Marked for autoremoval on 02 March due to libzypp: #949196high
Version 1.14.11-2 of zypper is marked for autoremoval from testing on Mon 02 Mar 2020. It depends (transitively) on libzypp, affected by #949196. You should try to prevent the removal by fixing these RC bugs.
CVE-2017-9271: The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
CVE-2017-9271: The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
CVE-2017-9271: The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
CVE-2017-9271: The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/z/zypper.png){kind=link}