Recommended update for yast2, yast2-firewall, and yast2-services-manager

SUSE Recommended Update: Recommended update for yast2, yast2-firewall, and yast2-services-manager
Announcement ID: SUSE-RU-2019:1337-1
Rating: moderate
References: #1087867 #1108199 #1108628 #1108942 #1109812 #1110549 #1111370 #1112547 #1113732
Affected Products:
  • SUSE Linux Enterprise Module for Basesystem 15
  • SUSE Linux Enterprise Installer 15

An update that has 9 recommended fixes can now be installed.

Description:

This update for yast2, yast2-firewall, and yast2-services-manager fixes the following issues:
# Package: yast2
Installation:

  • Show dialog if registration is skipped. (fate#318196)
  • Add tags to describe the location for the "all-packages" medium. This information will be shown if the registration has been skipped by the user. No hint will be shown if these tags have not been defined. (fate#325834)

Logging:
  • Log viewer: replace invalid UTF-8 characters from the displayed log to avoid a crash. (bsc#1110549)

Firewall:
  • firewalld configuration failed when setting public zone as default second time. (bsc#1109812)
  • firewalld: fixed the API cmd call for removing services from zones, when the firewall is in offline mode. (bsc#1108628)
  • Added new methods to firewalld_wrapper in order to switch yast2-dhcp-server to new firewall module. (bsc#1108942)
  • Network (Firewall): Added modify_masquerade method to zones API unifying the way changes are applied to single value attributes. (bsc#1112547)
  • CWMFirewallInterfaces: Improved the UX replacing the api calls for checking supported services once the list supported ones are already known by the firewalld instance. (fate#324662)

# Package: yast2-firewall
AutoYast schema:
  • Allowed the new 'description', 'short' and 'target' elements in zone entries (bsc#1108199)

Included Features:
  • New user interface for firewalld configuration (fate#324662, bsc#1111370): * Manage the firewalld service * Browse interfaces and assign them to firewall zones * List zones and design one of them as the default * Assign services to zones * Open ports
  • Enable and open the SSH port when only public key authentication is available for the root user. (fate#324690)

# Package: yast2-services-manager
  • Do not crash in chroot environment (bsc#1113732)
  • Adapted to use the new Y2Firewall::Firewalld::Interface objects instead of a hash. (fate#324662)

Patch Instructions:

To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Module for Basesystem 15:
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-2019-1337=1
  • SUSE Linux Enterprise Installer 15:
    zypper in -t patch SUSE-SLE-INSTALLER-15-2019-1337=1

Package List:

  • SUSE Linux Enterprise Module for Basesystem 15 (aarch64 ppc64le s390x x86_64):
    • yast2-4.0.103-3.15.3
  • SUSE Linux Enterprise Module for Basesystem 15 (noarch):
    • yast2-firewall-4.0.34-3.6.3
    • yast2-services-manager-4.0.10-3.7.3
  • SUSE Linux Enterprise Installer 15 (aarch64 ppc64le s390x x86_64):
    • yast2-4.0.103-3.15.3

References: