File _patchinfo of Package patchinfo.9147

<patchinfo incident="9147">
  <issue tracker="bnc" id="939392">zypper search ignores arguments with "+" (plus) characters</issue>
  <issue tracker="bnc" id="1109877">[Build 50.1] second stage stuck for more than an hour during installation</issue>
  <issue tracker="bnc" id="408814">VUL-1: libzypp: prevent downloads with infinite size</issue>
  <issue tracker="bnc" id="556664">zypper does not always find pattern devel_C_C++ with --match_exact</issue>
  <issue tracker="bnc" id="1099982">"zypper se" lists incorrectly with multiple packages when a "+" sign exist in package name</issue>
  <category>recommended</category>
  <rating>moderate</rating>
  <packager>mlandres</packager>
  <description>This update for libzypp fixes the following issues:

- Add filesize check for downloads with known size to avoid endless data attacks (bsc#408814)
- Fix conversion of string and glob to regex when compiling queries
  (bsc#1099982, bsc#939392, bsc#556664)
- Fix blocking wait for finished child process (bsc#1109877)
</description>
  <summary>Recommended update for libzypp</summary>
  <zypp_restart_needed/>
</patchinfo>
openSUSE Build Service is sponsored by