Summary
This update provides fixes and enhancements for the Software Update Stack.
gnome-packagekit:
- Fix title of license agreement window. (bsc#927319)
libsolv:
- Rework splitprovides handling. (bnc#921332)
- Add product:regflavor attribute. (bnc#896224)
- Fix bug in reorder_dq_for_jobrules that could lead to crashes. (bnc#899907)
- Fix bug in dislike_old_versions that could lead to a segfault. (bnc#922352)
- Add manpages for the tools.
libzypp:
- Add configuration values for gpgcheck, repo_gpgcheck and pkg_gpgcheck to zypp.conf. (FATE#314603)
- Support $releasever_major/$releasever_minor repo variables. (FATE#318354)
- Support repo variable replacement in service url.
- Support repo variable replacement in gpg url.
- Add support for SHA224/384/512.
- Don't execute scripts in /tmp or /var/tmp, as they could be mounted noexec for security reasons. (bnc#915928)
- Let $ZYPP_REPO_RELEASEVER overwrite $releasever in .repo files. (bnc#911658)
- Parse and offer productRegisterFlavor attribute. (bnc#896224)
- Improve conflict message for locked packages. (bnc#828631)
- Fix broken de-escaping in str::splitEscaped. (bnc#909772)
- Filter PIDs running in a container. (bnc#909143)
- Suppress informal license (no need to accept) upon update. (bnc#908976)
- Adapt to gpg-2.1. (bnc#908135)
- Call rpm with '--noglob'. (bnc#892431)
- Fix URL path concatenation in MediaCurl. (bnc#901590)
- Move doxygen html doc to libzypp-devel-doc. (bnc#901691)
- Support parsing multiple baseurls from a repo file. (bnc#899510)
- Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510)
- Fix handling local mirrorlist= files in .repo. (bnc#899510)
- Prevent POODLE by talking TLS only. (bnc#903405)
- Fix segmentation fault when dumping rpm header with epoch. (bnc#929483)
- Handle repository aliases containing ']' correctly. (bnc#929528)
- Avoid nested exception on user abort. (bnc#931601)
- Fix SSL client certificate authentication via URL option ssl_clientcert/ssl_clientkey. (bnc#932393)
libzypp-bindings:
- Enforce Python 2.7 libzypp-bindings is not yet ready for Python 3.
- Adapt to libzypp changes.
zypper:
- Implement and document GPG signature checking. (FATE#314603)
- Enhance 'Digest verification failed' message and dialog. (FATE#315008)
- Refresh plugin services on 'lr' 'ls -r' and 'ref'. (bnc#893294, FATE#318117)
Repositories provided by a plugin service (SUSE Manager) must always
be (auto-)refreshed to reflect server side changes immediately.
- Allow repo:package to reinstall from a different repo. (bnc#725867)
- Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510)
- A date limit must ignore newer patch candidates. (bnc#919709)
- Notify about volatile changes to service repos. (bnc#916254)
- Change column header from 'Login' to 'User'. (bnc#915461)
- Fix wrong exit status using the --xmlout option. (bnc#914258)
- Add new color/pkglistHighlightAttribute to zypper.conf. (bnc#914284)
- New global option --releasever: Set the value of the $releasever variable in all .repo files.
