December 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:2317-1: critical: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2317-1 Rating: critical References: #1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.6 * new: MailExtensions: Added browser.windows.openDefaultBrowser() (bmo#1664708) * changed: Thunderbird now only shows quota exceeded indications on the main window (bmo#1671748) * changed: MailExtensions: menus API enabled in messages being composed (bmo#1670832) * changed: MailExtensions: Honor allowScriptsToClose argument in windows.create API function (bmo#1675940) * changed: MailExtensions: APIs that returned an accountId will reflect the account the message belongs to, not what is stored in message headers (bmo#1644032) * fixed: Keyboard shortcut for toggling message "read" status not shown in menus (bmo#1619248) * fixed: OpenPGP: After importing a secret key, Key Manager displayed properties of the wrong key (bmo#1667054) * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041) * fixed: OpenPGP: Discovering keys online via Key Manager sometimes failed on Linux (bmo#1634053) * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save As" did not work (bmo#1663169) * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757) * fixed: OpenPGP: Verification of clear signed UTF-8 text failed (bmo#1679756) * fixed: Address book: Some columns incorrectly displayed no data (bmo#1631201) * fixed: Address book: The address book view did not update after changing the name format in the menu (bmo#1678555) * fixed: Calendar: Could not import an ICS file into a CalDAV calendar (bmo#1652984) * fixed: Calendar: Two "Home" calendars were visible on a new profile (bmo#1656782) * fixed: Calendar: Dark theme was incomplete on Linux (bmo#1655543) * fixed: Dark theme did not apply to new mail notification popups (bmo#1681083) * fixed: Folder icon, message list, and contact side bar visual improvements (bmo#1679436) * fixed: MailExtensions: HTTP refresh in browser content tabs did not work (bmo#1667774) * fixed: MailExtensions: messageDisplayScripts failed to run in main window (bmo#1674932) * fixed: Various security fixes MFSA 2020-56 (bsc#1180039) * CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused uninitialized memory to be exposed * CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL * CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect sanitization * CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free * CVE-2020-26978 (bmo#1677047) Internal network hosts could have been probed by a malicious webpage * CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch view-source URLs * CVE-2020-35112 (bmo#1661365) Opening an extension-less download may have inadvertently launched an executable instead * CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in Thunderbird 78.6 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2317=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.6.0-lp152.2.23.1 MozillaThunderbird-debuginfo-78.6.0-lp152.2.23.1 MozillaThunderbird-debugsource-78.6.0-lp152.2.23.1 MozillaThunderbird-translations-common-78.6.0-lp152.2.23.1 MozillaThunderbird-translations-other-78.6.0-lp152.2.23.1 References: https://www.suse.com/security/cve/CVE-2020-16042.html https://www.suse.com/security/cve/CVE-2020-26971.html https://www.suse.com/security/cve/CVE-2020-26973.html https://www.suse.com/security/cve/CVE-2020-26974.html https://www.suse.com/security/cve/CVE-2020-26978.html https://www.suse.com/security/cve/CVE-2020-35111.html https://www.suse.com/security/cve/CVE-2020-35112.html https://www.suse.com/security/cve/CVE-2020-35113.html https://bugzilla.suse.com/1180039

1 0

openSUSE-SU-2020:2318-1: critical: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2318-1 Rating: critical References: #1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2020-55 (bsc#1180039) * CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused uninitialized memory to be exposed * CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL * CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect sanitization * CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free * CVE-2020-26978 (bmo#1677047) Internal network hosts could have been probed by a malicious webpage * CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch view-source URLs * CVE-2020-35112 (bmo#1661365) Opening an extension-less download may have inadvertently launched an executable instead * CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2318=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.6.0-lp152.2.34.1 MozillaFirefox-branding-upstream-78.6.0-lp152.2.34.1 MozillaFirefox-buildsymbols-78.6.0-lp152.2.34.1 MozillaFirefox-debuginfo-78.6.0-lp152.2.34.1 MozillaFirefox-debugsource-78.6.0-lp152.2.34.1 MozillaFirefox-devel-78.6.0-lp152.2.34.1 MozillaFirefox-translations-common-78.6.0-lp152.2.34.1 MozillaFirefox-translations-other-78.6.0-lp152.2.34.1 References: https://www.suse.com/security/cve/CVE-2020-16042.html https://www.suse.com/security/cve/CVE-2020-26971.html https://www.suse.com/security/cve/CVE-2020-26973.html https://www.suse.com/security/cve/CVE-2020-26974.html https://www.suse.com/security/cve/CVE-2020-26978.html https://www.suse.com/security/cve/CVE-2020-35111.html https://www.suse.com/security/cve/CVE-2020-35112.html https://www.suse.com/security/cve/CVE-2020-35113.html https://bugzilla.suse.com/1180039

