVE-2017-9271"]}