This can be used to switch to new distribution repositories when performing a distribution upgrade. (bnc#911658)
- Clarify legacy warning. (bnc#911335)
- Show new product:registerflavor attribute in 'zypper info'. (bnc#896224)
- Enhance message text when skipping repos due to an error. (bnc#909244)
- Fix additional spaces in zypper output and new colorization code. (bnc#908345)
- Properly reset auto-retry counter. (bnc#906549)
- Improve patch description in man page. (bnc#904737)
- Warn about repositories with 'gpgcheck=0'. (bnc#848054)
- Summary: quote names including spaces. (bnc#903675)
- Warn if legacy CLI options are used. (bnc#899781)
- Fix prompt returning undefined default value after wrong input. (bnc#925696)
- Fix typo in man page. (bnc#923800)
- Only use ANSI color codes on terminals. (bnc#925678)
- Fix table sorting with option --sort-by-priority. (bnc#832519)
- Clarify 'zypper lp --date' description. (bnc#929593)
- Warn user that deleting a service repository is a volatile change. (bnc#929990)
- Adapt Enterprise product detection, fixing display of package's support status. (bnc#933277)
- Fix format of sizes in output. (bnc#897301)
- Clarify comment in zypper.conf. (bnc#820693)
Fixed packages 34
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 Linux Enterprise Desktop 12 | gnome-packagekit | 3.10.1-8.13 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | libsolv | 0.6.11-8.1 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | libyui-ncurses-pkg | 2.46.1-3.4 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | libyui-qt-pkg | 2.44.7-3.2 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | libzypp | 14.39.0-10.1 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | libzypp-bindings | 0.6.4-5.3 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | PackageKit | 0.8.16-11.15 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | yast2-pkg-bindings | 3.1.20-3.3 |
| SUSE · SLES 12 Linux Enterprise Desktop 12 | zypper | 1.11.32-8.1 |
| SUSE · SLES 12 Linux Enterprise Server 12 | gnome-packagekit | 3.10.1-8.13 |
| SUSE · SLES 12 Linux Enterprise Server 12 | libsolv | 0.6.11-8.1 |
| SUSE · SLES 12 Linux Enterprise Server 12 | libyui-ncurses-pkg | 2.46.1-3.4 |
| SUSE · SLES 12 Linux Enterprise Server 12 | libyui-qt-pkg | 2.44.7-3.2 |
| SUSE · SLES 12 Linux Enterprise Server 12 | libzypp | 14.39.0-10.1 |
| SUSE · SLES 12 Linux Enterprise Server 12 | libzypp-bindings | 0.6.4-5.3 |
| SUSE · SLES 12 Linux Enterprise Server 12 | PackageKit | 0.8.16-11.15 |
| SUSE · SLES 12 Linux Enterprise Server 12 | yast2-pkg-bindings | 3.1.20-3.3 |
| SUSE · SLES 12 Linux Enterprise Server 12 | zypper | 1.11.32-8.1 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | gnome-packagekit | 3.10.1-8.13 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | libsolv | 0.6.11-8.1 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | libyui-ncurses-pkg | 2.46.1-3.4 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | libyui-qt-pkg | 2.44.7-3.2 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | libzypp | 14.39.0-10.1 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | libzypp-bindings | 0.6.4-5.3 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | PackageKit | 0.8.16-11.15 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | yast2-pkg-bindings | 3.1.20-3.3 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | zypper | 1.11.32-8.1 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | libsolv | 0.6.11-8.1 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | libyui-ncurses-pkg | 2.46.1-3.4 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | libyui-qt-pkg | 2.44.7-3.2 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | libzypp | 14.39.0-10.1 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | libzypp-bindings | 0.6.4-5.3 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | PackageKit | 0.8.16-11.15 |
| SUSE · SLES 12 Linux Enterprise Workstation Extension 12 | PackageKit | 0.8.16-11.15 |
Vulnerabilities 1
-
Low 3.4
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…
References
-
report
https://bugzilla.suse.com/725867
-
report
https://bugzilla.suse.com/820693
-
report
https://bugzilla.suse.com/828631
-
report
https://bugzilla.suse.com/832519
-
report
https://bugzilla.suse.com/848054
-
report
https://bugzilla.suse.com/892431
-
report
https://bugzilla.suse.com/893294
-
report
https://bugzilla.suse.com/896224
-
report
https://bugzilla.suse.com/897301
-
report
https://bugzilla.suse.com/899510
-
report
https://bugzilla.suse.com/899603
-
report
https://bugzilla.suse.com/899781
-
report
https://bugzilla.suse.com/899907
-
report
https://bugzilla.suse.com/901590
-
report
https://bugzilla.suse.com/901691
-
report
https://bugzilla.suse.com/903405
-
report
https://bugzilla.suse.com/903675
-
report
https://bugzilla.suse.com/904737
-
report
https://bugzilla.suse.com/906549
-
report
https://bugzilla.suse.com/908135
-
report
https://bugzilla.suse.com/908345
-
report
https://bugzilla.suse.com/908976
-
report
https://bugzilla.suse.com/909143
-
report
https://bugzilla.suse.com/909244
-
report
https://bugzilla.suse.com/909772
-
report
https://bugzilla.suse.com/911335
-
report
https://bugzilla.suse.com/911658
-
report
https://bugzilla.suse.com/914258
-
report
https://bugzilla.suse.com/914284
-
report
https://bugzilla.suse.com/915461
-
report
https://bugzilla.suse.com/915928
-
report
https://bugzilla.suse.com/916254
-
report
https://bugzilla.suse.com/919709
-
report
https://bugzilla.suse.com/921332
-
report
https://bugzilla.suse.com/922352
-
report
https://bugzilla.suse.com/923800
-
report
https://bugzilla.suse.com/925678
-
report
https://bugzilla.suse.com/925696
-
report
https://bugzilla.suse.com/927319