SUSE-SU-2019:2265-1

Описание

This update for libsolv, libzypp and zypper fixes the following issues:

libsolv was updated to version 0.6.36 and fixes the following issues:

Security issues fixed:

• CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629).
• CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630).
• CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631).

Non-security issues fixed:

• Made cleandeps jobs on patterns work (bsc#1137977).
• Fixed an issue multiversion packages that obsolete their own name (bsc#1127155).
• Keep consistent package name if there are multiple alternatives (bsc#1131823).

Fixes for libzypp:

• Fixes a bug where locking the kernel was not possible (bsc#1113296)
• Fixes a file descriptor leak (bsc#1116995)
• Will now run file conflict check on dry-run (best with download-only) (bsc#1140039)

Fixes for zypper:

• Fixes a bug where the wrong exit code was set when refreshing repos if --root was used (bsc#1134226)
• Improved the displaying of locks (bsc#1112911)
• Fixes an issue where https repository urls caused an error prompt to appear twice (bsc#1110542)
• zypper will now always warn when no repositories are defined (bsc#1109893)
• Fixes bash completion option detection (bsc#1049825)