SUSE-SU-2026:21738-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-202621738-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:21738-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:21738-1
Upstream
  • CVE-2026-44933
Related
Published
2026-05-21T08:54:58Z
Modified
2026-05-23T18:23:41Z
Summary
Security update for libsolv, libzypp, zypper
Details

This update for libsolv, libzypp, zypper fixes the following issues:

  • CVE-2026-44933: prevent configured scripts from escaping the sigcheck directory (bsc#1265223)

Changes in libsolv:

  • update to version 0.7.37:
    • fix parsing of sha512 checksums in debian repositories
    • improve speed of dirpool_add_dir makeing parsing of filelists.xml twice as fast
    • fix parsing of recommands in the old Mandriva synthesis format

Changes in libzypp:

  • update to version 17.38.9:
    • Mandatory signature verification plugin support (jsc#PED-11922)

Changes in zypper:

  • update to version 1.14.97:
    • Add --filter-version-change to zypper lu. Adds filtering by version change significance to reduce noise in update listings. Supports levels: rebuild (hides rebuild-only changes) and package (hides all release-only changes).
References

Affected packages