1 0

openSUSE-SU-2020:2317-1: critical: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2317-1 Rating: critical References: #1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.6 * new: MailExtensions: Added browser.windows.openDefaultBrowser() (bmo#1664708) * changed: Thunderbird now only shows quota exceeded indications on the main window (bmo#1671748) * changed: MailExtensions: menus API enabled in messages being composed (bmo#1670832) * changed: MailExtensions: Honor allowScriptsToClose argument in windows.create API function (bmo#1675940) * changed: MailExtensions: APIs that returned an accountId will reflect the account the message belongs to, not what is stored in message headers (bmo#1644032) * fixed: Keyboard shortcut for toggling message "read" status not shown in menus (bmo#1619248) * fixed: OpenPGP: After importing a secret key, Key Manager displayed properties of the wrong key (bmo#1667054) * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041) * fixed: OpenPGP: Discovering keys online via Key Manager sometimes failed on Linux (bmo#1634053) * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save As" did not work (bmo#1663169) * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757) * fixed: OpenPGP: Verification of clear signed UTF-8 text failed (bmo#1679756) * fixed: Address book: Some columns incorrectly displayed no data (bmo#1631201) * fixed: Address book: The address book view did not update after changing the name format in the menu (bmo#1678555) * fixed: Calendar: Could not import an ICS file into a CalDAV calendar (bmo#1652984) * fixed: Calendar: Two "Home" calendars were visible on a new profile (bmo#1656782) * fixed: Calendar: Dark theme was incomplete on Linux (bmo#1655543) * fixed: Dark theme did not apply to new mail notification popups (bmo#1681083) * fixed: Folder icon, message list, and contact side bar visual improvements (bmo#1679436) * fixed: MailExtensions: HTTP refresh in browser content tabs did not work (bmo#1667774) * fixed: MailExtensions: messageDisplayScripts failed to run in main window (bmo#1674932) * fixed: Various security fixes MFSA 2020-56 (bsc#1180039) * CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused uninitialized memory to be exposed * CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL * CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect sanitization * CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free * CVE-2020-26978 (bmo#1677047) Internal network hosts could have been probed by a malicious webpage * CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch view-source URLs * CVE-2020-35112 (bmo#1661365) Opening an extension-less download may have inadvertently launched an executable instead * CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in Thunderbird 78.6 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2317=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.6.0-lp152.2.23.1 MozillaThunderbird-debuginfo-78.6.0-lp152.2.23.1 MozillaThunderbird-debugsource-78.6.0-lp152.2.23.1 MozillaThunderbird-translations-common-78.6.0-lp152.2.23.1 MozillaThunderbird-translations-other-78.6.0-lp152.2.23.1 References: https://www.suse.com/security/cve/CVE-2020-16042.html https://www.suse.com/security/cve/CVE-2020-26971.html https://www.suse.com/security/cve/CVE-2020-26973.html https://www.suse.com/security/cve/CVE-2020-26974.html https://www.suse.com/security/cve/CVE-2020-26978.html https://www.suse.com/security/cve/CVE-2020-35111.html https://www.suse.com/security/cve/CVE-2020-35112.html https://www.suse.com/security/cve/CVE-2020-35113.html https://bugzilla.suse.com/1180039

