January 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:0182-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0182-1 Rating: important References: #1194019 Cross-References: CVE-2019-8766 CVE-2019-8782 CVE-2019-8808 CVE-2019-8815 CVE-2020-13753 CVE-2020-27918 CVE-2020-29623 CVE-2020-3902 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9947 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2021-1765 CVE-2021-1788 CVE-2021-1817 CVE-2021-1820 CVE-2021-1825 CVE-2021-1826 CVE-2021-1844 CVE-2021-1871 CVE-2021-30661 CVE-2021-30666 CVE-2021-30682 CVE-2021-30761 CVE-2021-30762 CVE-2021-30809 CVE-2021-30818 CVE-2021-30823 CVE-2021-30836 CVE-2021-30846 CVE-2021-30848 CVE-2021-30849 CVE-2021-30851 CVE-2021-30858 CVE-2021-30884 CVE-2021-30887 CVE-2021-30888 CVE-2021-30889 CVE-2021-30890 CVE-2021-30897 CVSS scores: CVE-2019-8766 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8766 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8782 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8782 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8808 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8808 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8815 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8815 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-13753 (NVD) : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2020-13753 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-27918 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-27918 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-29623 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2020-29623 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2020-3902 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-3902 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-9802 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9802 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-9803 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9803 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-9805 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9805 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9947 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9947 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9948 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9951 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9951 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9952 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9952 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-1765 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1765 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1788 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1788 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1844 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1871 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-1871 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30809 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30809 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30818 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30818 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30823 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-30823 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-30836 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30836 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30846 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30846 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30848 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30848 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30849 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30849 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30851 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30851 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30858 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30858 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30884 (NVD) : 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVE-2021-30884 (SUSE): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVE-2021-30887 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-30887 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-30888 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-30888 (SUSE): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-30889 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30889 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30890 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-30890 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-30897 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 43 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-182=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.34.3-23.3 libjavascriptcoregtk-4_0-18-debuginfo-2.34.3-23.3 libwebkit2gtk-4_0-37-2.34.3-23.3 libwebkit2gtk-4_0-37-debuginfo-2.34.3-23.3 typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 typelib-1_0-WebKit2-4_0-2.34.3-23.3 typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 webkit-jsc-4-2.34.3-23.3 webkit-jsc-4-debuginfo-2.34.3-23.3 webkit2gtk-4_0-injected-bundles-2.34.3-23.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.34.3-23.3 webkit2gtk3-debugsource-2.34.3-23.3 webkit2gtk3-devel-2.34.3-23.3 webkit2gtk3-minibrowser-2.34.3-23.3 webkit2gtk3-minibrowser-debuginfo-2.34.3-23.3 - openSUSE Leap 15.3 (noarch): libwebkit2gtk3-lang-2.34.3-23.3 - openSUSE Leap 15.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.34.3-23.3 libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 libwebkit2gtk-4_0-37-32bit-debuginfo-2.34.3-23.3 References: https://www.suse.com/security/cve/CVE-2019-8766.html https://www.suse.com/security/cve/CVE-2019-8782.html https://www.suse.com/security/cve/CVE-2019-8808.html https://www.suse.com/security/cve/CVE-2019-8815.html https://www.suse.com/security/cve/CVE-2020-13753.html https://www.suse.com/security/cve/CVE-2020-27918.html https://www.suse.com/security/cve/CVE-2020-29623.html https://www.suse.com/security/cve/CVE-2020-3902.html https://www.suse.com/security/cve/CVE-2020-9802.html https://www.suse.com/security/cve/CVE-2020-9803.html https://www.suse.com/security/cve/CVE-2020-9805.html https://www.suse.com/security/cve/CVE-2020-9947.html https://www.suse.com/security/cve/CVE-2020-9948.html https://www.suse.com/security/cve/CVE-2020-9951.html https://www.suse.com/security/cve/CVE-2020-9952.html https://www.suse.com/security/cve/CVE-2021-1765.html https://www.suse.com/security/cve/CVE-2021-1788.html https://www.suse.com/security/cve/CVE-2021-1817.html https://www.suse.com/security/cve/CVE-2021-1820.html https://www.suse.com/security/cve/CVE-2021-1825.html https://www.suse.com/security/cve/CVE-2021-1826.html https://www.suse.com/security/cve/CVE-2021-1844.html https://www.suse.com/security/cve/CVE-2021-1871.html https://www.suse.com/security/cve/CVE-2021-30661.html https://www.suse.com/security/cve/CVE-2021-30666.html https://www.suse.com/security/cve/CVE-2021-30682.html https://www.suse.com/security/cve/CVE-2021-30761.html https://www.suse.com/security/cve/CVE-2021-30762.html https://www.suse.com/security/cve/CVE-2021-30809.html https://www.suse.com/security/cve/CVE-2021-30818.html https://www.suse.com/security/cve/CVE-2021-30823.html https://www.suse.com/security/cve/CVE-2021-30836.html https://www.suse.com/security/cve/CVE-2021-30846.html https://www.suse.com/security/cve/CVE-2021-30848.html https://www.suse.com/security/cve/CVE-2021-30849.html https://www.suse.com/security/cve/CVE-2021-30851.html https://www.suse.com/security/cve/CVE-2021-30858.html https://www.suse.com/security/cve/CVE-2021-30884.html https://www.suse.com/security/cve/CVE-2021-30887.html https://www.suse.com/security/cve/CVE-2021-30888.html https://www.suse.com/security/cve/CVE-2021-30889.html https://www.suse.com/security/cve/CVE-2021-30890.html https://www.suse.com/security/cve/CVE-2021-30897.html https://bugzilla.suse.com/1194019

