
CVE catalog
CVE-2017-9271
libzypp: CVE-2017-9271
- Severity
- Medium · CVSS 4
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.33% · Oct 25, 2026
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | libzypp | sid | 17.38.16-1 | fixed |
| Debian | libzypp | forky | 17.38.16-1 | fixed |
| Debian | libzypp | trixie | 17.36.7-1 | fixed |
| Debian | libzypp | bookworm | 17.25.7-2.4 | fixed |
| Suse | libsolv | linux enterprise installer updates 15 | 0.7.17-3.40.1 | fixed |
| Suse | libzypp | linux enterprise installer updates 15 | 17.25.8-3.66.1 | fixed |
| Suse | yast2-installation | linux enterprise installer updates 15 | 4.0.77-3.22.5 | fixed |
| Suse | zypper | linux enterprise installer updates 15 | 1.14.43-3.49.1 | fixed |
| Suse | libsolv | linux enterprise high performance computing 15-espos | 0.7.17-3.40.1 | fixed |
| Suse | libzypp | linux enterprise high performance computing 15-espos | 17.25.8-3.66.1 | fixed |
| Suse | yast2-installation | linux enterprise high performance computing 15-espos | 4.0.77-3.22.5 | fixed |
| Suse | zypper | linux enterprise high performance computing 15-espos | 1.14.43-3.49.1 | fixed |
| Suse | libsolv | linux enterprise high performance computing 15-ltss | 0.7.17-3.40.1 | fixed |
| Suse | libzypp | linux enterprise high performance computing 15-ltss | 17.25.8-3.66.1 | fixed |
| Suse | yast2-installation | linux enterprise high performance computing 15-ltss | 4.0.77-3.22.5 | fixed |
| Suse | zypper | linux enterprise high performance computing 15-ltss | 1.14.43-3.49.1 | fixed |
| Suse | libsolv | linux enterprise server 15-ltss | 0.7.17-3.40.1 | fixed |
| Suse | libzypp | linux enterprise server 15-ltss | 17.25.8-3.66.1 | fixed |
| Suse | yast2-installation | linux enterprise server 15-ltss | 4.0.77-3.22.5 | fixed |
| Suse | zypper | linux enterprise server 15-ltss | 1.14.43-3.49.1 | fixed |
| Suse | libsolv | linux enterprise server for sap applications 15 | 0.7.17-3.40.1 | fixed |
| Suse | libzypp | linux enterprise server for sap applications 15 | 17.25.8-3.66.1 | fixed |
| Suse | yast2-installation | linux enterprise server for sap applications 15 | 4.0.77-3.22.5 | fixed |
| Suse | zypper | linux enterprise server for sap applications 15 | 1.14.43-3.49.1 | fixed |
| Suse | libzypp | linux enterprise installer updates 15 sp2 | 17.25.5-3.25.6 | fixed |
| Suse | yast2-installation | linux enterprise installer updates 15 sp2 | 4.2.48-3.16.1 | fixed |
| Suse | libzypp | linux enterprise module for basesystem 15 sp2 | 17.25.5-3.25.6 | fixed |
| Suse | yast2-installation | linux enterprise module for basesystem 15 sp2 | 4.2.48-3.16.1 | fixed |
| Suse | zypper | linux enterprise module for basesystem 15 sp2 | 1.14.41-3.14.10 | fixed |
| Suse | libsigc++2 | linux enterprise installer updates 15 sp1 | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | linux enterprise installer updates 15 sp1 | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | linux enterprise installer updates 15 sp1 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | linux enterprise installer updates 15 sp1 | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | linux enterprise installer updates 15 sp1 | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | linux enterprise installer updates 15 sp1 | 4.1.3-3.10.3 | fixed |
| Suse | libsigc++2 | linux enterprise high performance computing 15 sp1-espos | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | linux enterprise high performance computing 15 sp1-espos | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | linux enterprise high performance computing 15 sp1-espos | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | linux enterprise high performance computing 15 sp1-espos | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | linux enterprise high performance computing 15 sp1-espos | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | linux enterprise high performance computing 15 sp1-espos | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | linux enterprise high performance computing 15 sp1-espos | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | linux enterprise high performance computing 15 sp1-espos | 4.1.3-3.10.3 | fixed |
| Suse | zypper | linux enterprise high performance computing 15 sp1-espos | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | linux enterprise high performance computing 15 sp1-ltss | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | linux enterprise high performance computing 15 sp1-ltss | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | linux enterprise high performance computing 15 sp1-ltss | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | linux enterprise high performance computing 15 sp1-ltss | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | linux enterprise high performance computing 15 sp1-ltss | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | linux enterprise high performance computing 15 sp1-ltss | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | linux enterprise high performance computing 15 sp1-ltss | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | linux enterprise high performance computing 15 sp1-ltss | 4.1.3-3.10.3 | fixed |
