{"id":"CVE-2017-9271","aliases":["DEBIAN-CVE-2017-9271","EUVD-2017-18207","GHSA-q4p8-c668-h326","SUSE-SU-2021:0109-1","SUSE-SU-2021:0770-1","SUSE-SU-2021:0956-1","SUSE-SU-2024:2080-1","UBUNTU-CVE-2017-9271","openSUSE-SU-2021:0059-1","openSUSE-SU-2024:11019-1"],"status":"published","title":"proxy credentials written to log files by zypper","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","severity":{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00331,"percentile":0.26399,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2018-03-01T19:00:00Z","modified":"2026-10-17T12:53:22Z","fixes":[{"ecosystem":"Debian:12","package":"libzypp","fixed_in":["17.25.5-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libzypp","fixed_in":["17.25.5-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libzypp","fixed_in":["17.25.5-2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libzypp","fixed_in":["17.25.5-3.25.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"yast2-installation","fixed_in":["4.2.48-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libzypp","fixed_in":["17.25.5-3.25.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"yast2-installation","fixed_in":["4.2.48-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"zypper","fixed_in":["1.14.41-3.14.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"libsolv","fixed_in":["0.7.17-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"libzypp","fixed_in":["17.25.8-3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"yast2-installation","fixed_in":["4.0.77-3.22.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"zypper","fixed_in":["1.14.43-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libsolv","fixed_in":["0.7.17-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libzypp","fixed_in":["17.25.8-3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"yast2-installation","fixed_in":["4.0.77-3.22.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zypper","fixed_in":["1.14.43-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libsolv","fixed_in":["0.7.17-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libzypp","fixed_in":["17.25.8-3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"yast2-installation","fixed_in":["4.0.77-3.22.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zypper","fixed_in":["1.14.43-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libsolv","fixed_in":["0.7.17-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libzypp","fixed_in":["17.25.8-3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"yast2-installation","fixed_in":["4.0.77-3.22.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zypper","fixed_in":["1.14.43-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libsolv","fixed_in":["0.7.17-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libzypp","fixed_in":["17.25.8-3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"yast2-installation","fixed_in":["4.0.77-3.22.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zypper","fixed_in":["1.14.43-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libsigc++2","fixed_in":["2.10.0-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libsolv","fixed_in":["0.7.17-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-ncurses-pkg","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-ncurses-pkg-doc","fixed_in":["2.48.9-7.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-qt-pkg","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-qt-pkg-doc","fixed_in":["2.45.28-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libzypp","fixed_in":["17.25.8-3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"yast2-pkg-bindings","fixed_in":["4.1.3-3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"zypper","fixed_in":["1.14.43-3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libzypp","fixed_in":["16.22.13-65.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libzypp","fixed_in":["16.22.13-65.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zypper","fixed_in":["1.13.66-21.61.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libzypp","fixed_in":["16.22.13-65.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zypper","fixed_in":["1.13.66-21.61.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"libzypp","fixed_in":["17.25.5-lp152.2.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"yast2-installation","fixed_in":["4.2.48-lp152.2.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"zypper","fixed_in":["1.14.41-lp152.2.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.5-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.5-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.5-2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.5-3.25.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.48-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.5-3.25.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.48-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.41-3.14.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.77-3.22.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libsigc++2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.28-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.8-3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.43-3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.22.13-65.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.22.13-65.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.66-21.61.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.22.13-65.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.66-21.61.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.4-1","1.12.4-1build0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.11-1build1","1.14.11-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.42-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.63-1","1.14.66-1","1.14.68-1","1.14.68-1build1","1.14.68-1build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.88-1","1.14.89-1","1.14.89-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.94-1","1.14.97-1","1.14.98-1","1.14.99-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.89-1build1","1.14.93-1","1.14.94-1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.25.5-lp152.2.