openSUSE Recommended Update: Recommended update for yast2, yast2-firewall, and yast2-services-manager ______________________________________________________________________________

Announcement ID: openSUSE-RU-2019:1474-1 Rating: moderate References: #1087867 #1108199 #1108628 #1108942 #1109812 #1110549 #1111370 #1112547 #1113732 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________

An update that has 9 recommended fixes can now be installed.

Description:

This update for yast2, yast2-firewall, and yast2-services-manager fixes the following issues:

# Package: yast2

Installation: - Show dialog if registration is skipped. (fate#318196) - Add tags to describe the location for the "all-packages" medium. This information will be shown if the registration has been skipped by the user. No hint will be shown if these tags have not been defined. (fate#325834)

Logging: - Log viewer: replace invalid UTF-8 characters from the displayed log to avoid a crash. (bsc#1110549)

Firewall: - firewalld configuration failed when setting public zone as default second time. (bsc#1109812) - firewalld: fixed the API cmd call for removing services from zones, when the firewall is in offline mode. (bsc#1108628) - Added new methods to firewalld_wrapper in order to switch yast2-dhcp-server to new firewall module. (bsc#1108942) - Network (Firewall): Added modify_masquerade method to zones API unifying the way changes are applied to single value attributes. (bsc#1112547) - CWMFirewallInterfaces: Improved the UX replacing the api calls for checking supported services once the list supported ones are already known by the firewalld instance. (fate#324662)

# Package: yast2-firewall

AutoYast schema: - Allowed the new 'description', 'short' and 'target' elements in zone entries (bsc#1108199)

Included Features: - New user interface for firewalld configuration (fate#324662, bsc#1111370): * Manage the firewalld service * Browse interfaces and assign them to firewall zones * List zones and design one of them as the default * Assign services to zones * Open ports - Enable and open the SSH port when only public key authentication is available for the root user. (fate#324690)

# Package: yast2-services-manager

- Do not crash in chroot environment (bsc#1113732) - Adapted to use the new Y2Firewall::Firewalld::Interface objects instead of a hash. (fate#324662) This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.0:

zypper in -t patch openSUSE-2019-1474=1

Package List:

- openSUSE Leap 15.0 (i586 x86_64):

yast2-4.0.103-lp150.2.13.1

- openSUSE Leap 15.0 (noarch):

yast2-firewall-4.0.34-lp150.7.1 yast2-services-manager-4.0.10-lp150.7.1

References:

https://bugzilla.suse.com/1087867 https://bugzilla.suse.com/1108199 https://bugzilla.suse.com/1108628 https://bugzilla.suse.com/1108942 https://bugzilla.suse.com/1109812 https://bugzilla.suse.com/1110549 https://bugzilla.suse.com/1111370 https://bugzilla.suse.com/1112547 https://bugzilla.suse.com/1113732