Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

openSUSE Leap Micro 5.2: 2022:1157-1 Important: Zypper Security Fix

opensuse
Calendar Grey September 1, 2022
Dist Opensuse Esm H88
Recent updates to libsolv, libzypp, and zypper fix critical vulnerabilities and enhance installation processes, ensuring better user protection and streamlined management
An update that contains security fixes can now be installed

Description

This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv update to 0.7.22:

- reworked choice rule generation to cover more usecases

- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)

- support parsing of Debian's Multi-Arch indicator

- fix segfault on conflict resolution when using bindings

- fix split provides not working if the update includes a forbidden vendor

change

- support strict repository priorities new solver flag:

SOLVER_FLAG_STRICT_REPO_PRIORITY

- support zstd compressed control files in debian packages

- add an ifdef allowing to rename Solvable dependency members ("requires"

is a keyword in C++20)

- support setting/reading userdata in solv files new functions:

repowriter_set_userdata, solv_read_userdata

- support queying of the custom vendor check function new function:

...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap Micro 5.2:

zypper in -t patch openSUSE-Leap-Micro-5.2-2022-1157=1

Package List

- openSUSE Leap Micro 5.2 (aarch64 x86_64):

libsolv-debuginfo-0.7.22-150200.12.1

libsolv-debugsource-0.7.22-150200.12.1

libsolv-tools-0.7.22-150200.12.1

libsolv-tools-debuginfo-0.7.22-150200.12.1

libzypp-17.30.0-150200.36.1

libzypp-debuginfo-17.30.0-150200.36.1

libzypp-debugsource-17.30.0-150200.36.1

zypper-1.14.52-150200.30.2

zypper-debuginfo-1.14.52-150200.30.2

zypper-debugsource-1.14.52-150200.30.2

- openSUSE Leap Micro 5.2 (noarch):

zypper-needs-restarting-1.14.52-150200.30.2

References

https://bugzilla.suse.com/1184501

https://bugzilla.suse.com/1194848

https://bugzilla.suse.com/1195999

https://bugzilla.suse.com/1196061

https://bugzilla.suse.com/1196317

https://bugzilla.suse.com/1196368

https://bugzilla.suse.com/1196514

https://bugzilla.suse.com/1196925

https://bugzilla.suse.com/1197134

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2022:1157-1
Rating: important
Affected Products: openSUSE Leap Micro 5.2 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here