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"yast2-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.48-lp152.2.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.41-lp152.2.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.28.4-1.2"}]}],"bundled":5}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"zypper"},{"vendor":"suse","product":"zypper"}],"references":[{"url":"https://www.suse.com/de-de/security/cve/CVE-2017-9271/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1050625","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9271"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/"},{"url":"https://github.com/advisories/GHSA-q4p8-c668-h326"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9271","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210109-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050625","tags":["report"]},{"url":"https://bugzilla.suse.com/1174016","tags":["report"]},{"url":"https://bugzilla.suse.com/1177238","tags":["report"]},{"url":"https://bugzilla.suse.com/1177275","tags":["report"]},{"url":"https://bugzilla.suse.com/1177427","tags":["report"]},{"url":"https://bugzilla.suse.com/1177583","tags":["report"]},{"url":"https://bugzilla.suse.com/1178910","tags":["report"]},{"url":"https://bugzilla.suse.com/1178966","tags":["report"]},{"url":"https://bugzilla.suse.com/1179083","tags":["report"]},{"url":"https://bugzilla.suse.com/1179222","tags":["report"]},{"url":"https://bugzilla.suse.com/1179415","tags":["report"]},{"url":"https://bugzilla.suse.com/1179909","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9271","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210770-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179847","tags":["report"]},{"url":"https://bugzilla.suse.com/1181328","tags":["report"]},{"url":"https://bugzilla.suse.com/1181622","tags":["report"]},{"url":"https://bugzilla.suse.com/1182629","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210956-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179816","tags":["report"]},{"url":"https://bugzilla.suse.com/1180077","tags":["report"]},{"url":"https://bugzilla.suse.com/1180663","tags":["report"]},{"url":"https://bugzilla.suse.com/1180721","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242080-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1223971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9271","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FB5G3FIS4OQH3FX723SLMBOC4P37HKHV/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18900","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-9271","title":"proxy credentials written to log files by zypper","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2018-03-01T19:00:00Z","modified":"2024-09-16T23:26:26.29Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18207","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2018-03-01T19:00:00Z","modified":"2024-09-16T23:26:26Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:54:50.364031Z"}],"ghsa":[{"id":"GHSA-q4p8-c668-h326","title":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile,...","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2022-05-13T01:11:38Z","modified":"2023-02-01T05:03:45Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:50:06.238998Z"}],"nvd":[{"id":"CVE-2017-9271","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2018-03-01T20:29:00.96Z","modified":"2026-06-17T01:27:47.81Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:04:15.877386Z"}],"osv":[{"id":"CVE-2017-9271","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2018-03-01T20:29:00.96Z","modified":"2026-03-15T14:25:43.960049Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-9271","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2018-03-01T20:29:00.96Z","modified":"2026-09-01T20:03:51.611234637Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-9271","description":"The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.","status":"published","published":"2018-03-01T20:29:00Z","modified":"2026-10-17T12:53:22.684337481Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"openSUSE-SU-2021:0059-1","title":"Security update for libzypp, zypper","description":"This update for libzypp, zypper fixes the following issues:\n\nUpdate zypper to version 1.14.41\n\nUpdate libzypp to 17.25.4\n\n- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)\n- RepoManager: Force refresh if repo url has changed (bsc#1174016)\n- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)\n- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).\n- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat\n  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)\n- Fixed update of gpg keys with elongated expire date (bsc#179222)\n- needreboot: remove udev from the list (bsc#1179083)\n- Fix lsof monitoring (bsc#1179909)\n\nyast-installation was updated to 4.2.48:\n\n- Do not cleanup the libzypp cache when the system has low memory,\n  incomplete cache confuses libzypp later (bsc#1179415)\n\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-01-14T16:11:48Z","modified":"2026-02-04T02:29:30.205938Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11019-1","title":"libzypp-17.28.4-1.2 on GA media","description":"These are all security issues fixed in the libzypp-17.28.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:33:01.49937Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2021:0109-1","title":"Security update for libzypp, zypper","description":"This update for libzypp, zypper fixes the following issues:\n\nUpdate zypper to version 1.14.41\n\nUpdate libzypp to 17.25.4\n\n- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)\n- RepoManager: Force refresh if repo url has changed (bsc#1174016)\n- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)\n- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).