| Suse | zypper | linux enterprise high performance computing 15 sp1-ltss | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | linux enterprise server 15 sp1-bcl | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | linux enterprise server 15 sp1-bcl | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | linux enterprise server 15 sp1-bcl | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | linux enterprise server 15 sp1-bcl | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | linux enterprise server 15 sp1-bcl | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | linux enterprise server 15 sp1-bcl | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | linux enterprise server 15 sp1-bcl | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | linux enterprise server 15 sp1-bcl | 4.1.3-3.10.3 | fixed |
| Suse | zypper | linux enterprise server 15 sp1-bcl | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | linux enterprise server 15 sp1-ltss | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | linux enterprise server 15 sp1-ltss | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | linux enterprise server 15 sp1-ltss | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | linux enterprise server 15 sp1-ltss | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | linux enterprise server 15 sp1-ltss | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | linux enterprise server 15 sp1-ltss | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | linux enterprise server 15 sp1-ltss | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | linux enterprise server 15 sp1-ltss | 4.1.3-3.10.3 | fixed |
| Suse | zypper | linux enterprise server 15 sp1-ltss | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | linux enterprise server for sap applications 15 sp1 | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | linux enterprise server for sap applications 15 sp1 | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | linux enterprise server for sap applications 15 sp1 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | linux enterprise server for sap applications 15 sp1 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | linux enterprise server for sap applications 15 sp1 | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | linux enterprise server for sap applications 15 sp1 | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | linux enterprise server for sap applications 15 sp1 | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | linux enterprise server for sap applications 15 sp1 | 4.1.3-3.10.3 | fixed |
| Suse | zypper | linux enterprise server for sap applications 15 sp1 | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | manager proxy 4.0 | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | manager proxy 4.0 | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | manager proxy 4.0 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | manager proxy 4.0 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | manager proxy 4.0 | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | manager proxy 4.0 | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | manager proxy 4.0 | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | manager proxy 4.0 | 4.1.3-3.10.3 | fixed |
| Suse | zypper | manager proxy 4.0 | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | manager retail branch server 4.0 | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | manager retail branch server 4.0 | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | manager retail branch server 4.0 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | manager retail branch server 4.0 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | manager retail branch server 4.0 | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | manager retail branch server 4.0 | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | manager retail branch server 4.0 | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | manager retail branch server 4.0 | 4.1.3-3.10.3 | fixed |
| Suse | zypper | manager retail branch server 4.0 | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | manager server 4.0 | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | manager server 4.0 | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | manager server 4.0 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | manager server 4.0 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | manager server 4.0 | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | manager server 4.0 | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | manager server 4.0 | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | manager server 4.0 | 4.1.3-3.10.3 | fixed |
| Suse | zypper | manager server 4.0 | 1.14.43-3.34.1 | fixed |
| Suse | libsigc++2 | enterprise storage 6 | 2.10.0-3.7.1 | fixed |
| Suse | libsolv | enterprise storage 6 | 0.7.17-3.32.1 | fixed |
| Suse | libyui-ncurses-pkg | enterprise storage 6 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-ncurses-pkg-doc | enterprise storage 6 | 2.48.9-7.7.1 | fixed |
| Suse | libyui-qt-pkg | enterprise storage 6 | 2.45.28-3.10.1 | fixed |
| Suse | libyui-qt-pkg-doc | enterprise storage 6 | 2.45.28-3.10.1 | fixed |
| Suse | libzypp | enterprise storage 6 | 17.25.8-3.48.1 | fixed |
