openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2194-1 Rating: moderate References: #1146866 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aaa_base fixes the following issues: Added sysctl.d/51-network.conf to tighten network security (bsc#1146866) (jira#SLE-9132) Following settings have been tightened (and set to 0): - net.ipv4.conf.all.accept_redirects - net.ipv4.conf.default.accept_redirects - net.ipv4.conf.default.accept_source_route - net.ipv6.conf.all.accept_redirects - net.ipv6.conf.default.accept_redirects This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2194=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): aaa_base-84.87+git20180409.04c9dae-lp150.17.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-lp150.17.1 aaa_base-debugsource-84.87+git20180409.04c9dae-lp150.17.1 aaa_base-extras-84.87+git20180409.04c9dae-lp150.17.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-lp150.17.1 aaa_base-wsl-84.87+git20180409.04c9dae-lp150.17.1 References: https://bugzilla.suse.com/1146866