SUSE-SU-2021:2145-1

Описание

This update for libsolv fixes the following issues:

Security issues fixed:

• CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id (bsc#1161510)
• CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late (bsc#1186229)

Other issues fixed:

• backport support for blacklisted packages to support ptf packages and retracted patches
• fix ruleinfo of complex dependencies returning the wrong origin
• fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
• fix add_complex_recommends() selecting conflicted packages in rare cases
• fix potential segfault in resolve_jobrules
• fix solv_zchunk decoding error if large chunks are used