1 0

openSUSE-SU-2022:0184-1: important: Security update for json-c
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for json-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0184-1 Rating: important References: #1171479 Cross-References: CVE-2020-12762 CVSS scores: CVE-2020-12762 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-12762 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-184=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): json-c-debugsource-0.13-3.3.1 libjson-c-devel-0.13-3.3.1 libjson-c3-0.13-3.3.1 libjson-c3-debuginfo-0.13-3.3.1 - openSUSE Leap 15.3 (noarch): libjson-c-doc-0.13-3.3.1 - openSUSE Leap 15.3 (x86_64): libjson-c3-32bit-0.13-3.3.1 libjson-c3-32bit-debuginfo-0.13-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12762.html https://bugzilla.suse.com/1171479

1 0

openSUSE-RU-2022:0022-1: moderate: Recommended update for galera-4
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for galera-4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0022-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for galera-4 fixes the following issues: This update ships galera-4 in version 26.4.10: http://releases.galeracluster.com/galera-4/release-notes-galera-26.4.10.txt Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-22=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): galera-4-26.4.10-bp153.2.1 galera-4-wsrep-provider-26.4.10-bp153.2.1 References:

1 0

openSUSE-RU-2022:0021-1: moderate: Recommended update for youtube-dl
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for youtube-dl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0021-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for youtube-dl fixes the following issues: - The youtube-dl SRPM (producing: yt-dlp BRPM) switches back from the yt-dlp source to the to youtube-dl source and produces the youtube-dl BRPM again. (Project has seen activity). yt-dlp is now its own SRPM. - Switch to youtube-dl 2021.12.17 * youtube: Update signature function patterns * liveleak: Remove extractor * orf:tvthek: Add support for MPD formats - Update to 2021.06.06 * [facebook] Improve login required detection * [youporn] Fix formats and view count extraction * [orf:tvthek] Fix thumbnails extraction * [formula1] Fix extraction * [ard] Relax URL regular expression and fix video ids * [ustream] Detect https embeds * [ted] Prefer own formats over external sources * [twitch:clips] Improve extraction * [twitch:clips] Add access token query to download URLs * [youtube] Fix get_video_info request * [vimeo] Fix vimeo pro embed extraction * [redbulltv] Fix embed data extraction * [shahid] Relax URL regular expression - Update to release 2021.05.16 * Add support for sibnet embeds - Update to release 2021.04.17 * [curiositystream] fix format extraction * [cbssports] fix extraction * [mtv] Fix Viacom A/B Testing Video Player extraction * [youtube:tab] Pass innertube context and x-goog-visitor-id header along with continuation requests * [youtube] Improve URL to extractor routing * [youtube] Add more invidious instances * [youtube:tab] Detect series playlist on playlists page * [youtube:tab] Improve grid extraction * [youtube] Improve stretch extraction and fix stretched ratio calculation * [utils] Add support for support for experimental HTTP response status code 308 Permanent Redirect - Update to release 2021.04.07 * youtube: Add support for hashtag videos extraction - The youtube-dl SRPM (producing: yt-dlp BRPM) switches back from the yt-dlp source to the to youtube-dl source and produces the youtube-dl BRPM again. (Project has seen activity). yt-dlp is now its own SRPM. - Switch to youtube-dl 2021.12.17 * youtube: Update signature function patterns * liveleak: Remove extractor * orf:tvthek: Add support for MPD formats - Update to 2021.06.06 * [facebook] Improve login required detection * [youporn] Fix formats and view count extraction * [orf:tvthek] Fix thumbnails extraction * [formula1] Fix extraction * [ard] Relax URL regular expression and fix video ids * [ustream] Detect https embeds * [ted] Prefer own formats over external sources * [twitch:clips] Improve extraction * [twitch:clips] Add access token query to download URLs * [youtube] Fix get_video_info request * [vimeo] Fix vimeo pro embed extraction * [redbulltv] Fix embed data extraction * [shahid] Relax URL regular expression - Update to release 2021.05.16 * Add support for sibnet embeds - Update to release 2021.04.17 * [curiositystream] fix format extraction * [cbssports] fix extraction * [mtv] Fix Viacom A/B Testing Video Player extraction * [youtube:tab] Pass innertube context and x-goog-visitor-id header along with continuation requests * [youtube] Improve URL to extractor routing * [youtube] Add more invidious instances * [youtube:tab] Detect series playlist on playlists page * [youtube:tab] Improve grid extraction * [youtube] Improve stretch extraction and fix stretched ratio calculation * [utils] Add support for support for experimental HTTP response status code 308 Permanent Redirect - Update to release 2021.04.07 * youtube: Add support for hashtag videos extraction Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-21=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): python2-youtube-dl-2020.05.08-bp153.2.5.1 python3-youtube-dl-2020.05.08-bp153.2.5.1 youtube-dl-2021.12.17-bp153.2.3.1 youtube-dl-bash-completion-2021.12.17-bp153.2.3.1 youtube-dl-fish-completion-2021.12.17-bp153.2.3.1 youtube-dl-zsh-completion-2021.12.17-bp153.2.3.1 References:

