October 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:1394-1: Recommended update for singularity
by maintenance＠opensuse.org 29 Oct '21

29 Oct '21

openSUSE Recommended Update: Recommended update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1394-1 Rating: low References: #1191697 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: singularity was updated to fix the following issues: - added example definitions for SLE12-SP5 and SLE15-SP3 * added files: SLE-12SP5.def SLE-15SP3.def - Utilize sysuser infrastructure to set group singularity. Updated to version 3.8.3 which fixes regression introduced in 3.8.1 that caused bind mounts without a destination to be added twice. Update to version 3.8.2 New features: * A new overlay command allows creation and addition of writable overlays. * Administrators can allow named users/groups to use specific CNI network configurations. Managed by directives in singularity.conf. * The build command now honors --nv, --rocm, and --bind flags, permitting builds that require GPU access or files bound in from the host. * A library service hostname can be specified as the first component of a library:// URL. Bug fixes: * Respect http proxy server environment variables in key operations. * When pushing SIF images to oras:// endpoints, work around Harbor & GitLab failure to accept the SifConfigMediaType. * Avoid a setfsuid compilation warning on some gcc versions. Fix a crash when silent/quiet log levels used on pulls from shub:// and http(s):// URIs. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1394=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64): singularity-3.8.3-bp153.2.6.1 References: https://bugzilla.suse.com/1191697

1 0

openSUSE-RU-2021:3581-1: important: Recommended update for SUSEConnect
by maintenance＠opensuse.org 29 Oct '21

29 Oct '21

openSUSE Recommended Update: Recommended update for SUSEConnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3581-1 Rating: important References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for SUSEConnect contains the following fix: - Update to 0.3.32: - Allow --regcode and --instance-data attributes at the same time. (jsc#PCT-164) - Document that 'debug' can also get set in the config file - --status will also print the subscription name Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3581=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): SUSEConnect-0.3.32-16.1 References:

1 0

openSUSE-RU-2021:3579-1: moderate: Recommended update for cloud-regionsrv-client
by maintenance＠opensuse.org 29 Oct '21

29 Oct '21

openSUSE Recommended Update: Recommended update for cloud-regionsrv-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3579-1 Rating: moderate References: #1182026 #1189362 SLE-21246 SLE-21247 SLE-21248 SLE-21249 SLE-21250 SLE-21278 SLE-21279 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes and contains 7 features can now be installed. Description: This update for cloud-regionsrv-client fixes the following issues: - Avoid race confition with ca-certificates. (bsc#1189362) + Make the service run after ca-sertificates is done + Attempt multiple times to update the trust chain - New package to enable/disable access due to AHB. (bsc#1182026, jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3579=1 Package List: - openSUSE Leap 15.3 (noarch): cloud-regionsrv-client-9.2.1-6.51.1 cloud-regionsrv-client-generic-config-1.0.0-6.51.1 cloud-regionsrv-client-plugin-azure-1.0.1-6.51.1 cloud-regionsrv-client-plugin-ec2-1.0.1-6.51.1 cloud-regionsrv-client-plugin-gce-1.0.0-6.51.1 References: https://bugzilla.suse.com/1182026 https://bugzilla.suse.com/1189362

1 0

openSUSE-RU-2021:3574-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 28 Oct '21

28 Oct '21

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3574-1 Rating: moderate References: #1190790 #1191821 SLE-21888 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for rpmlint fixes the following issues: - whitelisting of systemd-od (bsc#1191821) and pam_u2f (bsc#1190790 jsc#SLE-21888) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3574=1 Package List: - openSUSE Leap 15.3 (noarch): rpmlint-1.10-7.30.1 References: https://bugzilla.suse.com/1190790 https://bugzilla.suse.com/1191821

1 0

openSUSE-RU-2021:3571-1: moderate: Recommended update for postfix
by maintenance＠opensuse.org 28 Oct '21

