Summary
This update for libzypp, zypper, PackageKit fixes the following issues:
- Fixup New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
- CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544)
- Add resolver option 'removeOrphaned' for distupgrade (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
- Add default stripe minimum
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config
- version 17.32.0
- ProblemSolution::skipsPatchesOnly overload to handout the patches
- Show active dry-run/download-only at the commit propmpt
- Add --skip-not-applicable-patches option
- Fix printing detailed solver problem description
- Fix bash-completion to work with right adjusted numbers in the 1st column too
- Set libzypp shutdown request signal on Ctrl+C
- In the detailed view show all baseurls not just the first one (bsc#1218171)
Fixed packages 95
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 7.1 | libyui | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libyui-ncurses | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libyui-ncurses-pkg | 4.1.5-150300.3.10.19 |
| SUSE · Enterprise Storage 7.1 | libyui-ncurses-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libyui-qt | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libyui-qt-graph | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libyui-qt-pkg | 4.1.5-150300.3.10.17 |
| SUSE · Enterprise Storage 7.1 | libyui-qt-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libyui-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · Enterprise Storage 7.1 | libzypp | 17.32.2-150200.92.3 |
| SUSE · Enterprise Storage 7.1 | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · Enterprise Storage 7.1 | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · Enterprise Storage 7.1 | yast2-pkg-bindings | 4.3.13-150300.3.8.21 |
| SUSE · Enterprise Storage 7.1 | zypper | 1.14.69-150200.73.7 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | libyui | 3.9.3-150200.3.2.6 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | libyui-ncurses-pkg | 2.50.8-150200.3.5.5 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | libyui-qt-pkg | 2.47.5-150200.3.4.4 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | libyui-rest-api | 0.3.0-150200.3.2.2 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | yast2-pkg-bindings | 4.2.17-150200.3.24.6 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | zypper | 1.14.69-150200.73.7 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-ncurses | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-ncurses-pkg | 4.1.5-150300.3.10.19 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-ncurses-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-qt | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-qt-graph | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-qt-pkg | 4.1.5-150300.3.10.17 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-qt-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libyui-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | yast2-pkg-bindings | 4.3.13-150300.3.8.21 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | zypper | 1.14.69-150200.73.7 |
| SUSE · Linux Enterprise Installer Updates 15 SP2 | libyui-ncurses-pkg | 2.50.8-150200.3.5.5 |
| SUSE · Linux Enterprise Installer Updates 15 SP2 | libyui-qt-pkg | 2.47.5-150200.3.4.4 |
| SUSE · Linux Enterprise Installer Updates 15 SP2 | libzypp | 17.32.2-150200.92.3 |
| SUSE · Linux Enterprise Installer Updates 15 SP2 | yast2-pkg-bindings | 4.2.17-150200.3.24.6 |
| SUSE · Linux Enterprise Installer Updates 15 SP3 | libyui-ncurses-pkg | 4.1.5-150300.3.10.19 |
| SUSE · Linux Enterprise Installer Updates 15 SP3 | libyui-qt-pkg | 4.1.5-150300.3.10.17 |
| SUSE · Linux Enterprise Installer Updates 15 SP3 | libzypp | 17.32.2-150200.92.3 |
| SUSE · Linux Enterprise Installer Updates 15 SP3 | yast2-pkg-bindings | 4.3.13-150300.3.8.21 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | zypper | 1.14.69-150200.73.7 |
| SUSE · SLE Micro 5.2 Linux Enterprise Micro 5.2 | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLE Micro 5.2 Linux Enterprise Micro 5.2 | zypper | 1.14.69-150200.73.7 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | libyui | 3.9.3-150200.3.2.6 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | libyui-ncurses-pkg | 2.50.8-150200.3.5.5 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | libyui-qt-pkg | 2.47.5-150200.3.4.4 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | libyui-rest-api | 0.3.0-150200.3.2.2 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | yast2-pkg-bindings | 4.2.17-150200.3.24.6 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | zypper | 1.14.69-150200.73.7 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-ncurses | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-ncurses-pkg | 4.1.5-150300.3.10.19 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-ncurses-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-qt | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-qt-graph | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-qt-pkg | 4.1.5-150300.3.10.17 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-qt-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libyui-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | yast2-pkg-bindings | 4.3.13-150300.3.8.21 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | zypper | 1.14.69-150200.73.7 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | libyui | 3.9.3-150200.3.2.6 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | libyui-ncurses-pkg | 2.50.8-150200.3.5.5 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | libyui-qt-pkg | 2.47.5-150200.3.4.4 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | libyui-rest-api | 0.3.0-150200.3.2.2 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | yast2-pkg-bindings | 4.2.17-150200.3.24.6 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | zypper | 1.14.69-150200.73.7 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-ncurses | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-ncurses-pkg | 4.1.5-150300.3.10.19 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-ncurses-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-qt | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-qt-graph | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-qt-pkg | 4.1.5-150300.3.10.17 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-qt-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libyui-rest-api | 4.1.5-150300.3.10.5 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | libzypp | 17.32.2-150200.92.3 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | PackageKit | 1.1.13-150200.4.30.4 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | PackageKit-branding-SLE | 12.0-150200.9.2.2 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | yast2-pkg-bindings | 4.3.13-150300.3.8.21 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | zypper | 1.14.69-150200.73.7 |
Vulnerabilities 1
-
Low 3.3
Packagekitd: use-after-free in idle function callback
A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can b…