1 0

openSUSE-SU-2022:0177-1: Security update for qemu
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0177-1 Rating: low References: #1181361 Cross-References: CVE-2021-20196 CVSS scores: CVE-2021-20196 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-20196 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qemu fixes the following issues: - CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-177=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-5.2.0-150300.109.2 qemu-arm-5.2.0-150300.109.2 qemu-arm-debuginfo-5.2.0-150300.109.2 qemu-audio-alsa-5.2.0-150300.109.2 qemu-audio-alsa-debuginfo-5.2.0-150300.109.2 qemu-audio-pa-5.2.0-150300.109.2 qemu-audio-pa-debuginfo-5.2.0-150300.109.2 qemu-audio-spice-5.2.0-150300.109.2 qemu-audio-spice-debuginfo-5.2.0-150300.109.2 qemu-block-curl-5.2.0-150300.109.2 qemu-block-curl-debuginfo-5.2.0-150300.109.2 qemu-block-dmg-5.2.0-150300.109.2 qemu-block-dmg-debuginfo-5.2.0-150300.109.2 qemu-block-gluster-5.2.0-150300.109.2 qemu-block-gluster-debuginfo-5.2.0-150300.109.2 qemu-block-iscsi-5.2.0-150300.109.2 qemu-block-iscsi-debuginfo-5.2.0-150300.109.2 qemu-block-nfs-5.2.0-150300.109.2 qemu-block-nfs-debuginfo-5.2.0-150300.109.2 qemu-block-rbd-5.2.0-150300.109.2 qemu-block-rbd-debuginfo-5.2.0-150300.109.2 qemu-block-ssh-5.2.0-150300.109.2 qemu-block-ssh-debuginfo-5.2.0-150300.109.2 qemu-chardev-baum-5.2.0-150300.109.2 qemu-chardev-baum-debuginfo-5.2.0-150300.109.2 qemu-chardev-spice-5.2.0-150300.109.2 qemu-chardev-spice-debuginfo-5.2.0-150300.109.2 qemu-debuginfo-5.2.0-150300.109.2 qemu-debugsource-5.2.0-150300.109.2 qemu-extra-5.2.0-150300.109.2 qemu-extra-debuginfo-5.2.0-150300.109.2 qemu-guest-agent-5.2.0-150300.109.2 qemu-guest-agent-debuginfo-5.2.0-150300.109.2 qemu-hw-display-qxl-5.2.0-150300.109.2 qemu-hw-display-qxl-debuginfo-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-debuginfo-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-pci-debuginfo-5.2.0-150300.109.2 qemu-hw-display-virtio-vga-5.2.0-150300.109.2 qemu-hw-display-virtio-vga-debuginfo-5.2.0-150300.109.2 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.109.2 qemu-hw-s390x-virtio-gpu-ccw-debuginfo-5.2.0-150300.109.2 qemu-hw-usb-redirect-5.2.0-150300.109.2 qemu-hw-usb-redirect-debuginfo-5.2.0-150300.109.2 qemu-hw-usb-smartcard-5.2.0-150300.109.2 qemu-hw-usb-smartcard-debuginfo-5.2.0-150300.109.2 qemu-ivshmem-tools-5.2.0-150300.109.2 qemu-ivshmem-tools-debuginfo-5.2.0-150300.109.2 qemu-ksm-5.2.0-150300.109.2 qemu-lang-5.2.0-150300.109.2 qemu-linux-user-5.2.0-150300.109.2 qemu-linux-user-debuginfo-5.2.0-150300.109.2 qemu-linux-user-debugsource-5.2.0-150300.109.2 qemu-ppc-5.2.0-150300.109.2 qemu-ppc-debuginfo-5.2.0-150300.109.2 qemu-s390x-5.2.0-150300.109.2 qemu-s390x-debuginfo-5.2.0-150300.109.2 qemu-testsuite-5.2.0-150300.109.4 qemu-tools-5.2.0-150300.109.2 qemu-tools-debuginfo-5.2.0-150300.109.2 qemu-ui-curses-5.2.0-150300.109.2 qemu-ui-curses-debuginfo-5.2.0-150300.109.2 qemu-ui-gtk-5.2.0-150300.109.2 qemu-ui-gtk-debuginfo-5.2.0-150300.109.2 qemu-ui-opengl-5.2.0-150300.109.2 qemu-ui-opengl-debuginfo-5.2.0-150300.109.2 qemu-ui-spice-app-5.2.0-150300.109.2 qemu-ui-spice-app-debuginfo-5.2.0-150300.109.2 qemu-ui-spice-core-5.2.0-150300.109.2 qemu-ui-spice-core-debuginfo-5.2.0-150300.109.2 qemu-vhost-user-gpu-5.2.0-150300.109.2 qemu-vhost-user-gpu-debuginfo-5.2.0-150300.109.2 qemu-x86-5.2.0-150300.109.2 qemu-x86-debuginfo-5.2.0-150300.109.2 - openSUSE Leap 15.3 (s390x x86_64): qemu-kvm-5.2.0-150300.109.2 - openSUSE Leap 15.3 (noarch): qemu-ipxe-1.0.0+-150300.109.2 qemu-microvm-5.2.0-150300.109.2 qemu-seabios-1.14.0_0_g155821a-150300.109.2 qemu-sgabios-8-150300.109.2 qemu-skiboot-5.2.0-150300.109.2 qemu-vgabios-1.14.0_0_g155821a-150300.109.2 References: https://www.suse.com/security/cve/CVE-2021-20196.html https://bugzilla.suse.com/1181361

