May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0582-1: moderate: Recommended update for python-google-api-python-client
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-google-api-python-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0582-1 Rating: moderate References: #1088358 #1160933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-google-api-python-client fixes the following issues: - Fix dependencies to use google-auth instead of deprecated oauth2client (bsc#1160933, jsc#ECO-1148) python-cachetools 2.0.1 is shipped to the Public Cloud Module. python-google-auth 1.5.1 is shipped to the Public Cloud Module. python-google-api-python-client was updated to: - Upgrade to 1.7.4: just series of minor bugfixes - Fix check for error text on Python 3.7. (#278) - Use new Auth URIs. (#281) - Add code-of-conduct document. (#270) - Fix some typos in test_urllib3.py (#268) - Warn when using user credentials from the Cloud SDK (#266) - Add compute engine-based IDTokenCredentials (#236) - Corrected some typos (#265) Update to 1.4.2: - Raise a helpful exception when trying to refresh credentials without a refresh token. (#262) - Fix links to README and CONTRIBUTING in docs/index.rst. (#260) - Fix a typo in credentials.py. (#256) - Use pytest instead of py.test per upstream recommendation, #dropthedot. (#255) - Fix typo on exemple of jwt usage (#245) New upstream release 1.4.1 (bsc#1088358) - Added a check for the cryptography version before attempting to use it. + From version 1.4.0 - Added `cryptography`-based RSA signer and verifier. - Added `google.oauth2.service_account.IDTokenCredentials`. - Improved documentation around ID Tokens + From version 1.3.0 - Added ``google.oauth2.credentials.Credentials.from_authorized_user_file``. - Dropped direct pyasn1 dependency in favor of letting ``pyasn1-modules`` specify the right version. - ``default()`` now checks for the project ID environment var before warning about missing project ID. - Fixed the docstrings for ``has_scopes()`` and ``with_scopes()``. - Fixed example in docstring for ``ReadOnlyScoped``. - Made ``transport.requests`` use timeouts and retries to improve reliability. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-582=1 Package List: - openSUSE Leap 15.1 (noarch): python2-cachetools-2.0.1-lp151.3.3.1 python2-google-api-python-client-1.7.4-lp151.2.3.1 python2-google-auth-1.5.1-lp151.2.3.1 python2-google-auth-httplib2-0.0.3-lp151.2.1 python3-cachetools-2.0.1-lp151.3.3.1 python3-google-api-python-client-1.7.4-lp151.2.3.1 python3-google-auth-1.5.1-lp151.2.3.1 python3-google-auth-httplib2-0.0.3-lp151.2.1 References: https://bugzilla.suse.com/1088358 https://bugzilla.suse.com/1160933

1 0

openSUSE-RU-2020:0575-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0575-1 Rating: moderate References: #1165509 #1167861 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Fixed an issue where namespaces were not correctly destroyed (bsc#1167861) - Fixed an issue where 'enable-namespace' tried to enable idled namespaces (bsc#1165509) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-575=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-64.1-lp151.2.12.1 libndctl6-64.1-lp151.2.12.1 libndctl6-debuginfo-64.1-lp151.2.12.1 ndctl-64.1-lp151.2.12.1 ndctl-debuginfo-64.1-lp151.2.12.1 ndctl-debugsource-64.1-lp151.2.12.1 References: https://bugzilla.suse.com/1165509 https://bugzilla.suse.com/1167861

1 0

openSUSE-RU-2020:0581-1: moderate: Recommended update for psqlODBC
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for psqlODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0581-1 Rating: moderate References: #1166821 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psqlODBC fixes the following issue: - Fix build with PostgreSQL 11 and newer. (bsc#1166821) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-581=1 Package List: - openSUSE Leap 15.1 (x86_64): psqlODBC-10.01.0000-lp151.3.3.1 psqlODBC-debuginfo-10.01.0000-lp151.3.3.1 psqlODBC-debugsource-10.01.0000-lp151.3.3.1 References: https://bugzilla.suse.com/1166821

1 0

openSUSE-RU-2020:0573-1: moderate: Recommended update for libsolv
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0573-1 Rating: moderate References: #1159314 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsolv fixes the following issues: libsolv was updated to version 0.7.11: - fix solv_zchunk decoding error if large chunks are used (bsc#1159314) - treat retracted pathes as irrelevant - made add_update_target work with multiversion installs This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-573=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.11-lp151.2.13.1 libsolv-debugsource-0.7.11-lp151.2.13.1 libsolv-demo-0.7.11-lp151.2.13.1 libsolv-demo-debuginfo-0.7.11-lp151.2.13.1 libsolv-devel-0.7.11-lp151.2.13.1 libsolv-devel-debuginfo-0.7.11-lp151.2.13.1 libsolv-tools-0.7.11-lp151.2.13.1 libsolv-tools-debuginfo-0.7.11-lp151.2.13.1 libzypp-17.19.0-lp151.2.13.1 libzypp-debuginfo-17.19.0-lp151.2.13.1 libzypp-debugsource-17.19.0-lp151.2.13.1 libzypp-devel-17.19.0-lp151.2.13.1 libzypp-devel-doc-17.19.0-lp151.2.13.1 perl-solv-0.7.11-lp151.2.13.1 perl-solv-debuginfo-0.7.11-lp151.2.13.1 python-solv-0.7.11-lp151.2.13.1 python-solv-debuginfo-0.7.11-lp151.2.13.1 python3-solv-0.7.11-lp151.2.13.1 python3-solv-debuginfo-0.7.11-lp151.2.13.1 ruby-solv-0.7.11-lp151.2.13.1 ruby-solv-debuginfo-0.7.11-lp151.2.13.1 References: https://bugzilla.suse.com/1159314

