SUSE-RU-2024:0475-1: Recommended update for libsolv

Q: Which installed components are covered by this update?

The update covers libzypp, libsolv-tools, and associated development, debug, debuginfo, and debugsource packages listed in the advisory.

Q: What operational issues does the update address?

It creates a missing target directory in applydeltaprm, fixes EINTR handling in ExternalDataSource::getline, corrects container detection in CheckAccessDeleted, and detects CURLOPT_REDIR_PROTOCOLS_STR availability at runtime.

Q: Does the advisory identify a specific exploit scenario or required attacker access?

No. The provided advisory information describes reliability and compatibility fixes but does not specify an attacker model, exploit prerequisites, or affected default configuration.

Published Feb 14, 2024

Updated

This update for libsolv, libzypp fixes the following issues: build for multiple python versions [jsc#PED-6218] applydeltaprm: Create target directory if it does not exist (bsc#1219442) Fix problems with EINTR in ExternalDataSource::getline (bsc#1215698) CheckAccessDeleted: fix runningincontainer detection (bsc#1218782) Detect CURLOPTREDIRPROTOCOLSSTR availability at runtime (bsc#1218831)

Affected Software

149 affected componentsFixes available

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Enterprise Storage 7.1 (aarch64 x86_64)

Any of the following

suse/libzypp-devel<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/python3-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/python3-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/perl-solv<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/ruby-solv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-devel-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64)

Any of the following

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64)

Any of the following

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

All of the following

SUSE SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64)

Any of the following

suse/libsolv-tools<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libsolv-tools-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debuginfo<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debugsource<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp<17.31.31-150200.87.1

17.31.31-150200.87.1

suse/libsolv-debuginfo<0.7.28-150200.26.1

0.7.28-150200.26.1

suse/libzypp-debugsource<17.31.31-150200.87.1

17.31.31-150200.87.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/libzypp to a version that resolves this vulnerability.
Fixed in 17.31.31-150200.87.1
Upgrade
Upgrade suse/libsolv-tools to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libzypp-devel to a version that resolves this vulnerability.
Fixed in 17.31.31-150200.87.1
Upgrade
Upgrade suse/libsolv-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/perl-solv-debuginfo to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/python3-solv to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libzypp-debuginfo to a version that resolves this vulnerability.
Fixed in 17.31.31-150200.87.1
Upgrade
Upgrade suse/python3-solv-debuginfo to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/ruby-solv to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libsolv-debugsource to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/perl-solv to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libsolv-devel to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/ruby-solv-debuginfo to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libsolv-debuginfo to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libsolv-devel-debuginfo to a version that resolves this vulnerability.
Fixed in 0.7.28-150200.26.1
Upgrade
Upgrade suse/libzypp-debugsource to a version that resolves this vulnerability.
Fixed in 17.31.31-150200.87.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP2-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP3-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2024-475=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-475=1

Event History

Feb 14, 2024

Advisory Published

via SUSE·08:30 PM

Frequently Asked Questions

Which installed components are covered by this update?

The update covers libzypp, libsolv-tools, and associated development, debug, debuginfo, and debugsource packages listed in the advisory.

What operational issues does the update address?

It creates a missing target directory in applydeltaprm, fixes EINTR handling in ExternalDataSource::getline, corrects container detection in CheckAccessDeleted, and detects CURLOPT_REDIR_PROTOCOLS_STR availability at runtime.

Does the advisory identify a specific exploit scenario or required attacker access?

No. The provided advisory information describes reliability and compatibility fixes but does not specify an attacker model, exploit prerequisites, or affected default configuration.

SUSE-RU-2024:0475-1: Recommended update for libsolv

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installed components are covered by this update?

What operational issues does the update address?

Does the advisory identify a specific exploit scenario or required attacker access?

Company

Resources

Contact

Frequently Asked Questions

Which installed components are covered by this update?

What operational issues does the update address?

Does the advisory identify a specific exploit scenario or required attacker access?