Recommended update for Package Management Stack
This update provides fixes and enhancements for the Software Update Stack. gnome-packagekit: - Fix title of license agreement window. (bsc#927319) libsolv: - Rework splitprovides handling. (bnc#921332) - Add product:regflavor attribute. (bnc#896224) - Fix bug in reorder_dq_for_jobrules that could lead to crashes. (bnc#899907) - Fix bug in dislike_old_versions that could lead to a segfault. (bnc#922352) - Add manpages for the tools. libzypp: - Add configuration values for gpgcheck, repo_gpgcheck and pkg_gpgcheck to zypp.conf. (FATE#314603) - Support $releasever_major/$releasever_minor repo variables. (FATE#318354) - Support repo variable replacement in service url. - Support repo variable replacement in gpg url. - Add support for SHA224/384/512. - Don't execute scripts in /tmp or /var/tmp, as they could be mounted noexec for security reasons. (bnc#915928) - Let $ZYPP_REPO_RELEASEVER overwrite $releasever in .repo files. (bnc#911658) - Parse and offer productRegisterFlavor attribute. (bnc#896224) - Improve conflict message for locked packages. (bnc#828631) - Fix broken de-escaping in str::splitEscaped. (bnc#909772) - Filter PIDs running in a container. (bnc#909143) - Suppress informal license (no need to accept) upon update. (bnc#908976) - Adapt to gpg-2.1. (bnc#908135) - Call rpm with '--noglob'. (bnc#892431) - Fix URL path concatenation in MediaCurl. (bnc#901590) - Move doxygen html doc to libzypp-devel-doc. (bnc#901691) - Support parsing multiple baseurls from a repo file. (bnc#899510) - Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510) - Fix handling local mirrorlist= files in .repo. (bnc#899510) - Prevent POODLE by talking TLS only. (bnc#903405) - Fix segmentation fault when dumping rpm header with epoch. (bnc#929483) - Handle repository aliases containing ']' correctly. (bnc#929528) - Avoid nested exception on user abort. (bnc#931601) - Fix SSL client certificate authentication via URL option ssl_clientcert/ssl_clientkey. (bnc#932393) libzypp-bindings: - Enforce Python 2.7 libzypp-bindings is not yet ready for Python 3. - Adapt to libzypp changes. zypper: - Implement and document GPG signature checking. (FATE#314603) - Enhance 'Digest verification failed' message and dialog. (FATE#315008) - Refresh plugin services on 'lr' 'ls -r' and 'ref'. (bnc#893294, FATE#318117) Repositories provided by a plugin service (SUSE Manager) must always be (auto-)refreshed to reflect server side changes immediately. - Allow repo:package to reinstall from a different repo. (bnc#725867) - Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510) - A date limit must ignore newer patch candidates. (bnc#919709) - Notify about volatile changes to service repos. (bnc#916254) - Change column header from 'Login' to 'User'. (bnc#915461) - Fix wrong exit status using the --xmlout option. (bnc#914258) - Add new color/pkglistHighlightAttribute to zypper.conf. (bnc#914284) - New global option --releasever: Set the value of the $releasever variable in all .repo files. This can be used to switch to new distribution repositories when performing a distribution upgrade. (bnc#911658) - Clarify legacy warning. (bnc#911335) - Show new product:registerflavor attribute in 'zypper info'. (bnc#896224) - Enhance message text when skipping repos due to an error. (bnc#909244) - Fix additional spaces in zypper output and new colorization code. (bnc#908345) - Properly reset auto-retry counter. (bnc#906549) - Improve patch description in man page. (bnc#904737) - Warn about repositories with 'gpgcheck=0'. (bnc#848054) - Summary: quote names including spaces. (bnc#903675) - Warn if legacy CLI options are used. (bnc#899781) - Fix prompt returning undefined default value after wrong input. (bnc#925696) - Fix typo in man page. (bnc#923800) - Only use ANSI color codes on terminals. (bnc#925678) - Fix table sorting with option --sort-by-priority. (bnc#832519) - Clarify 'zypper lp --date' description. (bnc#929593) - Warn user that deleting a service repository is a volatile change. (bnc#929990) - Adapt Enterprise product detection, fixing display of package's support status. (bnc#933277) - Fix format of sizes in output. (bnc#897301) - Clarify comment in zypper.conf. (bnc#820693)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update provides fixes and enhancements for the Software Update Stack. gnome-packagekit: - Fix title of license agreement window. (bsc#927319) libsolv: - Rework splitprovides handling. (bnc#921332) - Add product:regflavor attribute. (bnc#896224) - Fix bug in reorder_dq_for_jobrules that could lead to crashes. (bnc#899907) - Fix bug in dislike_old_versions that could lead to a segfault. (bnc#922352) - Add manpages for the tools. libzypp: - Add configuration values for gpgcheck, repo_gpgcheck and pkg_gpgcheck to zypp.conf. (FATE#314603) - Support $releasever_major/$releasever_minor repo variables. (FATE#318354) - Support repo variable replacement in service url. - Support repo variable replacement in gpg url. - Add support for SHA224/384/512. - Don't execute scripts in /tmp or /var/tmp, as they could be mounted noexec for