{"id":"CVE-2018-20533","aliases":["DEBIAN-CVE-2018-20533","EUVD-2018-13087","GHSA-92g5-g77x-q2f8","RHSA-2019:2290","SUSE-RU-2019:2742-1","SUSE-SU-2019:1972-1","SUSE-SU-2019:2030-1","SUSE-SU-2019:2265-1","SUSE-SU-2020:2660-1","UBUNTU-CVE-2018-20533","USN-4851-1","openSUSE-SU-2019:1927-1"],"status":"published","title":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in...","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02079,"percentile":0.81785,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2018-12-28T00:00:00Z","modified":"2026-10-23T18:03:56Z","fixes":[{"ecosystem":"Debian:12","package":"libsolv","fixed_in":["0.6.36-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsolv","fixed_in":["0.6.36-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libsolv","fixed_in":["0.6.36-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsolv","fixed_in":["0.6.11-1.1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsolv","fixed_in":["0.6.30-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsolv-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsolv-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsolv-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-solv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsolv-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsolv-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsolv-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-solv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsolv-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsolv-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsolv-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-solv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsolv-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsolv-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsolv-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-solv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.34-4.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.6-3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.3.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.9-7.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.27-3.3.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.27-3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.15.0-3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-3.3.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.30-3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-12.3.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.27-3.3.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.6-3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.6-3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-12.3.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.16.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.0-2.39.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.51-21.26.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.5-3.12.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5.2-3.5.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libyui-ncurses-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5.2-3.5.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.15.2-3.5.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libyui-qt-pkg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.15.2-3.5.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.12.0-3.23.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.13-3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.28-3.18.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-4.10.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.15.2-3.5.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.5-3.12.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-4.10.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.27.19.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2-27.60.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.54-18.40.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-2.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.11-1.1ubuntu0.1~esm1"}]}],"versions":["0.6.11-1","0.6.11-1build1","0.6.11-1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.30-1ubuntu0.1~esm1"}]}],"versions":["0.6.28-2build1","0.6.30-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.11-1.1ubuntu0.1~esm1"}]}],"versions":["0.6.11-1","0.6.11-1build1","0.6.11-1.