SUSE-RU-2024:0043-1: Recommended update for libsolv, zypper, libzypp
This update for libsolv, zypper, libzypp fixes the following issues: Expand RepoVars in URLs downloading a .repo file (bsc#1212160) Fix search/info commands ignoring --ignore-unknown (bsc#1217593) CheckAccessDeleted: fix 'running in container' filter (bsc#1218291) Open rpmdb just once during execution of %posttrans scripts (bsc#1216412) Make sure reboot-needed is remembered until next boot (bsc#1217873) Stop using boost version 1 timer library (bsc#1215294) Updated to version 0.7.27 Add zstd support for the installcheck tool Add putinowndirpool cache to make file list handling in repowrite much faster Do not use deprecated headerUnload with newer rpm versions Support complex deps in SOLVABLEPREREQIGNOREINST Fix minimization not prefering installed packages in some cases Reduce memory usage in repoupdateinfoxml Fix lock-step interfering with architecture selection Fix choice rule handing for package downgrades Fix complex dependencies with an "else" part sometimes leading to unsolved dependencies
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libsolv-toolsto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/libzyppto a version that resolves this vulnerability.Fixed in 17.31.27-150200.84.1 - Upgrade
Upgrade
suse/libsolv-debugsourceto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/libzypp-debuginfoto a version that resolves this vulnerability.Fixed in 17.31.27-150200.84.1 - Upgrade
Upgrade
suse/libzypp-debugsourceto a version that resolves this vulnerability.Fixed in 17.31.27-150200.84.1 - Upgrade
Upgrade
suse/libsolv-devel-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/libsolv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/ruby-solvto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/zypperto a version that resolves this vulnerability.Fixed in 1.14.68-150200.70.2 - Upgrade
Upgrade
suse/zypper-debuginfoto a version that resolves this vulnerability.Fixed in 1.14.68-150200.70.2 - Upgrade
Upgrade
suse/libsolv-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/libsolv-develto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/perl-solvto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/zypper-debugsourceto a version that resolves this vulnerability.Fixed in 1.14.68-150200.70.2 - Upgrade
Upgrade
suse/python3-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/ruby-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/perl-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/libzypp-develto a version that resolves this vulnerability.Fixed in 17.31.27-150200.84.1 - Upgrade
Upgrade
suse/python3-solvto a version that resolves this vulnerability.Fixed in 0.7.27-150200.23.2 - Upgrade
Upgrade
suse/zypper-logto a version that resolves this vulnerability.Fixed in 1.14.68-150200.70.2 - Upgrade
Upgrade
suse/zypper-needs-restartingto a version that resolves this vulnerability.Fixed in 1.14.68-150200.70.2 - Upgrade
Upgrade
libsolv, zypper, libzyppto a version that resolves this vulnerability.Fixed in 0.7.27 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP2-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP3-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2024-43 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-43
Event History
Frequently Asked Questions
Which systems are most likely to benefit from this update?
Systems using SUSE libsolv, libzypp, zypper, or zypper-needs-restarting are in scope. The listed fixes affect repository URL handling, package search and dependency resolution, rpm database access during post-transaction scripts, and reboot-needed tracking.
Are there signs that package-management behavior may be affected before applying the update?
Potential indicators include search or info commands not honoring --ignore-unknown, unresolved dependencies involving complex dependencies with an "else" clause, incorrect architecture selection, or reboot-needed state not persisting until the next boot. Repository file downloads that require RepoVar expansion in URLs may also be affected.
Does the update include changes beyond the individually listed fixes?
Yes. It updates libsolv to version 0.7.27 and adds zstd support to the installcheck tool, performance improvements for repository file-list handling, and reduced memory usage in repo_updateinfoxml.