{"id":"SUSE-SU-2025:20224-1","aliases":[],"status":"published","title":"Security update for cloud-regionsrv-client, python-toml","description":"This update for cloud-regionsrv-client, python-toml contains the following fixes:\n\ncloud-regionsrv-client: \n- Update to 10.3.11 (bsc#1234050)\n  + Send registration code for the extensions, not only base product\n\n- Update to 10.3.9: (bsc#1234050)\n  + Send registration code for the extensions, not only base product\n\n- Update to 10.3.8: (bsc#1233333)\n  + Fix the package requirements for cloud-regionsrv-client\n  + Follow changes to suseconnect error reporting from stdout to stderr\n\n- Update to 10.3.7: (bsc#1232770)\n  + Fix the product triplet for LTSS, it is always SLES-LTSS, not\n    $BASEPRODUCT-LTSS\n\n- Update to 10.3.6: (jsc#PCT-471, bsc#1230615)\n  + Fix sudo setup\n    ~ permissions cloudguestregistryauth\n    ~ directory ownership /etc/sudoers.d\n  + spec file\n    ~ Remove traces of registry related entries on SLE 12\n  + Forward port\n    ~ fix for sles12 disable registry\n    ~ fix for sles12 no trans_update\n  + Deregister non free extensions at registercloudguest --clean\n  + Fix registry cleanup at registercloudguest --clean, don't remove files\n  + Prevent duplicate search entries in registry setup\n- Update EC2 plugin to 1.0.5\n  + Switch to using the region endpoint from IMDS to determine the region\n    instead of deriving the data from the availability zone\n\n- Update to 10.3.5:\n  + Update spec file to build in all code streams and have proper dependencies.\n\n- Update to 10.3.4:\n  + Modify the message when network access over a specific IP version does\n    not work. This is an informational message and should not look like\n    an error\n  + Inform the user that LTSS registration takes a little longer\n  + fix for sles12 no transactional update:\n    + SLE 12 family has no products with transactional-update we do not\n      need to look for this condition\n- From 10.3.3: (bsc#1229472)\n  + Handle changes in process structure to properly identify the running\n    zypper parent process and only check for 1 PID\n- From 10.3.2:\n  + Remove rgnsrv-clnt-fix-docker-setup patch included upstream\n- From 10.3.1: (jsc#PCT-400)\n  + Add support for LTSS registration\n  + Add fix for sles12 disable registry issue:\n    ~ No container support in SLE 12\n\n- Add fix for docker setup: (bsc#1229137)\n  + The entry for the update infrastructure registry mirror was written\n    incorrectly causing docker daemon startup to fail.\n\n- Update to version 10.3.0: (bsc#1227308, bsc#1222985)\n  + Add support for sidecar registry\n    Podman and rootless Docker support to set up the necessary \n    configuration for the container engines to run as defined\n  + Add running command as root through sudoers file\n\npython-toml: \n-  Includes python311-toml as dependency for cloud-regionsrv-client","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-02-20T12:41:47Z","modified":"2026-03-23T04:50:44Z","fixes":[{"ecosystem":"SUSE:Linux Micro 6.1","package":"cloud-regionsrv-client","fixed_in":["10.3.11-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"python-toml","fixed_in":["0.10.2-slfo.1.1_1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"cloud-regionsrv-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.11-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python-toml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-slfo.1.1_1.2"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520224-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222985","tags":["report"]},{"url":"https://bugzilla.suse.com/1227308","tags":["report"]},{"url":"https://bugzilla.suse.com/1229137","tags":["report"]},{"url":"https://bugzilla.suse.com/1229472","tags":["report"]},{"url":"https://bugzilla.suse.com/1230615","tags":["report"]},{"url":"https://bugzilla.suse.com/1232770","tags":["report"]},{"url":"https://bugzilla.suse.com/1233333","tags":["report"]},{"url":"https://bugzilla.suse.com/1234050","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2025:20224-1","title":"Security update for cloud-regionsrv-client, python-toml","description":"This update for cloud-regionsrv-client, python-toml contains the following fixes:\n\ncloud-regionsrv-client: \n- Update to 10.3.11 (bsc#1234050)\n  + Send registration code for the extensions, not only base product\n\n- Update to 10.3.9: (bsc#1234050)\n  + Send registration code for the extensions, not only base product\n\n- Update to 10.3.8: (bsc#1233333)\n  + Fix the package requirements for cloud-regionsrv-client\n  + Follow changes to suseconnect error reporting from stdout to stderr\n\n- Update to 10.3.7: (bsc#1232770)\n  + Fix the product triplet for LTSS, it is always SLES-LTSS, not\n    $BASEPRODUCT-LTSS\n\n- Update to 10.3.6: (jsc#PCT-471, bsc#1230615)\n  + Fix sudo setup\n    ~ permissions cloudguestregistryauth\n    ~ directory ownership /etc/sudoers.d\n  + spec file\n    ~ Remove traces of registry related entries on SLE 12\n  + Forward port\n    ~ fix for sles12 disable registry\n    ~ fix for sles12 no trans_update\n  + Deregister non free extensions at registercloudguest --clean\n  + Fix registry cleanup at registercloudguest --clean, don't remove files\n  + Prevent duplicate search entries in registry setup\n- Update EC2 plugin to 1.0.5\n  + Switch to using the region endpoint from IMDS to determine the region\n    instead of deriving the data from the availability zone\n\n- Update to 10.3.5:\n  + Update spec file to build in all code streams and have proper dependencies.\n\n- Update to 10.3.4:\n  + Modify the message when network access over a specific IP version does\n    not work. This is an informational message and should not look like\n    an error\n  + Inform the user that LTSS registration takes a little longer\n  + fix for sles12 no transactional update:\n    + SLE 12 family has no products with transactional-update we do not\n      need to look for this condition\n- From 10.3.3: (bsc#1229472)\n  + Handle changes in process structure to properly identify the running\n    zypper parent process and only check for 1 PID\n- From 10.3.2:\n  + Remove rgnsrv-clnt-fix-docker-setup patch included upstream\n- From 10.3.1: (jsc#PCT-400)\n  + Add support for LTSS registration\n  + Add fix for sles12 disable registry issue:\n    ~ No container support in SLE 12\n\n- Add fix for docker setup: (bsc#1229137)\n  + The entry for the update infrastructure registry mirror was written\n    incorrectly causing docker daemon startup to fail.\n\n- Update to version 10.3.0: (bsc#1227308, bsc#1222985)\n  + Add support for sidecar registry\n    Podman and rootless Docker support to set up the necessary \n    configuration for the container engines to run as defined\n  + Add running command as root through sudoers file\n\npython-toml: \n-  Includes python311-toml as dependency for cloud-regionsrv-client\n","status":"published","published":"2025-02-20T12:41:47Z","modified":"2026-03-23T04:50:44.490571Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}