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.30-1ubuntu0.1~esm1"}]}],"versions":["0.6.28-2build1","0.6.30-1build1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-lp150.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.5-lp150.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5.2-lp150.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.15.2-lp150.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.12.0-lp150.2.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.13-lp150.2.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.28-lp150.2.13.1"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"opensuse","product":"libsolv"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1652599","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/openSUSE/libsolv/pull/291","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://usn.ubuntu.com/3916-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2290","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20533","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-92g5-g77x-q2f8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-20533","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668256","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2290.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20532","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20533","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20533","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20534","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20534","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2019-2742/suse-ru-20192742-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049825","tags":["report"]},{"url":"https://bugzilla.suse.com/1116995","tags":["report"]},{"url":"https://bugzilla.suse.com/1120629","tags":["report"]},{"url":"https://bugzilla.suse.com/1120630","tags":["report"]},{"url":"https://bugzilla.suse.com/1120631","tags":["report"]},{"url":"https://bugzilla.suse.com/1127155","tags":["report"]},{"url":"https://bugzilla.suse.com/1127608","tags":["report"]},{"url":"https://bugzilla.suse.com/1130306","tags":["report"]},{"url":"https://bugzilla.suse.com/1131113","tags":["report"]},{"url":"https://bugzilla.suse.com/1131823","tags":["report"]},{"url":"https://bugzilla.suse.com/1134226","tags":["report"]},{"url":"https://bugzilla.suse.com/1135749","tags":["report"]},{"url":"https://bugzilla.suse.com/1137977","tags":["report"]},{"url":"https://bugzilla.suse.com/1139795","tags":["report"]},{"url":"https://bugzilla.suse.com/1140039","tags":["report"]},{"url":"https://bugzilla.suse.com/1145521","tags":["report"]},{"url":"https://bugzilla.suse.com/1146027","tags":["report"]},{"url":"https://bugzilla.suse.com/1146415","tags":["report"]},{"url":"https://bugzilla.suse.com/1146947","tags":["report"]},{"url":"https://bugzilla.suse.com/1153557","tags":["report"]},{"url":"https://bugzilla.suse.com/859480","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20534","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191972-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1109893","tags":["report"]},{"url":"https://bugzilla.suse.com/1110542","tags":["report"]},{"url":"https://bugzilla.suse.com/1111319","tags":["report"]},{"url":"https://bugzilla.suse.com/1112911","tags":["report"]},{"url":"https://bugzilla.suse.com/1113296","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192030-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047962","tags":["report"]},{"url":"https://bugzilla.suse.com/1049826","tags":["report"]},{"url":"https://bugzilla.suse.com/1053177","tags":["report"]},{"url":"https://bugzilla.suse.com/1065022","tags":["report"]},{"url":"https://bugzilla.suse.com/1099019","tags":["report"]},{"url":"https://bugzilla.suse.com/1102261","tags":["report"]},{"url":"https://bugzilla.suse.com/1114908","tags":["report"]},{"url":"https://bugzilla.suse.com/1115341","tags":["report"]},{"url":"https://bugzilla.suse.com/1116840","tags":["report"]},{"url":"https://bugzilla.suse.com/1118758","tags":["report"]},{"url":"https://bugzilla.suse.com/1119373","tags":["report"]},{"url":"https://bugzilla.suse.com/1119820","tags":["report"]},{"url":"https://bugzilla.suse.com/1119873","tags":["report"]},{"url":"https://bugzilla.suse.com/1120263","tags":["report"]},{"url":"https://bugzilla.suse.com/1120463","tags":["report"]},{"url":"https://bugzilla.suse.com/1121611","tags":["report"]},{"url":"https://bugzilla.suse.com/1122062","tags":["report"]},{"url":"https://bugzilla.suse.com/1122471","tags":