VDB
SUSE-SU-2019%3A2265-1
SUSE-SU-2019%3A2265-1
PUBLISHED
Record from OSV · Published September 2, 2019
Security update for libsolv, libzypp, zypper
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| libsolv | SUSE:Enterprise Storage 5 | 0.6.36-2.27.19.8 |
| libsolv | SUSE:Linux Enterprise Server 12 SP2-LTSS | 0.6.36-2.27.19.8 |
| libzypp | SUSE:OpenStack Cloud 7 | 16.20.2-27.60.4 |
| zypper | SUSE:HPE Helion OpenStack 8 | 1.13.54-18.40.2 |
| libsolv | SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | 0.6.36-2.27.19.8 |
| libzypp | SUSE:Enterprise Storage 5 | 16.20.2-27.60.4 |
| libsolv | SUSE:Linux Enterprise Desktop 12 SP4 | 0.6.36-2.27.19.8 |
| zypper | SUSE:Enterprise Storage 4 | 1.13.54-18.40.2 |
| libzypp | SUSE:Linux Enterprise Server 12 SP3-LTSS | 16.20.2-27.60.4 |
| libzypp | SUSE:OpenStack Cloud 8 | 16.20.2-27.60.4 |
| libzypp | SUSE:Linux Enterprise Server 12 SP2-BCL | 16.20.2-27.60.4 |
| libzypp | SUSE:OpenStack Cloud Crowbar 8 | 16.20.2-27.60.4 |
33 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Enterprise Storage 5 | libsolv | 0 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | libsolv | 0 |
| SUSE:OpenStack Cloud 7 | libzypp | 0 |
| SUSE:HPE Helion OpenStack 8 | zypper | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | libsolv | 0 |
| SUSE:Enterprise Storage 5 | libzypp | 0 |
| SUSE:Linux Enterprise Desktop 12 SP4 | libsolv | 0 |
| SUSE:Enterprise Storage 4 | zypper | 0 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | libzypp | 0 |
| SUSE:OpenStack Cloud 8 | libzypp | 0 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | libzypp | 0 |
| SUSE:OpenStack Cloud Crowbar 8 | libzypp | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | zypper | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | libzypp | 0 |
| SUSE:Linux Enterprise Desktop 12 SP4 | libzypp | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | zypper | 0 |
| SUSE:OpenStack Cloud Crowbar 8 | zypper | 0 |
| SUSE:Linux Enterprise Server 12 SP4 | zypper | 0 |
| SUSE:OpenStack Cloud 7 | zypper | 0 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | libsolv | 0 |
…and 25 more
Timeline
- Sep 2, 2019 CVE Published
- Feb 4, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2019%3A2265-1
vulnetix vdb fixes SUSE-SU-2019%3A2265-1
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2019%253A2265-1/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.suse.com/support/update/announcement/2019/suse-su-20192265-1/ advisory
- https://bugzilla.suse.com/1049825 report
- https://bugzilla.suse.com/1109893 report
- https://bugzilla.suse.com/1113296 report
- https://bugzilla.suse.com/1116995 report
- https://bugzilla.suse.com/1120629 report
- https://bugzilla.suse.com/1120630 report
- https://bugzilla.suse.com/1127155 report
- https://bugzilla.suse.com/1131823 report
- https://bugzilla.suse.com/1145521 report
- https://www.suse.com/security/cve/CVE-2018-20533 url
- https://www.suse.com/security/cve/CVE-2018-20534 url
- https://bugzilla.suse.com/1110542 report
- https://bugzilla.suse.com/1111319 report
- https://bugzilla.suse.com/1112911 report
- https://bugzilla.suse.com/1120631 report
- https://bugzilla.suse.com/1134226 report
- https://bugzilla.suse.com/1137977 report
- https://bugzilla.suse.com/1140039 report
- https://www.suse.com/security/cve/CVE-2018-20532 url