security reasons. (bnc#915928) - Let $ZYPP_REPO_RELEASEVER overwrite $releasever in .repo files. (bnc#911658) - Parse and offer productRegisterFlavor attribute. (bnc#896224) - Improve conflict message for locked packages. (bnc#828631) - Fix broken de-escaping in str::splitEscaped. (bnc#909772) - Filter PIDs running in a container. (bnc#909143) - Suppress informal license (no need to accept) upon update. (bnc#908976) - Adapt to gpg-2.1. (bnc#908135) - Call rpm with '--noglob'. (bnc#892431) - Fix URL path concatenation in MediaCurl. (bnc#901590) - Move doxygen html doc to libzypp-devel-doc. (bnc#901691) - Support parsing multiple baseurls from a repo file. (bnc#899510) - Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510) - Fix handling local mirrorlist= files in .repo. (bnc#899510) - Prevent POODLE by talking TLS only. (bnc#903405) - Fix segmentation fault when dumping rpm header with epoch. (bnc#929483) - Handle repository aliases containing ']' correctly. (bnc#929528) - Avoid nested exception on user abort. (bnc#931601) - Fix SSL client certificate authentication via URL option ssl_clientcert/ssl_clientkey. (bnc#932393) libzypp-bindings: - Enforce Python 2.7 libzypp-bindings is not yet ready for Python 3. - Adapt to libzypp changes. zypper: - Implement and document GPG signature checking. (FATE#314603) - Enhance 'Digest verification failed' message and dialog. (FATE#315008) - Refresh plugin services on 'lr' 'ls -r' and 'ref'. (bnc#893294, FATE#318117) Repositories provided by a plugin service (SUSE Manager) must always be (auto-)refreshed to reflect server side changes immediately. - Allow repo:package to reinstall from a different repo. (bnc#725867) - Suppress MediaChangeReport while testing multiple baseurls. (bnc#899510) - A date limit must ignore newer patch candidates. (bnc#919709) - Notify about volatile changes to service repos. (bnc#916254) - Change column header from 'Login' to 'User'. (bnc#915461) - Fix wrong exit status using the --xmlout option. (bnc#914258) - Add new color/pkglistHighlightAttribute to zypper.conf. (bnc#914284) - New global option --releasever: Set the value of the $releasever variable in all .repo files. This can be used to switch to new distribution repositories when performing a distribution upgrade. (bnc#911658) - Clarify legacy warning. (bnc#911335) - Show new product:registerflavor attribute in 'zypper info'. (bnc#896224) - Enhance message text when skipping repos due to an error. (bnc#909244) - Fix additional spaces in zypper output and new colorization code. (bnc#908345) - Properly reset auto-retry counter. (bnc#906549) - Improve patch description in man page. (bnc#904737) - Warn about repositories with 'gpgcheck=0'. (bnc#848054) - Summary: quote names including spaces. (bnc#903675) - Warn if legacy CLI options are used. (bnc#899781) - Fix prompt returning undefined default value after wrong input. (bnc#925696) - Fix typo in man page. (bnc#923800) - Only use ANSI color codes on terminals. (bnc#925678) - Fix table sorting with option --sort-by-priority. (bnc#832519) - Clarify 'zypper lp --date' description. (bnc#929593) - Warn user that deleting a service repository is a volatile change. (bnc#929990) - Adapt Enterprise product detection, fixing display of package's support status. (bnc#933277) - Fix format of sizes in output. (bnc#897301) - Clarify comment in zypper.conf. (bnc#820693)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/725867
- https://bugzilla.suse.com/820693
- https://bugzilla.suse.com/828631
- https://bugzilla.suse.com/832519
- https://bugzilla.suse.com/848054
- https://bugzilla.suse.com/892431
- https://bugzilla.suse.com/893294
- https://bugzilla.suse.com/896224
- https://bugzilla.suse.com/897301
- https://bugzilla.suse.com/899510
- https://bugzilla.suse.com/899603
- https://bugzilla.suse.com/899781
- https://bugzilla.suse.com/899907
- https://bugzilla.suse.com/901590
- https://bugzilla.suse.com/901691
- https://bugzilla.suse.com/903405
- https://bugzilla.suse.com/903675
- https://bugzilla.suse.com/904737
- https://bugzilla.suse.com/906549
- https://bugzilla.suse.com/908135
- https://bugzilla.suse.com/908345
- https://bugzilla.suse.com/908976
- https://bugzilla.suse.com/909143
- https://bugzilla.suse.com/909244
- https://bugzilla.suse.com/909772
- https://bugzilla.suse.com/911335
- https://bugzilla.suse.com/911658
- https://bugzilla.suse.com/914258
- https://bugzilla.suse.com/914284
- https://bugzilla.suse.com/915461
- https://bugzilla.suse.com/915928
- https://bugzilla.suse.com/916254
- https://bugzilla.suse.com/919709
- https://bugzilla.suse.com/921332
- https://bugzilla.suse.com/922352
- https://bugzilla.suse.com/923800
- https://bugzilla.suse.com/925678
- https://bugzilla.suse.com/925696
- https://bugzilla.suse.com/927319
- https://bugzilla.suse.com/929483
- https://bugzilla.suse.com/929528
- https://bugzilla.suse.com/929593
- https://bugzilla.suse.com/929990
- https://bugzilla.suse.com/931601
- https://bugzilla.suse.com/932393
- https://bugzilla.suse.com/933277
- https://www.suse.com/security/cve/CVE-2014-3566
- https://www.suse.com/support/update/announcement//suse-ru-20151175-1/