["report"]},{"url":"https://bugzilla.suse.com/1123137","tags":["report"]},{"url":"https://bugzilla.suse.com/1123681","tags":["report"]},{"url":"https://bugzilla.suse.com/1123843","tags":["report"]},{"url":"https://bugzilla.suse.com/1123865","tags":["report"]},{"url":"https://bugzilla.suse.com/1123967","tags":["report"]},{"url":"https://bugzilla.suse.com/1124897","tags":["report"]},{"url":"https://bugzilla.suse.com/1125415","tags":["report"]},{"url":"https://bugzilla.suse.com/1127026","tags":["report"]},{"url":"https://bugzilla.suse.com/1127220","tags":["report"]},{"url":"https://bugzilla.suse.com/1130161","tags":["report"]},{"url":"https://bugzilla.suse.com/663358","tags":["report"]},{"url":"https://bugzilla.suse.com/764147","tags":["report"]},{"url":"https://bugzilla.suse.com/965786","tags":["report"]},{"url":"https://bugzilla.suse.com/978193","tags":["report"]},{"url":"https://bugzilla.suse.com/993025","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202660-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-20533","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3916-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4851-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-20532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20534","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WVIOCGRDOEPR6QZDWDWT4JR4KMYHLNX5/#WVIOCGRDOEPR6QZDWDWT4JR4KMYHLNX5","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-20533","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2018-12-28T03:00:00Z","modified":"2024-08-05T12:05:17.151Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-13087","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2018-12-28T03:00:00Z","modified":"2024-08-05T12:05:17Z","updated_at":"2026-11-03T02:39:30.323824Z"}],"ghsa":[{"id":"GHSA-92g5-g77x-q2f8","title":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in...","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2022-05-14T00:54:21Z","modified":"2023-02-02T05:02:34Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:51:28.259401Z"}],"nvd":[{"id":"CVE-2018-20533","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2018-12-28T16:29:04.283Z","modified":"2026-06-17T01:53:01.727Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:52.056758Z"}],"osv":[{"id":"CVE-2018-20533","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2018-12-28T16:29:04.283Z","modified":"2026-10-20T10:50:24.851325691Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:09.145458Z"},{"id":"DEBIAN-CVE-2018-20533","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2018-12-28T16:29:04.283Z","modified":"2026-10-23T18:03:56.538996165Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHSA-2019:2290","title":"Red Hat Security Advisory: libsolv security and bug fix update","status":"published","published":"2024-09-16T02:19:35Z","modified":"2026-06-27T10:07:54Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-20533","description":"There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.","status":"published","published":"2018-12-28T00:00:00Z","modified":"2026-04-22T11:53:06.639163Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"openSUSE-SU-2019:1927-1","title":"Security update for zypper, libzypp and libsolv","description":"This update for libzypp and libsolv fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c (function testcase_read) (bsc#1120629).\n- CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a (bsc#1120630).\n- CVE-2018-20534: Fixed illegal address access at src/pool.h (function pool_whatprovides) in libsolv.a (bsc#1120631).\n\nFixed bugs and enhancements:\n\n- make cleandeps jobs on patterns work (bnc#1137977)\n- Fixed an issue where libsolv failed to build against swig 4.0 by updating the version to 0.7.5 (bsc#1135749).    \n- Virtualization host upgrade from SLES-15 to SLES-15-SP1 finished with wrong product name shown up (bsc#1131823).\n- Copy pattern categories from the rpm that defines the pattern (fate#323785).\n- Enhance scanning /sys for modaliases (bsc#1130161).\n- Prevent SEGV if the application sets an empty TextLocale (bsc#1127026).\n- Handle libgpgme error when gpg key is not completely read and user hits CTRL + C (bsc#1127220).\n- Added a hint when registration codes have expired (bsc#965786).\n- Adds a better handling of an error when verifying any repository medium (bsc#1065022).\n- Will now only write type field when probing (bsc#1114908).