Skip to content
OpenAdvisories
Low SUSE-RU-2015:1175-1 1 CVE

Recommended update for Package Management Stack

Published Jun 15, 2015 · Updated May 2, 2025

Summary

This update provides fixes and enhancements for the Software Update Stack.

gnome-packagekit:

- Fix title of license agreement window. (bsc#927319)

libsolv:

- Rework splitprovides handling. (bnc#921332)
- Add product:regflavor attribute. (bnc#896224)
- Fix bug in reorder_dq_for_jobrules that could lead to crashes. (bnc#899907)
- Fix bug in dislike_old_versions that could lead to a segfault. (bnc#922352)
- Add manpages for the tools.

libzypp:

- Add configuration values for gpgcheck, repo_gpgcheck and pkg_gpgcheck to zypp.conf. (FATE#314603)
- Support $releasever_major/$releasever_minor repo variables. (FATE#318354)
- Support repo variable replacement in service url.
- Support repo variable replacement in gpg url.
- Add support for SHA224/384/512.
- Don't execute scripts in /tmp or /var/tmp, as they could be mounted noexec for security reasons. (bnc#915928)
- Let $ZYPP_REPO_RELEASEVER overwrite $releasever in .repo files. (bnc#911658)
- Parse and offer productRegisterFlavor attribute. (bnc#896224)
- Improve conflict message for locked packages. (bnc#828631)
- Fix broken de-escaping in str::splitEscaped. (bnc#909772)
- Filter PIDs running in a container. (bnc#909143)
- Suppress informal license (no need to accept) upon update. (bnc#908976)
- Adapt to gpg-2.1. (bnc#908135)
- Call rpm with '--noglob'. (bnc#892431)
- Fix URL path concatenation in MediaCurl. (bnc#901590)
- Move doxygen html doc to libzypp-devel-doc. (bnc#901691)
- Support parsing multiple baseurls from a repo file. (bnc#899510)
- Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510)
- Fix handling local mirrorlist= files in .repo. (bnc#899510)
- Prevent POODLE by talking TLS only. (bnc#903405)
- Fix segmentation fault when dumping rpm header with epoch. (bnc#929483)
- Handle repository aliases containing ']' correctly. (bnc#929528)
- Avoid nested exception on user abort. (bnc#931601)
- Fix SSL client certificate authentication via URL option ssl_clientcert/ssl_clientkey. (bnc#932393)

libzypp-bindings:

- Enforce Python 2.7 libzypp-bindings is not yet ready for Python 3.
- Adapt to libzypp changes.

zypper:

- Implement and document GPG signature checking. (FATE#314603)
- Enhance 'Digest verification failed' message and dialog. (FATE#315008)
- Refresh plugin services on 'lr' 'ls -r' and 'ref'. (bnc#893294, FATE#318117)
Repositories provided by a plugin service (SUSE Manager) must always
be (auto-)refreshed to reflect server side changes immediately.
- Allow repo:package to reinstall from a different repo. (bnc#725867)
- Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510)
- A date limit must ignore newer patch candidates. (bnc#919709)
- Notify about volatile changes to service repos. (bnc#916254)
- Change column header from 'Login' to 'User'. (bnc#915461)
- Fix wrong exit status using the --xmlout option. (bnc#914258)
- Add new color/pkglistHighlightAttribute to zypper.conf. (bnc#914284)
- New global option --releasever: Set the value of the $releasever variable in all .repo files.
This can be used to switch to new distribution repositories when performing a distribution upgrade. (bnc#911658)
- Clarify legacy warning. (bnc#911335)
- Show new product:registerflavor attribute in 'zypper info'. (bnc#896224)
- Enhance message text when skipping repos due to an error. (bnc#909244)
- Fix additional spaces in zypper output and new colorization code. (bnc#908345)
- Properly reset auto-retry counter. (bnc#906549)
- Improve patch description in man page. (bnc#904737)
- Warn about repositories with 'gpgcheck=0'. (bnc#848054)
- Summary: quote names including spaces. (bnc#903675)
- Warn if legacy CLI options are used. (bnc#899781)
- Fix prompt returning undefined default value after wrong input. (bnc#925696)
- Fix typo in man page. (bnc#923800)
- Only use ANSI color codes on terminals. (bnc#925678)
- Fix table sorting with option --sort-by-priority. (bnc#832519)
- Clarify 'zypper lp --date' description. (bnc#929593)
- Warn user that deleting a service repository is a volatile change. (bnc#929990)
- Adapt Enterprise product detection, fixing display of package's support status. (bnc#933277)
- Fix format of sizes in output. (bnc#897301)
- Clarify comment in zypper.conf. (bnc#820693)