1 0

openSUSE-SU-2020:2315-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2315-1 Rating: important References: #1178824 Cross-References: CVE-2020-15999 CVE-2020-16012 CVE-2020-26951 CVE-2020-26953 CVE-2020-26956 CVE-2020-26958 CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26965 CVE-2020-26966 CVE-2020-26968 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time processing of cross-origin images during drawImage calls * CVE-2020-26953: Fullscreen could be enabled without displaying the security UI * CVE-2020-26956: XSS through paste (manual and clipboard API) * CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME type restrictions * CVE-2020-26959: Use-after-free in WebRequestService * CVE-2020-26960: Potential use-after-free in uses of nsTArray * CVE-2020-15999: Heap buffer overflow in freetype * CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses * CVE-2020-26965: Software keyboards may have remembered typed passwords * CVE-2020-26966: Single-word search queries were also broadcast to local network * CVE-2020-26968: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2315=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.5.0-lp152.2.33.1 MozillaFirefox-branding-upstream-78.5.0-lp152.2.33.1 MozillaFirefox-buildsymbols-78.5.0-lp152.2.33.1 MozillaFirefox-debuginfo-78.5.0-lp152.2.33.1 MozillaFirefox-debugsource-78.5.0-lp152.2.33.1 MozillaFirefox-devel-78.5.0-lp152.2.33.1 MozillaFirefox-translations-common-78.5.0-lp152.2.33.1 MozillaFirefox-translations-other-78.5.0-lp152.2.33.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16012.html https://www.suse.com/security/cve/CVE-2020-26951.html https://www.suse.com/security/cve/CVE-2020-26953.html https://www.suse.com/security/cve/CVE-2020-26956.html https://www.suse.com/security/cve/CVE-2020-26958.html https://www.suse.com/security/cve/CVE-2020-26959.html https://www.suse.com/security/cve/CVE-2020-26960.html https://www.suse.com/security/cve/CVE-2020-26961.html https://www.suse.com/security/cve/CVE-2020-26965.html https://www.suse.com/security/cve/CVE-2020-26966.html https://www.suse.com/security/cve/CVE-2020-26968.html https://bugzilla.suse.com/1178824

1 0

openSUSE-RU-2020:2316-1: moderate: Recommended update for int10h-oldschoolpc-fonts
by maintenance＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Recommended Update: Recommended update for int10h-oldschoolpc-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2316-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for int10h-oldschoolpc-fonts fixes the following issues: Update to release 2.2 * MxPlus line of fonts: The characters ��, ��, ��, �� now consistently use the modified form of the h��ek/caron diacritic (as used in Czech/Slovak). * New fonts: * PC-compatible computers: NEC MultiSpeed (4 fonts), Schneider EuroPC (3 fonts), Tandy 1000 Video I -2x (1 font), Tandy 1000 Video II -2x (1 font) * PC semi-compatibles: DEC Rainbow 100 (4 fonts), HP 150 Touchscreen (1 font), Robotron A7100 (1 font), Tandy 2000 graphics modes (3 fonts), Zenith Z-100 (2 fonts) Update to release 2.1 * New fonts: Acer 710 Mono, HP 100LX, Olivetti MS-DOS, Sanyo MBC-55x, Sanyo MBC-775, Sharp PC-3000, TeleVideo Tele-PC, CL Eagle II, CL Eagle III, CL Stingray, InteGraphics VGA, PhoenixVGA, Sigma Designs RealMagic, STB AutoEGA, early Trident/TVGA8800CS, Tseng EVA-480 ET2000, Various/ACM VGA, Acorn BBC Master 512, Atari Portfolio, Philips :YES G-2x, Texas Instruments PC/PPC, Wang Professional Computer. * Removed Olivetti MxVGA: superseded by CL Stingray. - Switched to the Mx437/MxPlus variant font files and made Px437/PxPlus a fontconfig-level alias for compatibility. Update to release 2.0 * Added new variants: Ac (aspect corrected) and Mx (Mixed outline + bitmap). * New fonts (overview): AMI EGA, Acer-*, Apricot-*, Compaq Port3, DOS V, EpsonMGA, EverexME (like EGA), IBM Model30, IBM PS/55, LE Model D, NEC APC3, Nix8810, Olivetti M15/MX, Trident. * VGA SquarePx was renamed to AST PremiumExec. * ToshibaLCD was renamed to ToshibaSat; a few other minor renames. - All pre-stretched fonts (both Ac or Px-2X/Px-2Y variants) were moved to the -stretched subpackage. - Expand font scaling notes and separate out to extra file (there is a lot to talk about). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-2316=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): int10h-oldschoolpc-fonts-2.2-bp152.4.3.1 int10h-oldschoolpc-fonts-stretched-2.2-bp152.4.3.1 References:

1 0

openSUSE-SU-2020:2314-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2314-1 Rating: moderate References: #1177789 Cross-References: CVE-2019-14584 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ovmf fixes the following issues: - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2314=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ovmf-201911-lp152.6.8.1 ovmf-tools-201911-lp152.6.8.1 - openSUSE Leap 15.2 (noarch): qemu-ovmf-ia32-201911-lp152.6.8.1 qemu-ovmf-x86_64-201911-lp152.6.8.1 - openSUSE Leap 15.2 (x86_64): qemu-ovmf-x86_64-debug-201911-lp152.6.8.1 References: https://www.suse.com/security/cve/CVE-2019-14584.html https://bugzilla.suse.com/1177789

