CVE catalog

CVE-2018-20532

libsolv: CVE-2018-20532

Severity: Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: Dec 28, 2018, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 2.06% · Oct 25, 2026

There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libsolv	sid	`0.7.40-1`	fixed
Debian	libsolv	forky	`0.7.40-1`	fixed
Debian	libsolv	trixie	`0.7.32-1`	fixed
Debian	libsolv	bookworm	`0.7.23-1+deb12u1`	fixed
Ubuntu	libsolv	pro	`0.6.28-2build1`	vulnerable
Ubuntu	libsolv	pro	`0.6.30-1build1`	vulnerable
Ubuntu	libsolv	pro	`0.6.30-1ubuntu0.1~esm1`	fixed
Ubuntu	libsolv	pro	`0.6.28-2build1`	vulnerable
Ubuntu	libsolv	pro	`0.6.30-1build1`	vulnerable
Ubuntu	libsolv	pro	`0.6.30-1ubuntu0.1~esm1`	fixed
Suse	libsolv	linux enterprise module for basesystem 15 sp1	`0.7.6-3.7.2`	fixed
Suse	libyui-ncurses-pkg	linux enterprise module for basesystem 15 sp1	`2.48.9-7.3.5`	fixed
Suse	libyui-ncurses-pkg-doc	linux enterprise module for basesystem 15 sp1	`2.48.9-7.3.3`	fixed
Suse	libyui-qt-pkg	linux enterprise module for basesystem 15 sp1	`2.45.27-3.3.5`	fixed
Suse	libyui-qt-pkg-doc	linux enterprise module for basesystem 15 sp1	`2.45.27-3.3.3`	fixed
Suse	libzypp	linux enterprise module for basesystem 15 sp1	`17.15.0-3.9.1`	fixed
Suse	yast2-pkg-bindings	linux enterprise module for basesystem 15 sp1	`4.1.2-3.3.5`	fixed
Suse	zypper	linux enterprise module for basesystem 15 sp1	`1.14.30-3.7.2`	fixed
Suse	PackageKit	linux enterprise module for desktop applications 15 sp1	`1.1.10-12.3.5`	fixed
Suse	libyui-qt-pkg	linux enterprise module for desktop applications 15 sp1	`2.45.27-3.3.5`	fixed
Suse	libsolv	linux enterprise module for development tools 15 sp1	`0.7.6-3.7.2`	fixed
Suse	libsolv	linux enterprise module for package hub 15 sp1	`0.7.6-3.7.2`	fixed
Suse	PackageKit	linux enterprise workstation extension 15 sp1	`1.1.10-12.3.5`	fixed
Opensuse	libsolv	tumbleweed	`0.7.19-1.4`	fixed
Suse	libsolv	linux enterprise module for basesystem 15	`0.7.5-3.12.2`	fixed
Suse	libyui-ncurses-pkg	linux enterprise module for basesystem 15	`2.48.5.2-3.5.2`	fixed
Suse	libyui-ncurses-pkg-doc	linux enterprise module for basesystem 15	`2.48.5.2-3.5.3`	fixed
Suse	libyui-qt-pkg	linux enterprise module for basesystem 15	`2.45.15.2-3.5.3`	fixed
Suse	libyui-qt-pkg-doc	linux enterprise module for basesystem 15	`2.45.15.2-3.5.3`	fixed
Suse	libzypp	linux enterprise module for basesystem 15	`17.12.0-3.23.6`	fixed
Suse	yast2-pkg-bindings	linux enterprise module for basesystem 15	`4.0.13-3.7.2`	fixed
Suse	zypper	linux enterprise module for basesystem 15	`1.14.28-3.18.6`	fixed
Suse	PackageKit	linux enterprise module for desktop applications 15	`1.1.10-4.10.4`	fixed
Suse	libyui-qt-pkg	linux enterprise module for desktop applications 15	`2.45.15.2-3.5.3`	fixed
Suse	libsolv	linux enterprise module for development tools 15	`0.7.5-3.12.2`	fixed
Suse	PackageKit	linux enterprise workstation extension 15	`1.1.10-4.10.4`	fixed
Suse	libsolv	hpe helion openstack 8	`0.6.36-2.30.1`	fixed
Suse	libsolv	openstack cloud 8	`0.6.36-2.30.1`	fixed
Suse	libsolv	openstack cloud 9	`0.6.36-2.30.1`	fixed
Suse	libsolv	openstack cloud crowbar 8	`0.6.36-2.30.1`	fixed
Suse	libsolv	openstack cloud crowbar 9	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp3	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp4	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise software development kit 12 sp5	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server 12 sp3-ltss	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server 12 sp3-bcl	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server 12 sp4-ltss	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server 12 sp5	`0.6.36-2.30.1`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp5	`0.6.36-2.30.1`	fixed
Suse	libsolv	enterprise storage 5	`0.6.36-2.30.1`	fixed
Suse	libsolv	hpe helion openstack 8	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	hpe helion openstack 8	`16.20.2-27.60.4`	fixed
Suse	zypper	hpe helion openstack 8	`1.13.54-18.40.2`	fixed
Suse	libsolv	openstack cloud 7	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	openstack cloud 7	`16.20.2-27.60.4`	fixed
Suse	zypper	openstack cloud 7	`1.13.54-18.40.2`	fixed
Suse	libsolv	openstack cloud 8	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	openstack cloud 8	`16.20.2-27.60.4`	fixed
Suse	zypper	openstack cloud 8	`1.13.54-18.40.2`	fixed
Suse	libsolv	openstack cloud crowbar 8	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	openstack cloud crowbar 8	`16.20.2-27.60.4`	fixed
