SUSE: 2020:3367-1 moderate: libzypp, zypper
Summary
This update for libzypp, zypper fixes the following issues: libzypp fixes the following security issue: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763). zypper was updated to fix the following issues: - Fixed an issue, where zypper crashed when the system language is set to Spanish and the user tried to patch their system with 'zypper patch --category security' (bsc#1178038) - Fixed a typo in man page (bsc#1169947) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2020-3367=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2020-3367=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2020-3367=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2020-3367=1 Package List: - SUSE OpenStack Cloud 7 (s390x x86_64): libzypp-16.21.2-27.70.1 libzypp-debuginfo-16.21.2-27.70.1 libzypp-debugsource-16.21.2-27.70.1 libzypp-devel-16.21.2-27.70.1 zypper-1.13.57-18.46.3 zypper-debuginfo-1.13.57-18.46.3 zypper-debugsource-1.13.57-18.46.3 - SUSE OpenStack Cloud 7 (noarch): zypper-log-1.13.57-18.46.3 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): libzypp-16.21.2-27.70.1 libzypp-debuginfo-16.21.2-27.70.1 libzypp-debugsource-16.21.2-27.70.1 libzypp-devel-16.21.2-27.70.1 zypper-1.13.57-18.46.3 zypper-debuginfo-1.13.57-18.46.3 zypper-debugsource-1.13.57-18.46.3 - SUSE Linux Enterprise Server for SAP 12-SP2 (noarch): zypper-log-1.13.57-18.46.3 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): libzypp-16.21.2-27.70.1 libzypp-debuginfo-16.21.2-27.70.1 libzypp-debugsource-16.21.2-27.70.1 libzypp-devel-16.21.2-27.70.1 zypper-1.13.57-18.46.3 zypper-debuginfo-1.13.57-18.46.3 zypper-debugsource-1.13.57-18.46.3 - SUSE Linux Enterprise Server 12-SP2-LTSS (noarch): zypper-log-1.13.57-18.46.3 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): zypper-log-1.13.57-18.46.3 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libzypp-16.21.2-27.70.1 libzypp-debuginfo-16.21.2-27.70.1 libzypp-debugsource-16.21.2-27.70.1 libzypp-devel-16.21.2-27.70.1 zypper-1.13.57-18.46.3 zypper-debuginfo-1.13.57-18.46.3 zypper-debugsource-1.13.57-18.46.3
References
#1158763 #1169947 #1178038
Cross- CVE-2019-18900
Affected Products:
SUSE OpenStack Cloud 7
SUSE Linux Enterprise Server for SAP 12-SP2
SUSE Linux Enterprise Server 12-SP2-LTSS
SUSE Linux Enterprise Server 12-SP2-BCL
https://www.suse.com/security/cve/CVE-2019-18900.html
https://bugzilla.suse.com/1158763
https://bugzilla.suse.com/1169947
https://bugzilla.suse.com/1178038
![Dist Suse](/images/distros/dist-suse.gif)