openSUSE Recommended Update: Recommended update for shorewall ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1925-1 Rating: moderate References: #989281 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update update for shorewall fixes the following issues: - Update shorewall to the 4.6.13.4 bugfix release (boo#989281) This includes the following upstream changes: - The DROP command was previously rejected in the mangle file. - Rules in which the SOURCE contained both an interface name and a MAC address would be rejected. - Optional interfaces were not enabled during 'start' and 'restart' unless there was at least one entry in the 'providers' file. - Use 'netstat' to print socket information when the 'ss' utility is not installed - Correctly delete default route in the main table if statistical load balancing was used in the providers file - No longer fail the 'reset' command if chain names were included - The TCP meta-connection is now supported by the Tinc macro and tunnel type Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-930=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): shorewall-4.6.13.4-3.1 shorewall-core-4.6.13.4-3.1 shorewall-docs-4.6.13.4-3.1 shorewall-init-4.6.13.4-3.1 shorewall-lite-4.6.13.4-3.1 shorewall6-4.6.13.4-3.1 shorewall6-lite-4.6.13.4-3.1 References: https://bugzilla.suse.com/989281