\n- Fixes an issue where zypper has showed the info message 'Installation aborted by user' while the installation was aborted by wicked (bsc#978193).\n- Suppresses reporting `/memfd:` pseudo files (bsc#1123843).\n- Fixes an issue where zypper was not able to install or uninstall packages when rpm is unavailable (bsc#1122471).\n- Fixes an issue where locks were ignored (bsc#1113296).\n- Simplify complex locks so zypper can display them (bsc#1112911).\n- zypper will now set `SYSTEMD_OFFLINE=1` during chrooted commits (bsc#1118758).\n- no-recommends: Nevertheless consider resolver namespaces (hardware, language,..supporting packages) (fate#325513).\n- Removes world-readable bit from /var/log/zypp (bsc#1099019).\n- Does no longer fail service-refresh on a empty repoindex.xml (bsc#1116840).\n- Fixes soname due to libsolv ABI changes (bsc#1115341).\n- Add infrastructure to flag specific packages to trigger a reboot needed hint (fate#326451).\n\nThis update for zypper 1.14.27 fixes the following issues:\n\n- bash-completion: add package completion for addlock (bsc#1047962)\n- bash-completion: fix incorrect detection of command names (bsc#1049826)\n\n- Offer to change the 'runSearchPackages' config option at the prompt\n  (bsc#1119373, FATE#325599)\n- Prompt: provide a 'yes/no/always/never' prompt.\n- Prompt: support '#NUM' as answer to select the NUMth option...\n- Augeas: enable writing back changed option values (to ~/.zypper.conf)\n- removelocale: fix segfault\n- Move needs-restarting command to subpackage (fixes #254)\n- Allow empty string as argument (bsc#1125415)\n- Provide a way to delete cache for volatile repositories (bsc#1053177)\n- Adapt to boost-1.69 requiring explicit casts tribool-\u003ebool (fixes #255)\n- Show support status in info if not unknown (bsc#764147)\n- Fix installing plain rpm files with `zypper in` (bsc#1124897)\n- Show only required info in the summary in quiet mode (bsc#993025)\n- Stay with legacy behavior and return ZYPPER_EXIT_INF_REBOOT_NEEDED\n  only for patches. We don't extend this return code to packages,\n  although they may also carry the 'reboot-needed' attribute. The\n  preferred way to test whether the system needs to be rebooted is\n  `zypper needs-rebooting`. (openSUSE/zypper#237)\n- Skip repository on error (bsc#1123967)\n- New commands for locale management: locales addlocale removelocale\n  Inspect and manipulate the systems `requested locales`, aka. the\n  languages software packages should try support by installing\n  translations, dictionaries and tools, as far as they are available.\n- Don't throw, just warn if options are repeated (bsc#1123865)\n- Fix detection whether stdout is a tty (happened too late)\n- Fix broken --plus-content switch (fixes bsc#1123681)\n- Fix broken --replacefiles switch (fixes bsc#1123137)\n- Extend zypper source-install (fixes bsc#663358)\n- Fix inconsistent results for search (bsc#1119873)\n- Show reboot hint in zypper ps and summary (fixes bsc#1120263)\n- Improve handling of partially locked packages (bsc#1113296)\n- Fix wrong default values in help text (bsc#1121611)\n- Fixed broken argument parsing for --reposd-dir (bsc#1122062)\n- Fix wrong zypp::indeterminate use (bsc#1120463)\n- CLI parser: fix broken initialization enforcing 'select by name'\n  (bsc#1119820)\n- zypper.conf: [commit] autoAgreeWithLicenses {=false} (fixes #220)\n- locks: Fix printing of versioned locks (bsc#1112911)\n- locks: create and write versioned locks correctly (bsc#1112911)\n- patch: --with update may implicitly assume --with-optional (bsc#1102261)\n- no-recommends: Nevertheless consider resolver namespaces (hardware,\n  language,..supporting packages) (FATE#325513)\n- Optionally run 'zypper search-packages' after 'search' (FATE#325599)\n- zypper.conf: Add [search]runSearchPackages config variable.\n- Don't iterate twice on --no-cd (bsc#1111319)\n- zypper-log: Make it Python 3 compatible\n- man: mention /etc/zypp/needreboot config file (fate#326451, fixes #140)\n- Add `needs-restarting` shell script and manpage (fate#326451)\n- Add zypper needs-rebooting command (fate#326451)\n- Introduce new zypper command framefork. Migrated commands so far:\n  addlock addrepo addservice clean cleanlocks modifyrepo modifyservice\n  ps refresh refresh-services removelock removerepo removeservice\n  renamerepo repos services\n- MediaChangeReport: fix https URLs causing 2 prompts on error\n  (bsc#1110542)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-18T08:33:33Z","modified":"2025-05-07T18:10:15.003991Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-RU-2019:2742-1","title":"Recommended update for libzypp, zypper, libsolv and PackageKit","description":"This update for libzypp, zypper, libsolv and PackageKit fixes the following issues:\n\nSecurity issues fixed in libsolv:\n\n- CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c (function testcase_read) (bsc#1120629).