1 0

openSUSE-SU-2022:0178-1: important: Security update for expat
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0178-1 Rating: important References: #1194251 #1194362 #1194474 #1194476 #1194477 #1194478 #1194479 #1194480 Cross-References: CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 CVSS scores: CVE-2021-45960 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-45960 (SUSE): 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2021-46143 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-46143 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22822 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22822 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22823 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22823 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22824 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22824 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22825 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22825 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22826 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22826 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22827 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22827 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362). - CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474). - CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476). - CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477). - CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478). - CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479). - CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-178=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): expat-2.2.5-3.9.1 expat-debuginfo-2.2.5-3.9.1 expat-debugsource-2.2.5-3.9.1 libexpat-devel-2.2.5-3.9.1 libexpat1-2.2.5-3.9.1 libexpat1-debuginfo-2.2.5-3.9.1 - openSUSE Leap 15.3 (x86_64): expat-32bit-debuginfo-2.2.5-3.9.1 libexpat-devel-32bit-2.2.5-3.9.1 libexpat1-32bit-2.2.5-3.9.1 libexpat1-32bit-debuginfo-2.2.5-3.9.1 References: https://www.suse.com/security/cve/CVE-2021-45960.html https://www.suse.com/security/cve/CVE-2021-46143.html https://www.suse.com/security/cve/CVE-2022-22822.html https://www.suse.com/security/cve/CVE-2022-22823.html https://www.suse.com/security/cve/CVE-2022-22824.html https://www.suse.com/security/cve/CVE-2022-22825.html https://www.suse.com/security/cve/CVE-2022-22826.html https://www.suse.com/security/cve/CVE-2022-22827.html https://bugzilla.suse.com/1194251 https://bugzilla.suse.com/1194362 https://bugzilla.suse.com/1194474 https://bugzilla.suse.com/1194476 https://bugzilla.suse.com/1194477 https://bugzilla.suse.com/1194478 https://bugzilla.suse.com/1194479 https://bugzilla.suse.com/1194480

1 0

openSUSE-SU-2022:0171-1: moderate: Security update for rust1.55
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for rust1.55 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0171-1 Rating: moderate References: #1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rust1.55 fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-171=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo1.55-1.55.0-150300.7.6.1 cargo1.55-debuginfo-1.55.0-150300.7.6.1 rust1.55-1.55.0-150300.7.6.1 rust1.55-debuginfo-1.55.0-150300.7.6.1 References: https://www.suse.com/security/cve/CVE-2022-21658.html https://bugzilla.suse.com/1194767