28 Oct '21

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3571-1 Rating: moderate References: #1190945 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for postfix fixes the following issues: - Adapt config.postfix to filter out lmdb files from the alias maps (bsc#1190945) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3571=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postfix-3.5.9-5.9.2 postfix-bdb-3.5.9-5.9.2 postfix-bdb-debuginfo-3.5.9-5.9.2 postfix-bdb-debugsource-3.5.9-5.9.2 postfix-bdb-lmdb-3.5.9-5.9.2 postfix-bdb-lmdb-debuginfo-3.5.9-5.9.2 postfix-debuginfo-3.5.9-5.9.2 postfix-debugsource-3.5.9-5.9.2 postfix-devel-3.5.9-5.9.2 postfix-ldap-3.5.9-5.9.2 postfix-ldap-debuginfo-3.5.9-5.9.2 postfix-mysql-3.5.9-5.9.2 postfix-mysql-debuginfo-3.5.9-5.9.2 postfix-postgresql-3.5.9-5.9.2 postfix-postgresql-debuginfo-3.5.9-5.9.2 - openSUSE Leap 15.3 (noarch): postfix-doc-3.5.9-5.9.2 References: https://bugzilla.suse.com/1190945

1 0

openSUSE-RU-2021:3568-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 28 Oct '21

28 Oct '21

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3568-1 Rating: moderate References: #1191508 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Update to parse lifetime option correctly in ui_resource (bsc#1191508) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3568=1 Package List: - openSUSE Leap 15.3 (noarch): crmsh-4.3.1+20211012.52d4086a-5.68.1 crmsh-scripts-4.3.1+20211012.52d4086a-5.68.1 crmsh-test-4.3.1+20211012.52d4086a-5.68.1 References: https://bugzilla.suse.com/1191508

1 0

openSUSE-RU-2021:3573-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 28 Oct '21

28 Oct '21

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3573-1 Rating: moderate References: #1176164 #1191830 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-theme fixes the following issues: - Remove unnecesary rej file and add icon for Budgie pattern (bsc#1191830, bsc#1176164) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3573=1 Package List: - openSUSE Leap 15.3 (noarch): yast2-theme-4.3.11-3.6.1 References: https://bugzilla.suse.com/1176164 https://bugzilla.suse.com/1191830

1 0

openSUSE-RU-2021:3570-1: moderate: Recommended update for yast2-installation
by maintenance＠opensuse.org 28 Oct '21

28 Oct '21

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3570-1 Rating: moderate References: #1191160 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-installation fixes the following issues: - Fix file copying when using relurl:// and file:// naming schemes (bsc#1191160) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3570=1 Package List: - openSUSE Leap 15.3 (noarch): yast2-installation-4.3.43-3.13.1 References: https://bugzilla.suse.com/1191160

1 0

openSUSE-RU-2021:3569-1: moderate: Recommended update for orarun
by maintenance＠opensuse.org 28 Oct '21

28 Oct '21

openSUSE Recommended Update: Recommended update for orarun ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3569-1 Rating: moderate References: #1191350 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for orarun fixes the following issues: - Fixed warning messages, changed $ORACLE_HOME to $ORACLE_BASE/product/21c in oracle.sh (bsc#1191350) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3569=1 Package List: - openSUSE Leap 15.3 (s390x x86_64): orarun-2.1-17.3.1 References: https://bugzilla.suse.com/1191350

1 0

openSUSE-SU-2021:3557-1: moderate: Security update for salt
by opensuse-security＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3557-1 Rating: moderate References: #1190265 Cross-References: CVE-2021-21996 CVSS scores: CVE-2021-21996 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for salt fixes the following issues: - CVE-2021-21996: Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3557=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python3-salt-3002.2-50.1.15.1 salt-3002.2-50.1.15.1 salt-api-3002.2-50.1.15.1 salt-cloud-3002.2-50.1.15.1 salt-doc-3002.2-50.1.15.1 salt-master-3002.2-50.1.15.1 salt-minion-3002.2-50.1.15.1 salt-proxy-3002.2-50.1.15.1 salt-ssh-3002.2-50.1.15.1 salt-standalone-formulas-configuration-3002.2-50.1.15.1 salt-syndic-3002.2-50.1.15.1 salt-transactional-update-3002.2-50.1.15.1 - openSUSE Leap 15.3 (noarch): salt-bash-completion-3002.2-50.1.15.1 salt-fish-completion-3002.2-50.1.15.1 salt-zsh-completion-3002.2-50.1.15.1 References: https://www.suse.com/security/cve/CVE-2021-21996.html https://bugzilla.suse.com/1190265

1 0