| Suse | yast2-pkg-bindings | enterprise storage 6 | 4.1.3-3.10.3 | fixed |
| Suse | zypper | enterprise storage 6 | 1.14.43-3.34.1 | fixed |
| Opensuse | libzypp | leap 15.2 | 17.25.5-lp152.2.16.1 | fixed |
| Opensuse | yast2-installation | leap 15.2 | 4.2.48-lp152.2.12.1 | fixed |
| Opensuse | zypper | leap 15.2 | 1.14.41-lp152.2.12.1 | fixed |
| Suse | libzypp | linux enterprise software development kit 12 sp5 | 16.22.13-65.3 | fixed |
| Suse | libzypp | linux enterprise server 12 sp5 | 16.22.13-65.3 | fixed |
| Suse | zypper | linux enterprise server 12 sp5 | 1.13.66-21.61.3 | fixed |
| Suse | libzypp | linux enterprise server for sap applications 12 sp5 | 16.22.13-65.3 | fixed |
| Suse | zypper | linux enterprise server for sap applications 12 sp5 | 1.13.66-21.61.3 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | libzypp | source | sid | 17.25.5-2 | low | Not reported | [988152] |
| Debian | libzypp | source | forky | 17.25.5-2 | low | Not reported | [988152] |
| Debian | libzypp | source | trixie | 17.25.5-2 | low | Not reported | [988152] |
| Debian | libzypp | source | bookworm | 17.25.5-2 | low | Not reported | [988152] |
| Suse | libsolv | rpm | linux enterprise installer updates 15 | 0.7.17-3.40.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise installer updates 15 | 17.25.8-3.66.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise installer updates 15 | 4.0.77-3.22.5 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | zypper | rpm | linux enterprise installer updates 15 | 1.14.43-3.49.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise high performance computing 15-espos | 0.7.17-3.40.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise high performance computing 15-espos | 17.25.8-3.66.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise high performance computing 15-espos | 4.0.77-3.22.5 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | zypper | rpm | linux enterprise high performance computing 15-espos | 1.14.43-3.49.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise high performance computing 15-ltss | 0.7.17-3.40.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise high performance computing 15-ltss | 17.25.8-3.66.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise high performance computing 15-ltss | 4.0.77-3.22.5 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | zypper | rpm | linux enterprise high performance computing 15-ltss | 1.14.43-3.49.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise server 15-ltss | 0.7.17-3.40.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server 15-ltss | 17.25.8-3.66.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise server 15-ltss | 4.0.77-3.22.5 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server 15-ltss | 1.14.43-3.49.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise server for sap applications 15 | 0.7.17-3.40.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server for sap applications 15 | 17.25.8-3.66.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise server for sap applications 15 | 4.0.77-3.22.5 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server for sap applications 15 | 1.14.43-3.49.1 | Not reported | SUSE-SU-2021:0770-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise installer updates 15 sp2 | 17.25.5-3.25.6 | Not reported | SUSE-SU-2021:0109-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise installer updates 15 sp2 | 4.2.48-3.16.1 | Not reported | SUSE-SU-2021:0109-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise module for basesystem 15 sp2 | 17.25.5-3.25.6 | Not reported | SUSE-SU-2021:0109-1 | Not reported |
| Suse | yast2-installation | rpm | linux enterprise module for basesystem 15 sp2 | 4.2.48-3.16.1 | Not reported | SUSE-SU-2021:0109-1 | Not reported |
| Suse | zypper | rpm | linux enterprise module for basesystem 15 sp2 | 1.14.41-3.14.10 | Not reported | SUSE-SU-2021:0109-1 | Not reported |
| Suse | libsigc++2 | rpm | linux enterprise installer updates 15 sp1 | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise installer updates 15 sp1 | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | linux enterprise installer updates 15 sp1 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | linux enterprise installer updates 15 sp1 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise installer updates 15 sp1 | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | linux enterprise installer updates 15 sp1 | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | linux enterprise high performance computing 15 sp1-espos | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise high performance computing 15 sp1-espos | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | linux enterprise high performance computing 15 sp1-espos | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | linux enterprise high performance computing 15 sp1-espos | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | linux enterprise high performance computing 15 sp1-espos | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | linux enterprise high performance computing 15 sp1-espos | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise high performance computing 15 sp1-espos | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | linux enterprise high performance computing 15 sp1-espos | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | linux enterprise high performance computing 15 sp1-espos | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise high performance computing 15 sp1-ltss | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise high performance computing 15 sp1-ltss | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | linux enterprise high performance computing 15 sp1-ltss | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | linux enterprise high performance computing 15 sp1-ltss | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | linux enterprise server 15 sp1-bcl | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise server 15 sp1-bcl | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | linux enterprise server 15 sp1-bcl | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | linux enterprise server 15 sp1-bcl | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | linux enterprise server 15 sp1-bcl | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | linux enterprise server 15 sp1-bcl | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server 15 sp1-bcl | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | linux enterprise server 15 sp1-bcl | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server 15 sp1-bcl | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | linux enterprise server 15 sp1-ltss | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise server 15 sp1-ltss | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | linux enterprise server 15 sp1-ltss | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | linux enterprise server 15 sp1-ltss | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | linux enterprise server 15 sp1-ltss | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | linux enterprise server 15 sp1-ltss | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server 15 sp1-ltss | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | linux enterprise server 15 sp1-ltss | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server 15 sp1-ltss | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | linux enterprise server for sap applications 15 sp1 | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | linux enterprise server for sap applications 15 sp1 | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | linux enterprise server for sap applications 15 sp1 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | linux enterprise server for sap applications 15 sp1 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | linux enterprise server for sap applications 15 sp1 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | linux enterprise server for sap applications 15 sp1 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server for sap applications 15 sp1 | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | linux enterprise server for sap applications 15 sp1 | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server for sap applications 15 sp1 | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | manager proxy 4.0 | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | manager proxy 4.0 | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | manager proxy 4.0 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | manager proxy 4.0 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | manager proxy 4.0 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | manager proxy 4.0 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | manager proxy 4.0 | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | manager proxy 4.0 | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | manager proxy 4.0 | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | manager retail branch server 4.0 | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | manager retail branch server 4.0 | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | manager retail branch server 4.0 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | manager retail branch server 4.0 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | manager retail branch server 4.0 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | manager retail branch server 4.0 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | manager retail branch server 4.0 | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | manager retail branch server 4.0 | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | manager retail branch server 4.0 | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | manager server 4.0 | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | manager server 4.0 | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | manager server 4.0 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | manager server 4.0 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | manager server 4.0 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | manager server 4.0 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | manager server 4.0 | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | manager server 4.0 | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | manager server 4.0 | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsigc++2 | rpm | enterprise storage 6 | 2.10.0-3.