1 0

openSUSE-SU-2022:0176-1: important: Security update for unbound
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for unbound ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0176-1 Rating: important References: #1076963 #1112009 #1112033 #1179191 #1185382 #1185383 #1185384 #1185385 #1185386 #1185387 #1185388 #1185389 #1185390 #1185391 #1185392 #1185393 Cross-References: CVE-2019-25031 CVE-2019-25032 CVE-2019-25033 CVE-2019-25034 CVE-2019-25035 CVE-2019-25036 CVE-2019-25037 CVE-2019-25038 CVE-2019-25039 CVE-2019-25040 CVE-2019-25041 CVE-2019-25042 CVE-2020-28935 CVSS scores: CVE-2019-25031 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2019-25031 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2019-25032 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25032 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25033 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25033 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25034 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25034 (SUSE): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2019-25035 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25035 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2019-25036 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-25036 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25037 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-25037 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25038 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25038 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25039 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25039 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25040 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-25040 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25041 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-25041 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-25042 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-25042 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2020-28935 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-28935 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has three fixes is now available. Description: This update for unbound fixes the following issues: - CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382). - CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383). - CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384). - CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385). - CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386). - CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387). - CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388). - CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389). - CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390). - CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391). - CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392). - CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393). - CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-176=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-176=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libunbound2-1.6.8-10.6.1 libunbound2-debuginfo-1.6.8-10.6.1 unbound-1.6.8-10.6.1 unbound-anchor-1.6.8-10.6.1 unbound-anchor-debuginfo-1.6.8-10.6.1 unbound-debuginfo-1.6.8-10.6.1 unbound-debugsource-1.6.8-10.6.1 unbound-devel-1.6.8-10.6.1 unbound-python-1.6.8-10.6.1 unbound-python-debuginfo-1.6.8-10.6.1 - openSUSE Leap 15.4 (noarch): unbound-munin-1.6.8-10.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libunbound2-1.6.8-10.6.1 libunbound2-debuginfo-1.6.8-10.6.1 unbound-1.6.8-10.6.1 unbound-anchor-1.6.8-10.6.1 unbound-anchor-debuginfo-1.6.8-10.6.1 unbound-debuginfo-1.6.8-10.6.1 unbound-debugsource-1.6.8-10.6.1 unbound-devel-1.6.8-10.6.1 unbound-python-1.6.8-10.6.1 unbound-python-debuginfo-1.6.8-10.6.1 - openSUSE Leap 15.3 (noarch): unbound-munin-1.6.8-10.6.1 References: https://www.suse.com/security/cve/CVE-2019-25031.html https://www.suse.com/security/cve/CVE-2019-25032.html https://www.suse.com/security/cve/CVE-2019-25033.html https://www.suse.com/security/cve/CVE-2019-25034.html https://www.suse.com/security/cve/CVE-2019-25035.html https://www.suse.com/security/cve/CVE-2019-25036.html https://www.suse.com/security/cve/CVE-2019-25037.html https://www.suse.com/security/cve/CVE-2019-25038.html https://www.suse.com/security/cve/CVE-2019-25039.html https://www.suse.com/security/cve/CVE-2019-25040.html https://www.suse.com/security/cve/CVE-2019-25041.html https://www.suse.com/security/cve/CVE-2019-25042.html https://www.suse.com/security/cve/CVE-2020-28935.html https://bugzilla.suse.com/1076963 https://bugzilla.suse.com/1112009 https://bugzilla.suse.com/1112033 https://bugzilla.suse.com/1179191 https://bugzilla.suse.com/1185382 https://bugzilla.suse.com/1185383 https://bugzilla.suse.com/1185384 https://bugzilla.suse.com/1185385 https://bugzilla.suse.com/1185386 https://bugzilla.suse.com/1185387 https://bugzilla.suse.com/1185388 https://bugzilla.suse.com/1185389 https://bugzilla.suse.com/1185390 https://bugzilla.suse.com/1185391 https://bugzilla.suse.com/1185392 https://bugzilla.suse.com/1185393

1 0

openSUSE-SU-2022:0175-1: moderate: Security update for rust1.57
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for rust1.57 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0175-1 Rating: moderate References: #1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rust1.57 fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-175=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo1.57-1.57.0-150300.7.7.1 cargo1.57-debuginfo-1.57.0-150300.7.7.1 rust1.57-1.57.0-150300.7.7.1 rust1.57-debuginfo-1.57.0-150300.7.7.1 References: https://www.suse.com/security/cve/CVE-2022-21658.html https://bugzilla.suse.com/1194767

1 0

openSUSE-RU-2022:0170-1: important: Recommended update for python3-azuremetadata
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for python3-azuremetadata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0170-1 Rating: important References: #1175609 #1175610 #1194663 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python3-azuremetadata fixes the following issues: - Version 5.1.5 (bsc#1194663) + Handle lsblk output format change. The json data now contains "mountpoints" instead of "mountpoint" + Use versions endpoint to list the available versions + Add bypass proxy + Update way to check classic vms - Fix provides directive (bsc#1175609, bsc#1175610) + The provides directive must set a version or update does not work as expected Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-170=1 Package List: - openSUSE Leap 15.3 (noarch): python3-azuremetadata-5.1.5-1.23.1 References: https://bugzilla.suse.com/1175609 https://bugzilla.suse.com/1175610 https://bugzilla.suse.com/1194663

1 0