Suse	zypper	openstack cloud crowbar 8	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise desktop 12 sp4	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise desktop 12 sp4	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise desktop 12 sp4	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp2	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server for sap applications 12 sp2	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server for sap applications 12 sp2	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp3	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server for sap applications 12 sp3	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server for sap applications 12 sp3	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server 12 sp2-ltss	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server 12 sp2-ltss	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server 12 sp2-ltss	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server 12 sp2-bcl	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server 12 sp2-bcl	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server 12 sp2-bcl	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server 12 sp3-ltss	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server 12 sp3-ltss	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server 12 sp3-ltss	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server 12 sp3-bcl	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server 12 sp3-bcl	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server 12 sp3-bcl	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server 12 sp4	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server 12 sp4	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server 12 sp4	`1.13.54-18.40.2`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp4	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	linux enterprise server for sap applications 12 sp4	`16.20.2-27.60.4`	fixed
Suse	zypper	linux enterprise server for sap applications 12 sp4	`1.13.54-18.40.2`	fixed
Suse	libsolv	enterprise storage 4	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	enterprise storage 4	`16.20.2-27.60.4`	fixed
Suse	zypper	enterprise storage 4	`1.13.54-18.40.2`	fixed
Suse	libsolv	enterprise storage 5	`0.6.36-2.27.19.8`	fixed
Suse	libzypp	enterprise storage 5	`16.20.2-27.60.4`	fixed
Suse	zypper	enterprise storage 5	`1.13.54-18.40.2`	fixed
Suse	libsolv	openstack cloud 8	`0.6.36-2.16.2`	fixed
Suse	libzypp	openstack cloud 8	`16.20.0-2.39.4`	fixed
Suse	zypper	openstack cloud 8	`1.13.51-21.26.4`	fixed
Suse	libsolv	linux enterprise desktop 12 sp4	`0.6.36-2.16.2`	fixed
Suse	libzypp	linux enterprise desktop 12 sp4	`16.20.0-2.39.4`	fixed
Suse	zypper	linux enterprise desktop 12 sp4	`1.13.51-21.26.4`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp3	`0.6.36-2.16.2`	fixed
Suse	libzypp	linux enterprise server for sap applications 12 sp3	`16.20.0-2.39.4`	fixed
Suse	zypper	linux enterprise server for sap applications 12 sp3	`1.13.51-21.26.4`	fixed
Suse	libsolv	linux enterprise software development kit 12 sp4	`0.6.36-2.16.2`	fixed
Suse	libzypp	linux enterprise software development kit 12 sp4	`16.20.0-2.39.4`	fixed
Suse	libsolv	linux enterprise server 12 sp3-ltss	`0.6.36-2.16.2`	fixed
Suse	libzypp	linux enterprise server 12 sp3-ltss	`16.20.0-2.39.4`	fixed
Suse	zypper	linux enterprise server 12 sp3-ltss	`1.13.51-21.26.4`	fixed
Suse	libsolv	linux enterprise server 12 sp4	`0.6.36-2.16.2`	fixed
Suse	libzypp	linux enterprise server 12 sp4	`16.20.0-2.39.4`	fixed
Suse	zypper	linux enterprise server 12 sp4	`1.13.51-21.26.4`	fixed
Suse	libsolv	linux enterprise server for sap applications 12 sp4	`0.6.36-2.16.2`	fixed
Suse	libzypp	linux enterprise server for sap applications 12 sp4	`16.20.0-2.39.4`	fixed
Suse	zypper	linux enterprise server for sap applications 12 sp4	`1.13.51-21.26.4`	fixed
Suse	libsolv	enterprise storage 5	`0.6.36-2.16.2`	fixed
Suse	libzypp	enterprise storage 5	`16.20.0-2.39.4`	fixed
Suse	zypper	enterprise storage 5	`1.13.51-21.26.4`	fixed
Opensuse	PackageKit	leap 15.0	`1.1.10-lp150.11.1`	fixed
Opensuse	libsolv	leap 15.0	`0.7.5-lp150.7.1`	fixed
Opensuse	libyui-ncurses-pkg	leap 15.0	`2.48.5.2-lp150.7.1`	fixed
Opensuse	libyui-qt-pkg	leap 15.0	`2.45.15.2-lp150.7.1`	fixed
Opensuse	libzypp	leap 15.0	`17.12.0-lp150.2.13.1`	fixed
Opensuse	yast2-pkg-bindings	leap 15.0	`4.0.13-lp150.2.13.1`	fixed
Opensuse	zypper	leap 15.0	`1.14.28-lp150.2.13.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libsolv	source	sid	`0.6.36-1`	low	Not reported	[923002]
Debian	libsolv	source	forky	`0.6.36-1`	low	Not reported	[923002]
Debian	libsolv	source	trixie	`0.6.36-1`	low	Not reported	[923002]
Debian	libsolv	source	bookworm	`0.6.36-1`	low	Not reported	[923002]
Ubuntu	libsolv	deb	pro	`0.6.30-1ubuntu0.1~esm1`	Not reported	USN-4851-1	Not reported
Ubuntu	libsolv	deb	pro	`0.6.30-1ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2018-20532	Not reported
