Описание
Security update for libsolv
This update for libsolv fixes the following issues:
This is a reissue of an existing libsolv update that also included libsolv-devel for LTSS products.
libsolv was updated to version 0.6.36 fixes the following issues:
Security issues fixed:
- CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629).
- CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630).
- CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631).
Non-security issues fixed:
- Made cleandeps jobs on patterns work (bsc#1137977).
- Fixed an issue multiversion packages that obsolete their own name (bsc#1127155).
- Keep consistent package name if there are multiple alternatives (bsc#1131823).
Список пакетов
Container caasp/v4/nginx-ingress-controller:beta1
libsolv-tools-0.6.36-2.30.1
Container suse/ltss/sle12.5/sles12sp5:latest
libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp3:latest
libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp4:latest
libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp5:latest
libsolv-tools-0.6.36-2.30.1
HPE Helion OpenStack 8
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-Azure-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-EC2-HVM-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-GCE-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-OCI-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-Azure
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-Azure-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-EC2-HVM
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-GCE
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-GCE-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP4-SAP-OCI-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-Basic-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-HPC-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-HPC-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-SAP-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-SAP-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-Azure-Standard-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-EC2-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-EC2-ECS-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-EC2-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-EC2-SAP-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-EC2-SAP-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-GCE-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-GCE-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-GCE-SAP-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-GCE-SAP-On-Demand
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-OCI-BYOS-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libsolv-tools-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Enterprise Storage 5
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server 12 SP3-BCL
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server 12 SP5
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libsolv-devel-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
SUSE OpenStack Cloud 8
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE OpenStack Cloud 9
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE OpenStack Cloud Crowbar 8
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
SUSE OpenStack Cloud Crowbar 9
libsolv-devel-0.6.36-2.30.1
libsolv-tools-0.6.36-2.30.1
perl-solv-0.6.36-2.30.1
python-solv-0.6.36-2.30.1
Ссылки
- Link for SUSE-SU-2020:2660-1
- E-Mail link for SUSE-SU-2020:2660-1
- SUSE Security Ratings
- SUSE Bug 1120629
- SUSE Bug 1120630
- SUSE Bug 1120631
- SUSE Bug 1127155
- SUSE Bug 1131823
- SUSE Bug 1137977
- SUSE CVE CVE-2018-20532 page
- SUSE CVE CVE-2018-20533 page
- SUSE CVE CVE-2018-20534 page
Описание
There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libsolv-tools-0.6.36-2.30.1
Container suse/ltss/sle12.5/sles12sp5:latest:libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp3:latest:libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp4:latest:libsolv-tools-0.6.36-2.30.1
Ссылки
- CVE-2018-20532
- SUSE Bug 1120629
Описание
There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libsolv-tools-0.6.36-2.30.1
Container suse/ltss/sle12.5/sles12sp5:latest:libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp3:latest:libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp4:latest:libsolv-tools-0.6.36-2.30.1
Ссылки
- CVE-2018-20533
- SUSE Bug 1120630
Описание
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libsolv-tools-0.6.36-2.30.1
Container suse/ltss/sle12.5/sles12sp5:latest:libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp3:latest:libsolv-tools-0.6.36-2.30.1
Container suse/sles12sp4:latest:libsolv-tools-0.6.36-2.30.1
Ссылки
- CVE-2018-20534
- SUSE Bug 1120631