Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE: 2020:2000-1 Important: rmt-server Update Addressing 16 Issues

opensuse
Calendar Grey November 23, 2020
Dist Opensuse Esm H88
The recent security patch for Fedora tackles 12 vulnerabilities in the dnsmasq service, significantly bolstering overall security.
An update that fixes 16 vulnerabilities is now available.

Description

This update for rmt-server fixes the following issues:

- Version 2.6.5

- Solved potential bug of SCC repository URLs changing over time. RMT now

self heals by removing the previous invalid repository and creating the

correct one.

- Version 2.6.4

- Add web server settings to /etc/rmt.conf: Now it's possible to configure

the minimum and maximum threads count as well the number of web server

workers to be booted through /etc/rmt.conf.

- Version 2.6.3

- Instead of using an MD5 of URLs for custom repository friendly_ids, RMT

now builds an ID from the name.

- Version 2.6.2

- Fix RMT file caching based on timestamps: Previously, RMT sent GET

requests with the header 'If-Modified-Since' to a repository server and

if the response had a 304 (Not Modified), it would copy a file from the

local cache instead of downloading. However, if the local file timestamp

accidentally changed to a date newer...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update software patch bug fix important openSUSE rmt-server

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-2000=1

Package List

- openSUSE Leap 15.1 (x86_64):

rmt-server-2.6.5-lp151.2.18.2

rmt-server-config-2.6.5-lp151.2.18.2

rmt-server-debuginfo-2.6.5-lp151.2.18.2

rmt-server-debugsource-2.6.5-lp151.2.18.2

rmt-server-pubcloud-2.6.5-lp151.2.18.2

References

https://www.suse.com/security/cve/CVE-2019-16770.html

https://www.suse.com/security/cve/CVE-2019-5418.html

https://www.suse.com/security/cve/CVE-2019-5419.html

https://www.suse.com/security/cve/CVE-2019-5420.html

https://www.suse.com/security/cve/CVE-2020-11076.html

https://www.suse.com/security/cve/CVE-2020-11077.html

https://www.suse.com/security/cve/CVE-2020-15169.html

https://www.suse.com/security/cve/CVE-2020-5247.html

https://www.suse.com/security/cve/CVE-2020-5249.html

https://www.suse.com/security/cve/CVE-2020-5267.html

https://www.suse.com/security/cve/CVE-2020-8164.html

https://www.suse.com/security/cve/CVE-2020-8165.html

https://www.suse.com/security/cve/CVE-2020-8166.html

https://www.suse.com/security/cve/CVE-2020-8167.html

https://www.suse.com/security/cve/CVE-2020-8184.html

https://www.suse.com/security/cve/CVE-2020-8185.html

https://bugzilla.suse.com/1172177

https://bugzilla.suse.com/1172182

https://bugzilla.suse.com/1172184

https://bugzilla.suse.com/1172186

https://bugzilla.suse.com/117335...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2020:2000-1
Rating: important
Affected Products: openSUSE Leap 15.1

Topics%20covered

Topics Covered

security advisory update software patch bug fix important openSUSE rmt-server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here