Suse	libsolv	rpm	linux enterprise module for basesystem 15 sp1	`0.7.6-3.7.2`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libyui-ncurses-pkg	rpm	linux enterprise module for basesystem 15 sp1	`2.48.9-7.3.5`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libyui-ncurses-pkg-doc	rpm	linux enterprise module for basesystem 15 sp1	`2.48.9-7.3.3`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libyui-qt-pkg	rpm	linux enterprise module for basesystem 15 sp1	`2.45.27-3.3.5`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libyui-qt-pkg-doc	rpm	linux enterprise module for basesystem 15 sp1	`2.45.27-3.3.3`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libzypp	rpm	linux enterprise module for basesystem 15 sp1	`17.15.0-3.9.1`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	yast2-pkg-bindings	rpm	linux enterprise module for basesystem 15 sp1	`4.1.2-3.3.5`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	zypper	rpm	linux enterprise module for basesystem 15 sp1	`1.14.30-3.7.2`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	PackageKit	rpm	linux enterprise module for desktop applications 15 sp1	`1.1.10-12.3.5`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libyui-qt-pkg	rpm	linux enterprise module for desktop applications 15 sp1	`2.45.27-3.3.5`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libsolv	rpm	linux enterprise module for development tools 15 sp1	`0.7.6-3.7.2`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	libsolv	rpm	linux enterprise module for package hub 15 sp1	`0.7.6-3.7.2`	Not reported	SUSE-RU-2019:2742-1	Not reported
Suse	PackageKit	rpm	linux enterprise workstation extension 15 sp1	`1.1.10-12.3.5`	Not reported	SUSE-RU-2019:2742-1	Not reported
Opensuse	libsolv	rpm	tumbleweed	`0.7.19-1.4`	Not reported	OPENSUSE-SU-2024:10993-1	Not reported
Suse	libsolv	rpm	linux enterprise module for basesystem 15	`0.7.5-3.12.2`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libyui-ncurses-pkg	rpm	linux enterprise module for basesystem 15	`2.48.5.2-3.5.2`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libyui-ncurses-pkg-doc	rpm	linux enterprise module for basesystem 15	`2.48.5.2-3.5.3`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libyui-qt-pkg	rpm	linux enterprise module for basesystem 15	`2.45.15.2-3.5.3`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libyui-qt-pkg-doc	rpm	linux enterprise module for basesystem 15	`2.45.15.2-3.5.3`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libzypp	rpm	linux enterprise module for basesystem 15	`17.12.0-3.23.6`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	yast2-pkg-bindings	rpm	linux enterprise module for basesystem 15	`4.0.13-3.7.2`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	zypper	rpm	linux enterprise module for basesystem 15	`1.14.28-3.18.6`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	PackageKit	rpm	linux enterprise module for desktop applications 15	`1.1.10-4.10.4`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libyui-qt-pkg	rpm	linux enterprise module for desktop applications 15	`2.45.15.2-3.5.3`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libsolv	rpm	linux enterprise module for development tools 15	`0.7.5-3.12.2`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	PackageKit	rpm	linux enterprise workstation extension 15	`1.1.10-4.10.4`	Not reported	SUSE-SU-2019:2030-1	Not reported
Suse	libsolv	rpm	hpe helion openstack 8	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	openstack cloud 8	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	openstack cloud 9	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	openstack cloud crowbar 8	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	openstack cloud crowbar 9	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp3	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp4	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise software development kit 12 sp5	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp3-ltss	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp3-bcl	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp4-ltss	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp5	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp5	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	enterprise storage 5	`0.6.36-2.30.1`	Not reported	SUSE-SU-2020:2660-1	Not reported
Suse	libsolv	rpm	hpe helion openstack 8	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	hpe helion openstack 8	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	hpe helion openstack 8	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	openstack cloud 7	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	openstack cloud 7	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	openstack cloud 7	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	openstack cloud 8	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	openstack cloud 8	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	openstack cloud 8	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	openstack cloud crowbar 8	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	openstack cloud crowbar 8	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	openstack cloud crowbar 8	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise desktop 12 sp4	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise desktop 12 sp4	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise desktop 12 sp4	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp2	