\n- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat\n  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)\n- Fixed update of gpg keys with elongated expire date (bsc#179222)\n- needreboot: remove udev from the list (bsc#1179083)\n- Fix lsof monitoring (bsc#1179909)\n\nyast-installation was updated to 4.2.48:\n\n- Do not cleanup the libzypp cache when the system has low memory,\n  incomplete cache confuses libzypp later (bsc#1179415)\n\n","status":"published","published":"2021-01-13T09:13:34Z","modified":"2026-02-04T03:25:25.71527Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0770-1","title":"Security update for libsolv, libzypp, yast2-installation, zypper","description":"This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues:\n\nUpdate zypper to version 1.14.43:\n\n- doc: give more details about creating versioned package locks\n  (bsc#1181622)\n- man: Document synonymously used patch categories (bsc#1179847)\n- Fix source-download commnds help (bsc#1180663)\n- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)\n- Extend apt packagemap (fixes #366)\n- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)\n- Prefer /run over /var/run.\n\nUpdate libzypp to 17.25.8:\n\n- Try to provide a mounted /proc in --root installs (bsc#1181328)\n  Some systemd tools require /proc to be mounted and fail if it's\n  not there.\n- Enable release packages to request a releaxed suse/opensuse\n  vendorcheck in dup when migrating. (bsc#1182629)\n- Patch: Identify well-known category names (bsc#1179847)\n  This allows to use the RH and SUSE patch categrory names\n  synonymously:\n  (recommended = bugfix) and (optional = feature = enhancement).\n- Fix %posttrans script execution (fixes #265)\n  The scripts are execuable. No need to call them through 'sh -c'.\n- Commit: Fix rpmdb compat symlink in case rpm got removed.\n- Repo: Allow multiple baseurls specified on one line (fixes #285)\n- Regex: Fix memory leak and undefined behavior.\n- Add rpm buildrequires for test suite (fixes #279)\n- Use rpmdb2solv new -D switch to tell the location ob the\n  rpmdatabase to use.\n- BuildRequires:  libsolv-devel \u003e= 0.7.17.\n- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)\n- RepoManager: Force refresh if repo url has changed (bsc#1174016)\n- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)\n- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).\n- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat\n  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)\n- Fixed update of gpg keys with elongated expire date (bsc#1179222)\n- needreboot: remove udev from the list (bsc#1179083)\n- Fix lsof monitoring (bsc#1179909)\n- Rephrase solver problem descriptions (jsc#SLE-8482)\n- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)\n- Multicurl backend breaks with with unknown filesize (fixes #277)\n\nUpdate yast2-installation to 4.0.77:\n\n- Do not cleanup the libzypp cache when the system has low memory,\n  incomplete cache confuses libzypp later (bsc#1179415)\n\nUpdate libsolv to 0.7.17:\n\n- repo_write: fix handling of nested flexarray\n- improve choicerule generation a bit more to cover more cases\n- harden testcase parser against repos being added too late\n- support python-3.10\n- check %_dbpath macro in rpmdb code\n- handle default/visible/langonly attributes in comps parser\n- support multiple collections in updateinfo parser\n- add '-D' option in rpmdb2solv to set the dbpath\n\n","status":"published","published":"2021-03-11T19:24:20Z","modified":"2026-02-04T03:44:30.60102Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0956-1","title":"Security update for libzypp, zypper","description":"This update for libzypp, zypper fixes the following issues:\n\nUpdate zypper to version 1.14.43:\n\n- doc: give more details about creating versioned package locks\n  (bsc#1181622)\n- man: Document synonymously used patch categories (bsc#1179847)\n- Fix source-download commands help (bsc#1180663)\n- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)\n- Extend apt packagemap (fixes #366)\n- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)\n- Prefer /run over /var/run.\n\nUpdate libzypp to 17.25.8:\n\n- Try to provide a mounted /proc in --root installs (bsc#1181328)\n  Some systemd tools require /proc to be mounted and fail if it's\n  not there.\n- Enable release packages to request a releaxed suse/opensuse\n  vendorcheck in dup when migrating. (bsc#1182629)\n- Patch: Identify well-known category names (bsc#1179847)\n  This allows to use the RH and SUSE patch categrory names\n  synonymously:\n  (recommended = bugfix) and (optional = feature = enhancement).\n- Add missing includes for GCC 11 compatibility.\n- Fix %posttrans script execution (fixes #265)\n  The scripts are execuable. No need to call them through 'sh -c'.\n- Commit: Fix rpmdb compat symlink in case rpm got removed.\n- Repo: Allow multiple baseurls specified on one line (fixes #285)\n- Regex: Fix memory leak and undefined behavior.\n- Add rpm buildrequires for test suite (fixes #279)\n- Use rpmdb2solv new -D switch to tell the location ob the\n  rpmdatabase to use.\n- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)\n- RepoManager: Force refresh if repo url has changed (bsc#1174016)\n- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)\n- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).\n- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat\n  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)\n- Fixed update of gpg keys with elongated expire date (bsc#1179222)\n- needreboot: remove udev from the list (bsc#1179083)\n- Fix lsof monitoring (bsc#1179909)\n- Rephrase solver problem descriptions (jsc#SLE-8482)\n- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)\n- Multicurl backend breaks with with unknown filesize (fixes #277)\n","status":"published","published":"2021-03-25T18:19:23Z","modified":"2026-02-04T02:44:40.086767Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2024:2080-1","title":"Security update for libzypp, zypper","description":"This update for libzypp, zypper fixes the following issues:\n\n- CVE-2017-9271: Fixed proxy credentials written to log files (bsc#1050625).\n\nThe following non-security bugs were fixed:\n\n- clean: Do not report an error if no repos are defined at all (bsc#1223971)\n","status":"published","published":"2024-06-19T05:04:01Z","modified":"2026-02-04T02:17:06.357969Z","updated_at":"2026-11-02T15:53:54.652421Z"}]}}