Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2021:21-1 Moderate: Fix for Information Leak in Libzypp Security

suse
Calendar Grey January 14, 2021
Dist Suse Esm H88
The image ubuntu/focal has received crucial security updates. Information on the addressed vulnerabilities is available.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2021:109-1 Released: Wed Jan 13 10:13:24 2021 Summary: Security update for libzypp, zypper Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue information leak patch security patch suse libzypp

References

References : 1050625 1174016 1177238 1177275 1177427 1177583 1178910 1178966

1179083 1179222 1179415 1179909 CVE-2017-9271

1050625,1174016,1177238,1177275,1177427,1177583,1178910,1178966,1179083,1179222,1179415,1179909,CVE-2017-9271

This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.41

Update libzypp to 17.25.4

- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)

- RepoManager: Force refresh if repo url has changed (bsc#1174016)

- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)

- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).

- RpmDb: If no database exists use the _dbpath configured in rpm. Still makes sure a compat

Container Advisory ID : SUSE-CU-2021:21-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.8.2.822
Container Release : 8.2.822
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security issue information leak patch security patch suse libzypp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here