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libsolv | rpm | enterprise storage 6 | 0.7.17-3.32.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg | rpm | enterprise storage 6 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-ncurses-pkg-doc | rpm | enterprise storage 6 | 2.48.9-7.7.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg | rpm | enterprise storage 6 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libyui-qt-pkg-doc | rpm | enterprise storage 6 | 2.45.28-3.10.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | libzypp | rpm | enterprise storage 6 | 17.25.8-3.48.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | yast2-pkg-bindings | rpm | enterprise storage 6 | 4.1.3-3.10.3 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Suse | zypper | rpm | enterprise storage 6 | 1.14.43-3.34.1 | Not reported | SUSE-SU-2021:0956-1 | Not reported |
| Opensuse | libzypp | rpm | leap 15.2 | 17.25.5-lp152.2.16.1 | Not reported | OPENSUSE-SU-2021:0059-1 | Not reported |
| Opensuse | yast2-installation | rpm | leap 15.2 | 4.2.48-lp152.2.12.1 | Not reported | OPENSUSE-SU-2021:0059-1 | Not reported |
| Opensuse | zypper | rpm | leap 15.2 | 1.14.41-lp152.2.12.1 | Not reported | OPENSUSE-SU-2021:0059-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise software development kit 12 sp5 | 16.22.13-65.3 | Not reported | SUSE-SU-2024:2080-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server 12 sp5 | 16.22.13-65.3 | Not reported | SUSE-SU-2024:2080-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server 12 sp5 | 1.13.66-21.61.3 | Not reported | SUSE-SU-2024:2080-1 | Not reported |
| Suse | libzypp | rpm | linux enterprise server for sap applications 12 sp5 | 16.22.13-65.3 | Not reported | SUSE-SU-2024:2080-1 | Not reported |
| Suse | zypper | rpm | linux enterprise server for sap applications 12 sp5 | 1.13.66-21.61.3 | Not reported | SUSE-SU-2024:2080-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libzypp1722]Fixed
Source package: [libzypp]
Details (2)
17.25.7-2.4· amd64 · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
17.25.7-2.4· arm64 · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
- [libzypp-bin]Fixed
Source package: [libzypp]
Details (2)
17.25.7-2.4· amd64 · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
17.25.7-2.4· arm64 · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
- [libzypp-common]Fixed
Source package: [libzypp]
Details (2)
17.25.7-2.4· all · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
17.25.7-2.4· all · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
- [libzypp-config]Fixed
Source package: [libzypp]
Details (2)
17.25.7-2.4· all · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
17.25.7-2.4· all · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
- [libzypp-dev]Fixed
Source package: [libzypp]
Details (2)
17.25.7-2.4· amd64 · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
17.25.7-2.4· arm64 · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
- [libzypp-doc]Fixed
Source package: [libzypp]
Details (2)
17.25.7-2.4· all · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
17.25.7-2.4· all · bookwormFixed · Fixed:
17.25.5-2dsa · libzypp · debian · bookworm; dsa · libzypp · debian · 12
[Debian 13 (Trixie)]
- [libzypp1735]Fixed
Source package: [libzypp]
Details (2)
17.36.7-1· amd64 · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
17.36.7-1· arm64 · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
- [libzypp-bin]Fixed
Source package: [libzypp]
Details (2)
17.36.7-1· amd64 · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
17.36.7-1· arm64 · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
- [libzypp-common]Fixed
Source package: [libzypp]
Details (2)
17.36.7-1· all · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
17.36.7-1· all · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
- [libzypp-config]Fixed
Source package: [libzypp]
Details (2)
17.36.7-1· all · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
17.36.7-1· all · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
- [libzypp-dev]Fixed
Source package: [libzypp]
Details (2)
17.36.7-1· amd64 · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
17.36.7-1· arm64 · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
- [libzypp-doc]Fixed
Source package: [libzypp]
Details (2)
17.36.7-1· all · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
17.36.7-1· all · trixieFixed · Fixed:
17.25.5-2dsa · libzypp · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_0109-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2017-9271]
- [https://osv.dev/vulnerability/SUSE-SU-2021:0109-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:0770-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:0956-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2080-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:0059-1]
- [https://security-tracker.debian.org/tracker/CVE-2017-9271]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0225.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]