April 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0102-1: moderate: Recommended update for python-ipython
by maintenance＠opensuse.org 02 Apr '22

02 Apr '22

openSUSE Recommended Update: Recommended update for python-ipython ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0102-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-ipython fixes the following issues: - Skip failing test_nest_embed on aarch64. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-102=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): python3-ipython-7.13.0-bp153.2.3.1 python3-ipython-iptest-7.13.0-bp153.2.3.1 References:

1 0

openSUSE-RU-2022:1092-1: critical: Recommended update for cloud-regionsrv-client
by maintenance＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Recommended Update: Recommended update for cloud-regionsrv-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1092-1 Rating: critical References: #1195414 #1195564 #1197113 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for cloud-regionsrv-client fixes the following issues: - Update to version 10.0.2 + Fix name of logfile in error message + Fix variable scoping to properly detect registration error + Cleanup any artifacts on registration failure + Fix latent bug with /etc/hosts population + Do not throw error when attemting to unregister a system that is not registered + Skip extension registration if the extension is recommended by the baseproduct as it gets automatically installed - Update to version 10.0.1 (bsc#1197113) + Provide status feedback on registration, success or failure + Log warning message if data provider is configured but no data can be retrieved - Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564) + The repo enablement timer cannot depend on 'guestregister.service' Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1092=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1092=1 Package List: - openSUSE Leap 15.4 (noarch): cloud-regionsrv-client-10.0.2-150000.6.65.1 cloud-regionsrv-client-addon-azure-1.0.3-150000.6.65.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.65.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.65.1 - openSUSE Leap 15.3 (noarch): cloud-regionsrv-client-10.0.2-150000.6.65.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.65.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.65.1 References: https://bugzilla.suse.com/1195414 https://bugzilla.suse.com/1195564 https://bugzilla.suse.com/1197113

1 0

openSUSE-SU-2022:1091-1: moderate: Security update for python
by opensuse-security＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1091-1 Rating: moderate References: #1175619 #1186819 #1194146 #1195396 Cross-References: CVE-2021-3572 CVE-2021-4189 CVE-2022-0391 CVSS scores: CVE-2021-3572 (SUSE): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N CVE-2021-4189 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-0391 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-0391 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for python fixes the following issues: - CVE-2022-0391: Fixed URL sanitization containing ASCII newline and tabs in urlparse (bsc#1195396). - CVE-2021-4189: Fixed ftplib not to trust the PASV response (bsc#1194146). - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1091=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1091=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-150000.38.2 libpython2_7-1_0-debuginfo-2.7.18-150000.38.2 python-2.7.18-150000.38.1 python-base-2.7.18-150000.38.2 python-base-debuginfo-2.7.18-150000.38.2 python-base-debugsource-2.7.18-150000.38.2 python-curses-2.7.18-150000.38.1 python-curses-debuginfo-2.7.18-150000.38.1 python-debuginfo-2.7.18-150000.38.1 python-debugsource-2.7.18-150000.38.1 python-demo-2.7.18-150000.38.1 python-devel-2.7.18-150000.38.2 python-gdbm-2.7.18-150000.38.1 python-gdbm-debuginfo-2.7.18-150000.38.1 python-idle-2.7.18-150000.38.1 python-tk-2.7.18-150000.38.1 python-tk-debuginfo-2.7.18-150000.38.1 python-xml-2.7.18-150000.38.2 python-xml-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.4 (noarch): python-doc-2.7.18-150000.38.1 python-doc-pdf-2.7.18-150000.38.1 - openSUSE Leap 15.4 (x86_64): libpython2_7-1_0-32bit-2.7.18-150000.38.2 libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.38.2 python-32bit-2.7.18-150000.38.1 python-32bit-debuginfo-2.7.18-150000.38.1 python-base-32bit-2.7.18-150000.38.2 python-base-32bit-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-150000.38.2 libpython2_7-1_0-debuginfo-2.7.18-150000.38.2 python-2.7.18-150000.38.1 python-base-2.7.18-150000.38.2 python-base-debuginfo-2.7.18-150000.38.2 python-base-debugsource-2.7.18-150000.38.2 python-curses-2.7.18-150000.38.1 python-curses-debuginfo-2.7.18-150000.38.1 python-debuginfo-2.7.18-150000.38.1 python-debugsource-2.7.18-150000.38.1 python-demo-2.7.18-150000.38.1 python-devel-2.7.18-150000.38.2 python-gdbm-2.7.18-150000.38.1 python-gdbm-debuginfo-2.7.18-150000.38.1 python-idle-2.7.18-150000.38.1 python-tk-2.7.18-150000.38.1 python-tk-debuginfo-2.7.18-150000.38.1 python-xml-2.7.18-150000.38.2 python-xml-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.3 (x86_64): libpython2_7-1_0-32bit-2.7.18-150000.38.2 libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.38.2 python-32bit-2.7.18-150000.38.1 python-32bit-debuginfo-2.7.18-150000.38.1 python-base-32bit-2.7.18-150000.38.2 python-base-32bit-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.3 (noarch): python-doc-2.7.18-150000.38.1 python-doc-pdf-2.7.18-150000.38.1 References: https://www.suse.com/security/cve/CVE-2021-3572.html https://www.suse.com/security/cve/CVE-2021-4189.html https://www.suse.com/security/cve/CVE-2022-0391.html https://bugzilla.suse.com/1175619 https://bugzilla.suse.com/1186819 https://bugzilla.suse.com/1194146 https://bugzilla.suse.com/1195396