\n- CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a (bsc#1120630).\n- CVE-2018-20534: Fixed illegal address access at src/pool.h (function pool_whatprovides) in libsolv.a (bsc#1120631).\n\nOther issues addressed in libsolv:\n\n- Fixed an issue where libsolv failed to build against swig 4.0 by updating the version to 0.7.5 (bsc#1135749).\n- Fixed an issue with the package name (bsc#1131823).\n- repo_add_rpmdb: do not copy bad solvables from the old solv file\n- Fixed an issue with  cleandeps updates in which all packages were not updated\n- Experimental DISTTYPE_CONDA and REL_CONDA support\n- Fixed cleandeps jobs when using patterns (bsc#1137977)\n- Fixed favorq leaking between solver runs if the solver is reused\n- Fixed SOLVER_FLAG_FOCUS_BEST updateing packages without reason\n- Be more correct with multiversion packages that obsolete their own name (bnc#1127155)\n- Fix repository priority handling for multiversion packages\n- Make code compatible with swig 4.0, remove obj0 instances\n- repo2solv: support zchunk compressed data\n- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will\n  not strip debug info for archives\n\nIssues fixed in libzypp:\n\n- Fix empty metalink downloads if filesize is unknown (bsc#1153557)\n- Recognize riscv64 as architecture\n- Fix installation of new header file (fixes #185)\n- zypp.conf: Introduce `solver.focus` to define the resolvers general\n  attitude when resolving jobs. (bsc#1146415)\n- New container detection algorithm for zypper ps (bsc#1146947)\n- Fix leaking filedescriptors in MediaCurl. (bsc#1116995)\n- Run file conflict check on dry-run. (bsc#1140039)\n- Do not remove orphan products if the .prod file is owned by\n  a package. (bsc#1139795)\n- Rephrase file conflict check summary. (bsc#1140039)\n- Fix bash completions option detection. (bsc#1049825)\n- Fixes a bug where zypper exited on SIGPIPE when downloading packages (bsc#1145521)\n- Fixes an issue where zypper exited with a segmentation fault when updating via YaST2 (bsc#1146027)\n- PublicKey::algoName: supply key algorithm and length\n\nIssues fixed in zypper:\n\n- Update to version 1.14.30\n- Ignore SIGPIPE while STDOUT/STDERR are OK (bsc#1145521)\n- Dump stacktrace on SIGPIPE (bsc#1145521)\n- info: The requested info must be shown in QUIET mode (fixes #287)\n- Fix local/remote url classification.\n- Rephrase file conflict check summary (bsc#1140039)\n- Fix bash completions option detection (bsc#1049825)\n- man: split '--with[out]' like options to ease searching.\n- Unhided 'ps' command in help\n- Added option to show more conflict information\n- Rephrased `zypper ps` hint (bsc#859480)\n- Fixed repo refresh not returning 106-ZYPPER_EXIT_INF_REPOS_SKIPPED\n  if --root is used (bsc#1134226)\n- Fixed unknown package handling in zypper install (bsc#1127608)\n- Re-show progress bar after pressing retry upon install error (bsc#1131113)\n\n\nIssues fixed in PackageKit:\n\n- Port the cron configuration variables to the systemd timer script, and add -sendwait\n  parameter to mail in the script(bsc#1130306).\n\n","status":"published","published":"2019-10-22T13:40:42Z","modified":"2026-02-04T03:51:21.305839Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:1972-1","title":"Security update for libsolv, libzypp, zypper","description":"This update for libsolv, libzypp and zypper fixes the following issues:\n\nlibsolv was updated to version 0.6.36 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629).\n- CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630).\n- CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631).\n\nNon-security issues fixed:\n\n- Made cleandeps jobs on patterns work (bsc#1137977).\n- Fixed an issue multiversion packages that obsolete their own name (bsc#1127155).\n- Keep consistent package name if there are multiple alternatives (bsc#1131823).