1 0

openSUSE-RU-2020:0576-1: moderate: Recommended update for netcontrol
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for netcontrol ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0576-1 Rating: moderate References: #1027736 #1029201 #1132794 #1148646 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for netcontrol fixes the following issues: - bonding: prevent alarms when using unknown options. (bsc#1132794) The update will provide warnings and also error messages when using unknown options. - udev: use correct udev rule (write) lock directory - sysconfig: solve segfault on missed end-quote. (bsc#1027736) - solve segfault on invalid check in route creation. (bsc#1148646) - solve virsh iface-list not working as expected. (bsc#1029201) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-576=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libnetcontrol-devel-0.3.1-lp151.3.3.1 libnetcontrol0-0.3.1-lp151.3.3.1 libnetcontrol0-debuginfo-0.3.1-lp151.3.3.1 netcontrol-debugsource-0.3.1-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libnetcontrol0-32bit-0.3.1-lp151.3.3.1 libnetcontrol0-32bit-debuginfo-0.3.1-lp151.3.3.1 References: https://bugzilla.suse.com/1027736 https://bugzilla.suse.com/1029201 https://bugzilla.suse.com/1132794 https://bugzilla.suse.com/1148646

1 0

openSUSE-RU-2020:0570-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0570-1 Rating: moderate References: #1167810 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-compute-engine fixes the following issues: - Rename the sysctl file that applies the GCE network settings, so it is run after the default config and adjusts net.ipv4.conf.all.rp_filter correctly. (bsc#1167810) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-570=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190801-lp151.2.19.1 google-compute-engine-oslogin-20190801-lp151.2.19.1 google-compute-engine-oslogin-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190801-lp151.2.19.1 google-compute-engine-oslogin-32bit-debuginfo-20190801-lp151.2.19.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190801-lp151.2.19.1 References: https://bugzilla.suse.com/1167810

1 0

openSUSE-RU-2020:0583-1: moderate: Recommended update for python-pycups
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-pycups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0583-1 Rating: moderate References: #735865 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pycups fixes the following issues: - add BuildRequires: python-cups to printer driver packages. (bsc#735865) Package /usr/lib/rpm/postscriptdriver.prov again, in the new "cups-rpm-helper" subpackage. The file hasn't been packaged any more after the switch from python-cups to python-pycups. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-583=1 Package List: - openSUSE Leap 15.1 (x86_64): cups-rpm-helper-1.9.74-lp151.3.3.1 python-pycups-debuginfo-1.9.74-lp151.3.3.1 python-pycups-debugsource-1.9.74-lp151.3.3.1 python2-pycups-1.9.74-lp151.3.3.1 python2-pycups-debuginfo-1.9.74-lp151.3.3.1 python3-pycups-1.9.74-lp151.3.3.1 python3-pycups-debuginfo-1.9.74-lp151.3.3.1 References: https://bugzilla.suse.com/735865

1 0

openSUSE-RU-2020:0569-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0569-1 Rating: moderate References: #1170404 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.0.1. (boo#1170404) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-0-1-lts-has-been-released/7515 * Tweaked and improved the resources API * Added lxd cluster remove-raft-node disaster recovery function * Implemented ceph rbd/fs disk devices can now be attached to virtual machines * Fixed some data migration issues for users of < 3.0 upgrading to 4.0 directly * Fixed file descriptor leakage in exec Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-569=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.0.1-lp151.36.1 - openSUSE Leap 15.1 (x86_64): lxd-4.0.1-lp151.36.1 References: https://bugzilla.suse.com/1170404

1 0

openSUSE-SU-2020:0567-1: Security update for python-typed-ast
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for python-typed-ast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0567-1 Rating: low References: #1161562 #1161563 #1163532 Cross-References: CVE-2019-19274 CVE-2019-19275 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: Fixed an out-of-bounds read (bsc#1161563). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-567=1 Package List: - openSUSE Leap 15.1 (x86_64): python-typed-ast-debugsource-1.3.1-lp151.2.6.1 python3-typed-ast-1.3.1-lp151.2.6.1 python3-typed-ast-debuginfo-1.3.1-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-19274.html https://www.suse.com/security/cve/CVE-2019-19275.html https://bugzilla.suse.com/1161562 https://bugzilla.suse.com/1161563 https://bugzilla.suse.com/1163532

1 0

openSUSE-SU-2020:0566-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0566-1 Rating: critical References: #1169729 Cross-References: CVE-2020-6457 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.113 (boo#1169729): - CVE-2020-6457: Fixed a use after free in speech recognizer This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-566=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-81.0.4044.113-bp151.3.70.1 chromium-81.0.4044.113-bp151.3.70.1 References: https://www.suse.com/security/cve/CVE-2020-6457.html https://bugzilla.suse.com/1169729

1 0