openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1063-1 Rating: moderate References: #853019 #906858 #911001 #917577 #918787 #921098 #923201 #931792 #939568 #940749 #945592 #948584 #948753 #954104 #954958 #954959 #964971 #971790 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 18 recommended fixes can now be installed. Description: This update to apparmor 2.9.3 fixes the following issues: - aa-complain, aa-enforce, aa-audit: change flags of hats, not only the main profile (+ some bugfixes) - aa-notify: also display notifications for complain mode events - add python to the "no Px rule" list in logprof.conf - several bugfixes in the aa-* tools (including boo#954104 and several bugs on lp) - parser: set cache file timestamp to mtime of most recent policy file timestamp (lp#1460152) - add permissions in several profiles (including boo#948584, boo#948753, boo#939568, boo#954959, boo#954958, boo#940749, boo#971790, boo#945592, boo#964971, boo#921098, boo#923201 and boo#921098#c15) - systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201) - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-460=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_apparmor-2.9.3-7.1 apache2-mod_apparmor-debuginfo-2.9.3-7.1 apparmor-debugsource-2.9.3-7.1 apparmor-parser-2.9.3-7.1 apparmor-parser-debuginfo-2.9.3-7.1 libapparmor-devel-2.9.3-7.1 libapparmor1-2.9.3-7.1 libapparmor1-debuginfo-2.9.3-7.1 pam_apparmor-2.9.3-7.1 pam_apparmor-debuginfo-2.9.3-7.1 perl-apparmor-2.9.3-7.1 perl-apparmor-debuginfo-2.9.3-7.1 python3-apparmor-2.9.3-7.1 python3-apparmor-debuginfo-2.9.3-7.1 ruby-apparmor-2.9.3-7.1 ruby-apparmor-debuginfo-2.9.3-7.1 - openSUSE 13.2 (noarch): apparmor-abstractions-2.9.3-7.1 apparmor-docs-2.9.3-7.1 apparmor-parser-lang-2.9.3-7.1 apparmor-profiles-2.9.3-7.1 apparmor-utils-2.9.3-7.1 apparmor-utils-lang-2.9.3-7.1 - openSUSE 13.2 (x86_64): libapparmor1-32bit-2.9.3-7.1 libapparmor1-debuginfo-32bit-2.9.3-7.1 pam_apparmor-32bit-2.9.3-7.1 pam_apparmor-debuginfo-32bit-2.9.3-7.1 References: https://bugzilla.suse.com/853019 https://bugzilla.suse.com/906858 https://bugzilla.suse.com/911001 https://bugzilla.suse.com/917577 https://bugzilla.suse.com/918787 https://bugzilla.suse.com/921098 https://bugzilla.suse.com/923201 https://bugzilla.suse.com/931792 https://bugzilla.suse.com/939568 https://bugzilla.suse.com/940749 https://bugzilla.suse.com/945592 https://bugzilla.suse.com/948584 https://bugzilla.suse.com/948753 https://bugzilla.suse.com/954104 https://bugzilla.suse.com/954958 https://bugzilla.suse.com/954959 https://bugzilla.suse.com/964971 https://bugzilla.suse.com/971790