{"id":"SUSE-SU-2026:21738-1","summary":"Security update for libsolv, libzypp, zypper","details":"This update for libsolv, libzypp, zypper fixes the following issues:\n\n- CVE-2026-44933: prevent configured scripts from escaping the sigcheck directory (bsc#1265223)\n\nChanges in libsolv:\n\n- update to version 0.7.37:  \n    * fix parsing of sha512 checksums in debian repositories\n    * improve speed of dirpool_add_dir makeing parsing of filelists.xml twice as fast\n    * fix parsing of recommands in the old Mandriva synthesis format\n\nChanges in libzypp:\n\n- update to version 17.38.9:\n    * Mandatory signature verification plugin support (jsc#PED-11922)\n\nChanges in zypper:\n\n- update to version 1.14.97:\n  *  Add --filter-version-change to zypper lu.\n     Adds filtering by version change significance to reduce noise in update listings. \n     Supports levels: rebuild (hides rebuild-only changes) and package (hides all release-only changes).\n\n","modified":"2026-05-23T18:23:41.733869064Z","published":"2026-05-21T08:54:58Z","related":["CVE-2026-44933"],"upstream":["CVE-2026-44933"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621738-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1265223"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-44933"}],"schema_version":"1.7.5"}