1 0

openSUSE-RU-2022:1074-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1074-1 Rating: moderate References: #1193531 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init contains the following fixes: - Enable broader systemctl location. (bsc#1193531) - Remove unneeded BuildRequires on python3-nose. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1074=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1074=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cloud-init-21.2-8.54.2 cloud-init-config-suse-21.2-8.54.2 cloud-init-doc-21.2-8.54.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cloud-init-21.2-8.54.2 cloud-init-config-suse-21.2-8.54.2 cloud-init-doc-21.2-8.54.2 References: https://bugzilla.suse.com/1193531

1 0

openSUSE-SU-2022:1073-1: moderate: Security update for yaml-cpp
by opensuse-security＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Security Update: Security update for yaml-cpp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1073-1 Rating: moderate References: #1121227 #1121230 #1122004 #1122021 Cross-References: CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 CVSS scores: CVE-2018-20573 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-20573 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2018-20574 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-20574 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-6285 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-6285 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-6292 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-6292 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for yaml-cpp fixes the following issues: - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue (bsc#1121227). - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap (bsc#1121230). - CVE-2019-6285: Fixed remote DOS via a crafted YAML file in function SingleDocParser::HandleFlowSequence (bsc#1122004). - CVE-2019-6292: Fixed DOS by stack consumption in singledocparser.cpp (bsc#1122021). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1073=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyaml-cpp0_6-0.6.1-4.5.1 libyaml-cpp0_6-debuginfo-0.6.1-4.5.1 yaml-cpp-debugsource-0.6.1-4.5.1 yaml-cpp-devel-0.6.1-4.5.1 References: https://www.suse.com/security/cve/CVE-2018-20573.html https://www.suse.com/security/cve/CVE-2018-20574.html https://www.suse.com/security/cve/CVE-2019-6285.html https://www.suse.com/security/cve/CVE-2019-6292.html https://bugzilla.suse.com/1121227 https://bugzilla.suse.com/1121230 https://bugzilla.suse.com/1122004 https://bugzilla.suse.com/1122021

1 0

openSUSE-RU-2022:1070-1: Recommended update for release-notes-sles
by maintenance＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Recommended Update: Recommended update for release-notes-sles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1070-1 Rating: low References: #933411 SLE-14763 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for release-notes-sles fixes the following issues: Update the release notes to version 15.3.20220324. (bsc#933411) - Move KubeVirt out of technology previews for Intel 64/AMD64 (x86-64) - Fix GICv4.1 acronym in aarch64. (jsc#SLE-14763) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1070=1 Package List: - openSUSE Leap 15.3 (noarch): release-notes-sles-15.3.20220324-150300.3.23.1 References: https://bugzilla.suse.com/933411

1 0