Fixed packages 34

ReleasePackageFixed in
SUSE · SLES 12 Linux Enterprise Desktop 12 gnome-packagekit 3.10.1-8.13
SUSE · SLES 12 Linux Enterprise Desktop 12 libsolv 0.6.11-8.1
SUSE · SLES 12 Linux Enterprise Desktop 12 libyui-ncurses-pkg 2.46.1-3.4
SUSE · SLES 12 Linux Enterprise Desktop 12 libyui-qt-pkg 2.44.7-3.2
SUSE · SLES 12 Linux Enterprise Desktop 12 libzypp 14.39.0-10.1
SUSE · SLES 12 Linux Enterprise Desktop 12 libzypp-bindings 0.6.4-5.3
SUSE · SLES 12 Linux Enterprise Desktop 12 PackageKit 0.8.16-11.15
SUSE · SLES 12 Linux Enterprise Desktop 12 yast2-pkg-bindings 3.1.20-3.3
SUSE · SLES 12 Linux Enterprise Desktop 12 zypper 1.11.32-8.1
SUSE · SLES 12 Linux Enterprise Server 12 gnome-packagekit 3.10.1-8.13
SUSE · SLES 12 Linux Enterprise Server 12 libsolv 0.6.11-8.1
SUSE · SLES 12 Linux Enterprise Server 12 libyui-ncurses-pkg 2.46.1-3.4
SUSE · SLES 12 Linux Enterprise Server 12 libyui-qt-pkg 2.44.7-3.2
SUSE · SLES 12 Linux Enterprise Server 12 libzypp 14.39.0-10.1
SUSE · SLES 12 Linux Enterprise Server 12 libzypp-bindings 0.6.4-5.3
SUSE · SLES 12 Linux Enterprise Server 12 PackageKit 0.8.16-11.15
SUSE · SLES 12 Linux Enterprise Server 12 yast2-pkg-bindings 3.1.20-3.3
SUSE · SLES 12 Linux Enterprise Server 12 zypper 1.11.32-8.1
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 gnome-packagekit 3.10.1-8.13
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 libsolv 0.6.11-8.1
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 libyui-ncurses-pkg 2.46.1-3.4
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 libyui-qt-pkg 2.44.7-3.2
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 libzypp 14.39.0-10.1
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 libzypp-bindings 0.6.4-5.3
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 PackageKit 0.8.16-11.15
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 yast2-pkg-bindings 3.1.20-3.3
SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 zypper 1.11.32-8.1
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 libsolv 0.6.11-8.1
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 libyui-ncurses-pkg 2.46.1-3.4
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 libyui-qt-pkg 2.44.7-3.2
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 libzypp 14.39.0-10.1
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 libzypp-bindings 0.6.4-5.3
SUSE · SLES 12 Linux Enterprise Software Development Kit 12 PackageKit 0.8.16-11.15
SUSE · SLES 12 Linux Enterprise Workstation Extension 12 PackageKit 0.8.16-11.15

Vulnerabilities 1

References

  • report
    https://bugzilla.suse.com/725867
  • report
    https://bugzilla.suse.com/820693
  • report
    https://bugzilla.suse.com/828631
  • report
    https://bugzilla.suse.com/832519
  • report
    https://bugzilla.suse.com/848054
  • report
    https://bugzilla.suse.com/892431
  • report
    https://bugzilla.suse.com/893294
  • report
    https://bugzilla.suse.com/896224
  • report
    https://bugzilla.suse.com/897301
  • report
    https://bugzilla.suse.com/899510
  • report
    https://bugzilla.suse.com/899603
  • report
    https://bugzilla.suse.com/899781
  • report
    https://bugzilla.suse.com/899907
  • report
    https://bugzilla.suse.com/901590
  • report
    https://bugzilla.suse.com/901691
  • report
    https://bugzilla.suse.com/903405
  • report
    https://bugzilla.suse.com/903675
  • report
    https://bugzilla.suse.com/904737
  • report
    https://bugzilla.suse.com/906549
  • report
    https://bugzilla.suse.com/908135
  • report
    https://bugzilla.suse.com/908345
  • report
    https://bugzilla.suse.com/908976
  • report
    https://bugzilla.suse.com/909143
  • report
    https://bugzilla.suse.com/909244
  • report
    https://bugzilla.suse.com/909772
  • report
    https://bugzilla.suse.com/911335
  • report
    https://bugzilla.suse.com/911658
  • report
    https://bugzilla.suse.com/914258
  • report
    https://bugzilla.suse.com/914284
  • report
    https://bugzilla.suse.com/915461
  • report
    https://bugzilla.suse.com/915928
  • report
    https://bugzilla.suse.com/916254
  • report
    https://bugzilla.suse.com/919709
  • report
    https://bugzilla.suse.com/921332
  • report
    https://bugzilla.suse.com/922352
  • report
    https://bugzilla.suse.com/923800
  • report
    https://bugzilla.suse.com/925678
  • report
    https://bugzilla.suse.com/925696
  • report
    https://bugzilla.suse.com/927319