Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 443
Alerts This Week
Warning Icon 1 443

SUSE: 2017:2344-1 Important: libzypp And zypper Security Update

suse
Calendar Grey September 4, 2017
Dist Suse Esm H88
SUSE Security Patch for zypper and libzypp addressing critical vulnerabilities and improvements is now released. Ensure your systems remain secured!
An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now...

Summary

The Software Update Stack was updated to receive fixes and enhancements. libzypp: - Adapt to work with GnuPG 2.1.23. (bsc#1054088) - Support signing with subkeys. (bsc#1008325) - Enhance sort order for media.1/products. (bsc#1054671) zypper: - Also show a gpg key's subkeys. (bsc#1008325) - Improve signature check callback messages. (bsc#1045735) - Add options to tune the GPG check settings. (bsc#1045735) - Adapt download callback to report and handle unsigned packages. (bsc#1038984, CVE-2017-7436) - Report missing/optional files as 'not found' rather than 'error'. (bsc#1047785) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3:

Topics%20covered

Topics Covered

security advisory software update important fixes SUSE zypper libzypp

References

#1008325 #1038984 #1045735 #1047785 #1054088

#1054671 #1055920

Cross- CVE-2017-7436

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2017-7436.html

https://bugzilla.suse.com/1008325

https://bugzilla.suse.com/1038984

https://bugzilla.suse.com/1045735

https://bugzilla.suse.com/1047785

https://bugzilla.suse.com/1054088

https://bugzilla.suse.com/1054671

https://bugzilla.suse.com/1055920

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2344-1
Rating: important

Topics%20covered

Topics Covered

security advisory software update important fixes SUSE zypper libzypp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.