Security update for libsolv, libzypp, zypper

This update for libsolv, libzypp, zypper fixes the following issues:

Security issue fixed:

- CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).

Bug fixes

- Fixed removing orphaned packages dropped by to-be-installed products (bsc#1155819).
- Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules (bsc#1155198).
- Do not enforce 'en' being in RequestedLocales If the user decides to have a system without explicit language support he may do so (bsc#1155678).
- Load only target resolvables for zypper rm (bsc#1157377).
- Fix broken search by filelist (bsc#1135114).
- Replace python by a bash script in zypper-log (fixes#304, fixes#306, bsc#1156158).
- Do not sort out requested locales which are not available (bsc#1155678).
- Prevent listing duplicate matches in tables. XML result is provided within the new list-patches-byissue element (bsc#1154805).
- XML add patch issue-date and issue-list (bsc#1154805).
- Fix zypper lp --cve/bugzilla/issue options (bsc#1155298).
- Always execute commit when adding/removing locales (fixes bsc#1155205).
- Fix description of --table-style,-s in man page (bsc#1154804).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Fixed bugs
bnc#1155205
'zypper addlocale' fails to add the locale if no packages are to be added
bnc#1155198
Provide 'zypper purge-kernels' builtin command
bnc#1135114
zypper search --file-lists does not work
bnc#1155298
zypper lp: broken --cve/bugzilla/issue options
bnc#1154804
zypper: man page is not correct for global option "-s"
bnc#1158763
VUL-0: CVE-2019-18900: libzypp: /var/lib/YaST2/cookies is world readable
bnc#1157377
zypper complains "No repositories defined" when removing a package
bnc#1154805
zypper: enhancements for (automated) patch checking
bnc#1155819
weakremovers of future product not evaluated
bnc#1156158
zypper-log tries to use python2 which does not exist anymore
bnc#1155678
"zypper dup" always installs -lang files
Selected Binaries
openSUSE Build Service is sponsored by