1 0

openSUSE-SU-2020:2313-1: moderate: Security update for xen
by opensuse-security＠opensuse.org 22 Dec '20

22 Dec '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2313-1 Rating: moderate References: #1027519 #1176782 #1179496 #1179498 #1179501 #1179502 #1179506 #1179514 #1179516 Cross-References: CVE-2020-29480 CVE-2020-29481 CVE-2020-29483 CVE-2020-29484 CVE-2020-29566 CVE-2020-29570 CVE-2020-29571 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has two fixes is now available. Description: This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests (bsc#117949 XSA-115). - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions (bsc#1179498 XSA-322). - CVE-2020-29483: Fixed an issue where guests could disturb domain cleanup (bsc#1179502 XSA-325). - CVE-2020-29484: Fixed an issue where guests could crash xenstored via watchs (bsc#1179501 XSA-324). - CVE-2020-29566: Fixed an undue recursion in x86 HVM context switch code (bsc#1179506 XSA-348). - CVE-2020-29570: Fixed an issue where FIFO event channels control block related ordering (bsc#1179514 XSA-358). - CVE-2020-29571: Fixed an issue where FIFO event channels control structure ordering (bsc#1179516 XSA-359). - Fixed an issue where dump-core shows missing nr_pages during core (bsc#1176782). - Multiple other bugs (bsc#1027519) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2313=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.4_06-lp151.2.36.1 xen-devel-4.12.4_06-lp151.2.36.1 xen-libs-4.12.4_06-lp151.2.36.1 xen-libs-debuginfo-4.12.4_06-lp151.2.36.1 xen-tools-domU-4.12.4_06-lp151.2.36.1 xen-tools-domU-debuginfo-4.12.4_06-lp151.2.36.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.4_06-lp151.2.36.1 xen-doc-html-4.12.4_06-lp151.2.36.1 xen-libs-32bit-4.12.4_06-lp151.2.36.1 xen-libs-32bit-debuginfo-4.12.4_06-lp151.2.36.1 xen-tools-4.12.4_06-lp151.2.36.1 xen-tools-debuginfo-4.12.4_06-lp151.2.36.1 References: https://www.suse.com/security/cve/CVE-2020-29480.html https://www.suse.com/security/cve/CVE-2020-29481.html https://www.suse.com/security/cve/CVE-2020-29483.html https://www.suse.com/security/cve/CVE-2020-29484.html https://www.suse.com/security/cve/CVE-2020-29566.html https://www.suse.com/security/cve/CVE-2020-29570.html https://www.suse.com/security/cve/CVE-2020-29571.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1176782 https://bugzilla.suse.com/1179496 https://bugzilla.suse.com/1179498 https://bugzilla.suse.com/1179501 https://bugzilla.suse.com/1179502 https://bugzilla.suse.com/1179506 https://bugzilla.suse.com/1179514 https://bugzilla.suse.com/1179516

1 0

openSUSE-RU-2020:2312-1: moderate: Recommended update for fpc
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for fpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2312-1 Rating: moderate References: #1122855 #1176706 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for fpc fixes the following issues: - Handle fpu initialization (boo#1122855): - Backport r46209 - "@PLT is needed for calls to link it properly with pic code" [boo#1176706]: Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2312=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): fpc-3.2.0-lp152.6.6.2 fpc-debuginfo-3.2.0-lp152.6.6.2 fpc-doc-3.2.0-lp152.6.6.2 fpc-src-3.2.0-lp152.6.6.2 - openSUSE Leap 15.2 (x86_64): fpc-debugsource-3.2.0-lp152.6.6.2 - openSUSE Leap 15.2 (noarch): fpc-examples-3.2.0-lp152.6.6.2 References: https://bugzilla.suse.com/1122855 https://bugzilla.suse.com/1176706

