Lucene search

K
suseSuseOPENSUSE-SU-2019:2628-1
HistoryDec 04, 2019 - 12:00 a.m.

Security update for calamares (moderate)

2019-12-0400:00:00
lists.opensuse.org
97

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for calamares fixes the following issues:

  • Launch with β€œpkexec calamares” in openSUSE Tumbleweed, but launch with
    β€œxdg-su -c calamares” in openSUSE Leap 15.

Update to Calamares 3.2.15:

  • β€œdisplaymanager” module now treats β€œsysconfig” as a regular entry in the
    β€œdisplaymanagers” list, and the β€œsysconfigSetup” key is used as a
    shorthand to force only that entry in the list.
  • β€œmachineid” module has been re-written in C++ and extended with a new
    configuration key to generate urandom pool data.
  • β€œunpackfs” now supports a special β€œsourcefs” value of file for copying
    single files (optionally with renaming) or directory trees to the target
    system.
  • β€œunpackfs” now support an β€œexclude” and β€œexcludeFile” setting for
    excluding particular files or patters from unpacking.

Update to Calamares 3.2.14:

  • β€œlocale” module no longer recognizes the legacy GeoIP configuration.
    This has been deprecated since Calamares 3.2.8 and is now removed.
  • β€œpackagechooser” module can now be custom-labeled in the overall
    progress (left-hand column).
  • β€œdisplaymanager” module now recognizes KDE Plasma 5.17.
  • β€œdisplaymanager” module now can handle Wayland sessions and can detect
    sessions from their .desktop files.
  • β€œunpackfs” now has special handling for sourcefs setting β€œfile”.

Update to Calamares 3.2.13.

More about upstream changes:

 https://calamares.io/calamares-3.2.13-is-out/ and

https://calamares.io/calamares-3.2.12-is-out/

Update to Calamares 3.2.11:

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or β€œzypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2019-2628=1

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-2628=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.1x86_64<Β - openSUSE Leap 15.1 (x86_64):- openSUSE Leap 15.1 (x86_64):.x86_64.rpm
openSUSE Leap15.1noarch<Β - openSUSE Leap 15.1 (noarch):- openSUSE Leap 15.1 (noarch):.noarch.rpm
openSUSE Leap15.0x86_64<Β - openSUSE Leap 15.0 (x86_64):- openSUSE Leap 15.0 (x86_64):.x86_64.rpm
openSUSE Leap15.0noarch<Β - openSUSE Leap 15.0 (noarch):- openSUSE Leap 15.0 (noarch):.noarch.rpm

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P