SUSE-SU-2020:2660-1: libsolv&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2020:2660-1 is a vulnerability in libsolv&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 16-09-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for libsolv This update for libsolv fixes the following issues: This is a reissue of an existing libsolv update that also included libsolv-devel for LTSS products. libsolv was updated to version 0.6.36 fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed a NULL pointer dereference in testcase_read() (bsc#1120629). - CVE-2018-20533: Fixed a NULL pointer dereference in testcase_str2dep_complex() (bsc#1120630). - CVE-2018-20534: Fixed a NULL pointer dereference in pool_whatprovides() (bsc#1120631). Non-security issues fixed: - Made cleandeps jobs on patterns work (bsc#1137977). - Fixed an issue multiversion packages that obsolete their own name (bsc#1127155). - Keep consistent package name if there are multiple alternatives (bsc#1131823).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse14 products
- libsolv&distro=HPE Helion OpenStack 8< 0.6.36-2.30.1
- libsolv&distro=SUSE Enterprise Storage 5< 0.6.36-2.30.1
- libsolv&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 0.6.36-2.30.1
- libsolv&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 0.6.36-2.30.1
- libsolv&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 0.6.36-2.30.1
1 vendor · 14 products