1 0

openSUSE-RU-2020:2311-1: moderate: Recommended update for libqt5-qtbase
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Recommended Update: Recommended update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:2311-1 Rating: moderate References: #1175278 #1179165 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libqt5-qtbase fixes the following issues: - Add patch to avoid crash in certain screen setups (bsc#1179165, kde#425188, QTBUG-88288) - Disable '-reduce-relocations' for now. (bsc#1175278, QTBUG-86173) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2311=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libQt5Bootstrap-devel-static-5.12.7-lp152.3.16.1 libQt5Concurrent-devel-5.12.7-lp152.3.16.1 libQt5Concurrent5-5.12.7-lp152.3.16.1 libQt5Concurrent5-debuginfo-5.12.7-lp152.3.16.1 libQt5Core-devel-5.12.7-lp152.3.16.1 libQt5Core5-5.12.7-lp152.3.16.1 libQt5Core5-debuginfo-5.12.7-lp152.3.16.1 libQt5DBus-devel-5.12.7-lp152.3.16.1 libQt5DBus-devel-debuginfo-5.12.7-lp152.3.16.1 libQt5DBus5-5.12.7-lp152.3.16.1 libQt5DBus5-debuginfo-5.12.7-lp152.3.16.1 libQt5Gui-devel-5.12.7-lp152.3.16.1 libQt5Gui5-5.12.7-lp152.3.16.1 libQt5Gui5-debuginfo-5.12.7-lp152.3.16.1 libQt5KmsSupport-devel-static-5.12.7-lp152.3.16.1 libQt5Network-devel-5.12.7-lp152.3.16.1 libQt5Network5-5.12.7-lp152.3.16.1 libQt5Network5-debuginfo-5.12.7-lp152.3.16.1 libQt5OpenGL-devel-5.12.7-lp152.3.16.1 libQt5OpenGL5-5.12.7-lp152.3.16.1 libQt5OpenGL5-debuginfo-5.12.7-lp152.3.16.1 libQt5OpenGLExtensions-devel-static-5.12.7-lp152.3.16.1 libQt5PlatformHeaders-devel-5.12.7-lp152.3.16.1 libQt5PlatformSupport-devel-static-5.12.7-lp152.3.16.1 libQt5PrintSupport-devel-5.12.7-lp152.3.16.1 libQt5PrintSupport5-5.12.7-lp152.3.16.1 libQt5PrintSupport5-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql-devel-5.12.7-lp152.3.16.1 libQt5Sql5-5.12.7-lp152.3.16.1 libQt5Sql5-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-mysql-5.12.7-lp152.3.16.1 libQt5Sql5-mysql-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-postgresql-5.12.7-lp152.3.16.1 libQt5Sql5-postgresql-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-sqlite-5.12.7-lp152.3.16.1 libQt5Sql5-sqlite-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-unixODBC-5.12.7-lp152.3.16.1 libQt5Sql5-unixODBC-debuginfo-5.12.7-lp152.3.16.1 libQt5Test-devel-5.12.7-lp152.3.16.1 libQt5Test5-5.12.7-lp152.3.16.1 libQt5Test5-debuginfo-5.12.7-lp152.3.16.1 libQt5Widgets-devel-5.12.7-lp152.3.16.1 libQt5Widgets5-5.12.7-lp152.3.16.1 libQt5Widgets5-debuginfo-5.12.7-lp152.3.16.1 libQt5Xml-devel-5.12.7-lp152.3.16.1 libQt5Xml5-5.12.7-lp152.3.16.1 libQt5Xml5-debuginfo-5.12.7-lp152.3.16.1 libqt5-qtbase-common-devel-5.12.7-lp152.3.16.1 libqt5-qtbase-common-devel-debuginfo-5.12.7-lp152.3.16.1 libqt5-qtbase-debugsource-5.12.7-lp152.3.16.1 libqt5-qtbase-devel-5.12.7-lp152.3.16.1 libqt5-qtbase-examples-5.12.7-lp152.3.16.1 libqt5-qtbase-examples-debuginfo-5.12.7-lp152.3.16.1 libqt5-qtbase-platformtheme-gtk3-5.12.7-lp152.3.16.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.12.7-lp152.3.16.1 libqt5-qtbase-platformtheme-xdgdesktopportal-5.12.7-lp152.3.16.1 libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo-5.12.7-lp152.3.16.1 - openSUSE Leap 15.2 (x86_64): libQt5Bootstrap-devel-static-32bit-5.12.7-lp152.3.16.1 libQt5Concurrent-devel-32bit-5.12.7-lp152.3.16.1 libQt5Concurrent5-32bit-5.12.7-lp152.3.16.1 libQt5Concurrent5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Core-devel-32bit-5.12.7-lp152.3.16.1 libQt5Core5-32bit-5.12.7-lp152.3.16.1 libQt5Core5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5DBus-devel-32bit-5.12.7-lp152.3.16.1 