Security update for libsolv, libzypp, zypper (moderate)

An update that solves one vulnerability and has 10 fixes is
now available.

Description:

This update for libsolv, libzypp, zypper fixes the following issues:

Security issue fixed:

• CVE-2019-18900: Fixed assert cookie file that was world readable
  (bsc#1158763).

Bug fixes

• Fixed removing orphaned packages dropped by to-be-installed products
  (bsc#1155819).
• Adds libzypp API to mark all obsolete kernels according to the existing
  purge-kernel script rules (bsc#1155198).
• Do not enforce ‘en’ being in RequestedLocales If the user decides to
  have a system without explicit language support he may do so
  (bsc#1155678).
• Load only target resolvables for zypper rm (bsc#1157377).
• Fix broken search by filelist (bsc#1135114).
• Replace python by a bash script in zypper-log (fixes#304, fixes#306,
  bsc#1156158).
• Do not sort out requested locales which are not available (bsc#1155678).
• Prevent listing duplicate matches in tables. XML result is provided
  within the new list-patches-byissue element (bsc#1154805).
• XML add patch issue-date and issue-list (bsc#1154805).
• Fix zypper lp --cve/bugzilla/issue options (bsc#1155298).
• Always execute commit when adding/removing locales (fixes bsc#1155205).
• Fix description of --table-style,-s in man page (bsc#1154804).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-255=1