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server for sap applications 12 sp2	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server for sap applications 12 sp2	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp3	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server for sap applications 12 sp3	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server for sap applications 12 sp3	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp2-ltss	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp2-ltss	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp2-ltss	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp2-bcl	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp2-bcl	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp2-bcl	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp3-ltss	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp3-ltss	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp3-ltss	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp3-bcl	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp3-bcl	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp3-bcl	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp4	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp4	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp4	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp4	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	linux enterprise server for sap applications 12 sp4	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	linux enterprise server for sap applications 12 sp4	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	enterprise storage 4	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	enterprise storage 4	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	enterprise storage 4	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	enterprise storage 5	`0.6.36-2.27.19.8`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libzypp	rpm	enterprise storage 5	`16.20.2-27.60.4`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	zypper	rpm	enterprise storage 5	`1.13.54-18.40.2`	Not reported	SUSE-SU-2019:2265-1	Not reported
Suse	libsolv	rpm	openstack cloud 8	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	openstack cloud 8	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	openstack cloud 8	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	linux enterprise desktop 12 sp4	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	linux enterprise desktop 12 sp4	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	linux enterprise desktop 12 sp4	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp3	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	linux enterprise server for sap applications 12 sp3	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	linux enterprise server for sap applications 12 sp3	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	linux enterprise software development kit 12 sp4	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	linux enterprise software development kit 12 sp4	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp3-ltss	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp3-ltss	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp3-ltss	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	linux enterprise server 12 sp4	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	linux enterprise server 12 sp4	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	linux enterprise server 12 sp4	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	linux enterprise server for sap applications 12 sp4	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	linux enterprise server for sap applications 12 sp4	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	linux enterprise server for sap applications 12 sp4	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libsolv	rpm	enterprise storage 5	`0.6.36-2.16.2`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	libzypp	rpm	enterprise storage 5	`16.20.0-2.39.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Suse	zypper	rpm	enterprise storage 5	`1.13.51-21.26.4`	Not reported	SUSE-SU-2019:1972-1	Not reported
Opensuse	PackageKit	rpm	leap 15.0	`1.1.10-lp150.11.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported
Opensuse	libsolv	rpm	leap 15.0	`0.7.5-lp150.7.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported
Opensuse	libyui-ncurses-pkg	rpm	leap 15.0	`2.48.5.2-lp150.7.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported
Opensuse	libyui-qt-pkg	rpm	leap 15.0	`2.45.15.2-lp150.7.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported
Opensuse	libzypp	rpm	leap 15.0	`17.12.0-lp150.2.13.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported
Opensuse	yast2-pkg-bindings	rpm	leap 15.0	`4.0.13-lp150.2.13.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported
Opensuse	zypper	rpm	leap 15.0	`1.14.28-lp150.2.13.1`	Not reported	OPENSUSE-SU-2019:1927-1	Not reported