libQt5DBus-devel-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5DBus5-32bit-5.12.7-lp152.3.16.1 libQt5DBus5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Gui-devel-32bit-5.12.7-lp152.3.16.1 libQt5Gui5-32bit-5.12.7-lp152.3.16.1 libQt5Gui5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Network-devel-32bit-5.12.7-lp152.3.16.1 libQt5Network5-32bit-5.12.7-lp152.3.16.1 libQt5Network5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5OpenGL-devel-32bit-5.12.7-lp152.3.16.1 libQt5OpenGL5-32bit-5.12.7-lp152.3.16.1 libQt5OpenGL5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5OpenGLExtensions-devel-static-32bit-5.12.7-lp152.3.16.1 libQt5PlatformSupport-devel-static-32bit-5.12.7-lp152.3.16.1 libQt5PrintSupport-devel-32bit-5.12.7-lp152.3.16.1 libQt5PrintSupport5-32bit-5.12.7-lp152.3.16.1 libQt5PrintSupport5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql-devel-32bit-5.12.7-lp152.3.16.1 libQt5Sql5-32bit-5.12.7-lp152.3.16.1 libQt5Sql5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-mysql-32bit-5.12.7-lp152.3.16.1 libQt5Sql5-mysql-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-postgresql-32bit-5.12.7-lp152.3.16.1 libQt5Sql5-postgresql-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-sqlite-32bit-5.12.7-lp152.3.16.1 libQt5Sql5-sqlite-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Sql5-unixODBC-32bit-5.12.7-lp152.3.16.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Test-devel-32bit-5.12.7-lp152.3.16.1 libQt5Test5-32bit-5.12.7-lp152.3.16.1 libQt5Test5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Widgets-devel-32bit-5.12.7-lp152.3.16.1 libQt5Widgets5-32bit-5.12.7-lp152.3.16.1 libQt5Widgets5-32bit-debuginfo-5.12.7-lp152.3.16.1 libQt5Xml-devel-32bit-5.12.7-lp152.3.16.1 libQt5Xml5-32bit-5.12.7-lp152.3.16.1 libQt5Xml5-32bit-debuginfo-5.12.7-lp152.3.16.1 libqt5-qtbase-examples-32bit-5.12.7-lp152.3.16.1 libqt5-qtbase-examples-32bit-debuginfo-5.12.7-lp152.3.16.1 - openSUSE Leap 15.2 (noarch): libQt5Core-private-headers-devel-5.12.7-lp152.3.16.1 libQt5DBus-private-headers-devel-5.12.7-lp152.3.16.1 libQt5Gui-private-headers-devel-5.12.7-lp152.3.16.1 libQt5KmsSupport-private-headers-devel-5.12.7-lp152.3.16.1 libQt5Network-private-headers-devel-5.12.7-lp152.3.16.1 libQt5OpenGL-private-headers-devel-5.12.7-lp152.3.16.1 libQt5PlatformSupport-private-headers-devel-5.12.7-lp152.3.16.1 libQt5PrintSupport-private-headers-devel-5.12.7-lp152.3.16.1 libQt5Sql-private-headers-devel-5.12.7-lp152.3.16.1 libQt5Test-private-headers-devel-5.12.7-lp152.3.16.1 libQt5Widgets-private-headers-devel-5.12.7-lp152.3.16.1 libqt5-qtbase-private-headers-devel-5.12.7-lp152.3.16.1 References: https://bugzilla.suse.com/1175278 https://bugzilla.suse.com/1179165

1 0

openSUSE-OU-2020:2306-1: Optional update for hwloc
by maintenance＠opensuse.org 21 Dec '20

21 Dec '20

openSUSE Optional Update: Optional update for hwloc ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:2306-1 Rating: low References: #1178802 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for hwloc fixes the following issues: - Moved hwloc manpage from the devel package to the main package (bsc#1178802) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2306=1 Package List: - openSUSE Leap 15.2 (x86_64): hwloc-2.1.0-lp152.2.3.1 hwloc-debuginfo-2.1.0-lp152.2.3.1 hwloc-debugsource-2.1.0-lp152.2.3.1 hwloc-devel-2.1.0-lp152.2.3.1 libhwloc15-2.1.0-lp152.2.3.1 libhwloc15-debuginfo-2.1.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): hwloc-data-2.1.0-lp152.2.3.1 hwloc-doc-2.1.0-lp152.2.3.1 References: https://bugzilla.suse.com/1178802

1 0