SUSE-SU-2021:2180-1 -- SLES libsolv, libzypp, perl-solv, python-solvID: oval:org.secpod.oval:def:89045083 | Date: (C)2021-07-06 (M)2024-01-23 |
Class: PATCH | Family: unix |
This update for libsolv fixes the following issues: Security issues fixed: - CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id - CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late Other issues fixed: - backport support for blacklisted packages to support ptf packages and retracted patches - fix ruleinfo of complex dependencies returning the wrong origin - fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason - fix add_complex_recommends selecting conflicted packages in rare cases - fix potential segfault in resolve_jobrules - fix solv_zchunk decoding error if large chunks are used
Platform: |
SUSE Linux Enterprise Server 12 SP3 |
SUSE Linux Enterprise Server 12 SP5 |
SUSE Linux Enterprise Server 12 SP4 |
Product: |
libsolv |
libzypp |
perl-solv |
python-solv |