\n\nlibzypp received following fixes:\n\n- Fixes a bug where locking the kernel was not possible (bsc#1113296)\n\nzypper received following fixes:\n\n- Fixes a bug where the wrong exit code was set when refreshing\n  repos if --root was used (bsc#1134226)\n- Improved the displaying of locks (bsc#1112911)\n- Fixes an issue where `https` repository urls caused an error prompt to\n   appear twice (bsc#1110542)\n- zypper will now always warn when no repositories are defined (bsc#1109893)\n","status":"published","published":"2019-07-25T13:00:35Z","modified":"2026-02-04T02:19:55.069955Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2030-1","title":"Security update for zypper, libzypp and libsolv","description":"This update for libzypp and libsolv fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c (function testcase_read) (bsc#1120629).\n- CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a (bsc#1120630).\n- CVE-2018-20534: Fixed illegal address access at src/pool.h (function pool_whatprovides) in libsolv.a (bsc#1120631).\n\nFixed bugs and enhancements:\n\n- make cleandeps jobs on patterns work (bnc#1137977)\n- Fixed an issue where libsolv failed to build against swig 4.0 by updating the version to 0.7.5 (bsc#1135749).    \n- Virtualization host upgrade from SLES-15 to SLES-15-SP1 finished with wrong product name shown up (bsc#1131823).\n- Copy pattern categories from the rpm that defines the pattern (fate#323785).\n- Enhance scanning /sys for modaliases (bsc#1130161).\n- Prevent SEGV if the application sets an empty TextLocale (bsc#1127026).\n- Handle libgpgme error when gpg key is not completely read and user hits CTRL + C (bsc#1127220).\n- Added a hint when registration codes have expired (bsc#965786).\n- Adds a better handling of an error when verifying any repository medium (bsc#1065022).\n- Will now only write type field when probing (bsc#1114908).\n- Fixes an issue where zypper has showed the info message 'Installation aborted by user' while the installation was aborted by wicked (bsc#978193).\n- Suppresses reporting `/memfd:` pseudo files (bsc#1123843).\n- Fixes an issue where zypper was not able to install or uninstall packages when rpm is unavailable (bsc#1122471).\n- Fixes an issue where locks were ignored (bsc#1113296).\n- Simplify complex locks so zypper can display them (bsc#1112911).\n- zypper will now set `SYSTEMD_OFFLINE=1` during chrooted commits (bsc#1118758).\n- no-recommends: Nevertheless consider resolver namespaces (hardware, language,..supporting packages) (fate#325513).\n- Removes world-readable bit from /var/log/zypp (bsc#1099019).\n- Does no longer fail service-refresh on a empty repoindex.xml (bsc#1116840).\n- Fixes soname due to libsolv ABI changes (bsc#1115341).\n- Add infrastructure to flag specific packages to trigger a reboot needed hint (fate#326451).\n\nThis update for zypper 1.14.27 fixes the following issues:\n\n- bash-completion: add package completion for addlock (bsc#1047962)\n- bash-completion: fix incorrect detection of command names (bsc#1049826)\n\n- Offer to change the 'runSearchPackages' config option at the prompt\n  (bsc#1119373, FATE#325599)\n- Prompt: provide a 'yes/no/always/never' prompt.\n- Prompt: support '#NUM' as answer to select the NUMth option...\n- Augeas: enable writing back changed option values (to ~/.zypper.conf)\n- removelocale: fix segfault\n- Move needs-restarting command to subpackage (fixes #254)\n- Allow empty string as argument (bsc#1125415)\n- Provide a way to delete cache for volatile repositories (bsc#1053177)\n- Adapt to boost-1.69 requiring explicit casts tribool-\u003ebool (fixes #255)\n- Show support status in info if not unknown (bsc#764147)\n- Fix installing plain rpm files with `zypper in` (bsc#1124897)\n- Show only required info in the summary in quiet mode (bsc#993025)\n- Stay with legacy behavior and return ZYPPER_EXIT_INF_REBOOT_NEEDED\n  only for patches. We don't extend this return code to packages,\n  although they may also carry the 'reboot-needed' attribute. The\n  preferred way to test whether the system needs to be rebooted is\n  `zypper needs-rebooting`. (openSUSE/zypper#237)\n- Skip repository on error (bsc#1123967)\n- New commands for locale management: locales addlocale removelocale\n  Inspect and manipulate the systems `requested locales`, aka. the\n  languages software packages should try support by installing\n  translations, dictionaries and tools, as far as they are available.