[Debian bug #923002]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libsolv1]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[libsolv-dev]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[libsolv-doc]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · all · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · all · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[libsolvext1]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[libsolvext-dev]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[libsolv-perl]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[libsolv-tools]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
[python3-solv]Unknown
Source package: [libsolv]
Details (2)
- 0.7.23-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12
- 0.7.23-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · bookworm; dsa · libsolv · debian · 12

[Debian 13 (Trixie)]

[libsolv1]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[libsolv-dev]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[libsolv-doc]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · all · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · all · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[libsolvext1]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[libsolvext-dev]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[libsolv-perl]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[libsolv-tools]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
[python3-solv]Unknown
Source package: [libsolv]
Details (2)
- 0.7.32-1 · amd64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13
- 0.7.32-1 · arm64 · trixie
  Fixed · Fixed: 0.6.36-1
  dsa · libsolv · debian · 13

[openSUSE Tumbleweed]

[libsolv1]Unknown
Source package: [libsolv]
Details (1)
- 0.7.39-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.7.19-1.4
  Version impact unknown
  dsa · libsolv · opensuse · tumbleweed
[libsolv-demo]Unknown
Source package: [libsolv]
Details (1)
- 0.7.39-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.7.19-1.4
  Version impact unknown
  dsa · libsolv · opensuse · tumbleweed
[libsolv-devel]Unknown
Source package: [libsolv]
Details (1)
- 0.7.39-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.7.19-1.4
  Version impact unknown
  dsa · libsolv · opensuse · tumbleweed
[libsolv-devel-static]Unknown
Source package: [libsolv]
Details (1)
- 0.7.39-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.7.19-1.4
  Version impact unknown
  dsa · libsolv · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:36:04 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]