\n- Don't throw, just warn if options are repeated (bsc#1123865)\n- Fix detection whether stdout is a tty (happened too late)\n- Fix broken --plus-content switch (fixes bsc#1123681)\n- Fix broken --replacefiles switch (fixes bsc#1123137)\n- Extend zypper source-install (fixes bsc#663358)\n- Fix inconsistent results for search (bsc#1119873)\n- Show reboot hint in zypper ps and summary (fixes bsc#1120263)\n- Improve handling of partially locked packages (bsc#1113296)\n- Fix wrong default values in help text (bsc#1121611)\n- Fixed broken argument parsing for --reposd-dir (bsc#1122062)\n- Fix wrong zypp::indeterminate use (bsc#1120463)\n- CLI parser: fix broken initialization enforcing 'select by name'\n  (bsc#1119820)\n- zypper.conf: [commit] autoAgreeWithLicenses {=false} (fixes #220)\n- locks: Fix printing of versioned locks (bsc#1112911)\n- locks: create and write versioned locks correctly (bsc#1112911)\n- patch: --with update may implicitly assume --with-optional (bsc#1102261)\n- no-recommends: Nevertheless consider resolver namespaces (hardware,\n  language,..supporting packages) (FATE#325513)\n- Optionally run 'zypper search-packages' after 'search' (FATE#325599)\n- zypper.conf: Add [search]runSearchPackages config variable.\n- Don't iterate twice on --no-cd (bsc#1111319)\n- zypper-log: Make it Python 3 compatible\n- man: mention /etc/zypp/needreboot config file (fate#326451, fixes #140)\n- Add `needs-restarting` shell script and manpage (fate#326451)\n- Add zypper needs-rebooting command (fate#326451)\n- Introduce new zypper command framefork. Migrated commands so far:\n  addlock addrepo addservice clean cleanlocks modifyrepo modifyservice\n  ps refresh refresh-services removelock removerepo removeservice\n  renamerepo repos services\n- MediaChangeReport: fix https URLs causing 2 prompts on error\n  (bsc#1110542)\n","status":"published","published":"2019-07-31T16:34:56Z","modified":"2026-02-04T03:17:50.989374Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2265-1","title":"Security update for libsolv, libzypp, zypper","description":"This update for libsolv, libzypp and zypper fixes the following issues:\n\nlibsolv was updated to version 0.6.36 and fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629).\n- CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630).\n- CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631).\n\nNon-security issues fixed:\n\n- Made cleandeps jobs on patterns work (bsc#1137977).\n- Fixed an issue multiversion packages that obsolete their own name (bsc#1127155).\n- Keep consistent package name if there are multiple alternatives (bsc#1131823).\n\nFixes for libzypp:\n\n- Fixes a bug where locking the kernel was not possible (bsc#1113296)\n- Fixes a file descriptor leak (bsc#1116995)\n- Will now run file conflict check on dry-run (best with download-only) (bsc#1140039)\n\nFixes for zypper:\n\n- Fixes a bug where the wrong exit code was set when refreshing repos if --root was used (bsc#1134226)\n- Improved the displaying of locks (bsc#1112911)\n- Fixes an issue where `https` repository urls caused an error prompt to appear twice (bsc#1110542)\n- zypper will now always warn when no repositories are defined (bsc#1109893)\n- Fixes bash completion option detection (bsc#1049825)\n","status":"published","published":"2019-09-02T07:09:12Z","modified":"2026-02-04T02:45:26.444632Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2020:2660-1","title":"Security update for libsolv","description":"This update for libsolv fixes the following issues:\n\nThis is a reissue of an existing libsolv update that also included libsolv-devel for LTSS products.\n\nlibsolv was updated to version 0.6.36 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629).\n- CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630).\n- CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631).\n\nNon-security issues fixed:\n\n- Made cleandeps jobs on patterns work (bsc#1137977).\n- Fixed an issue multiversion packages that obsolete their own name (bsc#1127155).\n- Keep consistent package name if there are multiple alternatives (bsc#1131823).\n\n","status":"published","published":"2020-09-16T14:15:37Z","modified":"2026-02-04T03:04:53.806345Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4851-1","title":"libsolv vulnerabilities","description":"It was discovered that Libsolv incorrectly handled certain malformed input.\nAn attacker could use this issue to cause Libsolv to crash, resulting in a\ndenial of service.","status":"published","published":"2021-03-15T22:36:33Z","modified":"2026-06-25T13:30:31.603341501Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}