July 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1807-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1807-1 Rating: moderate References: #1099674 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner to version 1.1.4 fixes the following issues: - Exclude stuff from openstack macros (boo#1099674). - Replace 'http' with 'https' in URL (boo#1099674). - Replace legacy packageand() with 'and' expression (boo#1099674). - Replace pwdutils with shadow in Requires (boo#1099674). - Add openstack_cleanup_prep to bracketing excludes (boo#1099674). - Do not curlify yast_metainfo and yast_check (boo#1099674). - Fixup the eating of Source lines with whitespace (boo#1099674). - Document '#nospeccleaner' tag (boo#1099674). - Various small fixes (boo#1099674). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1807=1 Package List: - openSUSE Backports SLE-15 (noarch): spec-cleaner-1.1.4-bp150.64.1 spec-cleaner-format_spec_file-1.1.4-bp150.64.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:1804-1: important: Recommended update for grub2
by maintenance＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1804-1 Rating: important References: #1134287 #1139345 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fix a regression introduced by the previous update which could prevent booting on ppc64. (bsc#1134287, bsc#1139345). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1804=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): grub2-2.02-lp150.13.26.1 grub2-branding-upstream-2.02-lp150.13.26.1 grub2-debuginfo-2.02-lp150.13.26.1 grub2-debugsource-2.02-lp150.13.26.1 grub2-i386-pc-2.02-lp150.13.26.1 - openSUSE Leap 15.0 (noarch): grub2-snapper-plugin-2.02-lp150.13.26.1 grub2-systemd-sleep-plugin-2.02-lp150.13.26.1 - openSUSE Leap 15.0 (x86_64): grub2-x86_64-efi-2.02-lp150.13.26.1 grub2-x86_64-xen-2.02-lp150.13.26.1 - openSUSE Leap 15.0 (i586): grub2-i386-efi-2.02-lp150.13.26.1 grub2-i386-xen-2.02-lp150.13.26.1 References: https://bugzilla.suse.com/1134287 https://bugzilla.suse.com/1139345

1 0

openSUSE-RU-2019:1803-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1803-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner to version 1.1.4 fixes the following issues: - Exclude stuff from openstack macros (boo#1099674). - Replace 'http' with 'https' in URL (boo#1099674). - Replace legacy packageand() with 'and' expression (boo#1099674). - Replace pwdutils with shadow in Requires (boo#1099674). - Add openstack_cleanup_prep to bracketing excludes (boo#1099674). - Do not curlify yast_metainfo and yast_check (boo#1099674). - Fixup the eating of Source lines with whitespace (boo#1099674). - Document '#nospeccleaner' tag (boo#1099674). - Various small fixes (boo#1099674). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1803=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1803=1 Package List: - openSUSE Leap 15.1 (noarch): spec-cleaner-1.1.4-lp151.2.3.1 spec-cleaner-format_spec_file-1.1.4-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): spec-cleaner-1.1.4-lp150.64.1 spec-cleaner-format_spec_file-1.1.4-lp150.64.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:1802-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1802-1 Rating: moderate References: #1124564 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nvme-cli fixes the following issues: - Add script to determine host NQN based on the system UUID - Add new udev rule for NetApp E-Series and adjust udev rule naming scheme accordingly. (bsc#1124564) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1802=1 Package List: - openSUSE Leap 15.1 (x86_64): nvme-cli-1.7-lp151.5.6.1 nvme-cli-debuginfo-1.7-lp151.5.6.1 nvme-cli-debugsource-1.7-lp151.5.6.1 nvme-cli-regress-script-1.7-lp151.5.6.1 References: https://bugzilla.suse.com/1124564

1 0

openSUSE-SU-2019:1805-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1805-1 Rating: important References: #1111331 Cross-References: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the CPU Microcode adjustments for the software mitigations. For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Release notes: ---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1805=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20190618-lp150.2.24.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://bugzilla.suse.com/1111331

1 0

openSUSE-SU-2019:1806-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1806-1 Rating: important References: #1111331 Cross-References: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the CPU Microcode adjustments for the software mitigations. For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Release notes: ---- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X ---- new platforms ---------------------------------------- VLV C0 6-37-8/02 00000838 Atom Z series VLV C0 6-37-8/0C 00000838 Celeron N2xxx, Pentium N35xx VLV D0 6-37-9/0F 0000090c Atom E38xx CHV C0 6-4c-3/01 00000368 Atom X series CHV D0 6-4c-4/01 00000411 Atom X series Readded what missing in last update: BDX-ML B0/M0/R0 6-4f-1/ef 0b00002e->00000036 Xeon E5/E7 v4; Core i7-69xx/68xx This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1806=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20190618-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://bugzilla.suse.com/1111331

1 0

openSUSE-RU-2019:1801-1: moderate: Recommended update for openslp
by maintenance＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Recommended Update: Recommended update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1801-1 Rating: moderate References: #1117969 #1136136 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openslp fixes the following issues: - Use tcp connects to talk with other directory agents (DAs) (bsc#1117969) - Fix segfault in predicate match if a registered service has a malformed attribute list (bsc#1136136) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1801=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1801=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): openslp-2.0.0-lp151.7.3.1 openslp-debuginfo-2.0.0-lp151.7.3.1 openslp-debugsource-2.0.0-lp151.7.3.1 openslp-devel-2.0.0-lp151.7.3.1 openslp-server-2.0.0-lp151.7.3.1 openslp-server-debuginfo-2.0.0-lp151.7.3.1 - openSUSE Leap 15.1 (x86_64): openslp-32bit-2.0.0-lp151.7.3.1 openslp-32bit-debuginfo-2.0.0-lp151.7.3.1 - openSUSE Leap 15.0 (i586 x86_64): openslp-2.0.0-lp150.10.1 openslp-debuginfo-2.0.0-lp150.10.1 openslp-debugsource-2.0.0-lp150.10.1 openslp-devel-2.0.0-lp150.10.1 openslp-server-2.0.0-lp150.10.1 openslp-server-debuginfo-2.0.0-lp150.10.1 - openSUSE Leap 15.0 (x86_64): openslp-32bit-2.0.0-lp150.10.1 openslp-32bit-debuginfo-2.0.0-lp150.10.1 References: https://bugzilla.suse.com/1117969 https://bugzilla.suse.com/1136136

1 0

openSUSE-SU-2019:1800-1: moderate: Security update for libsass
by opensuse-security＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Security Update: Security update for libsass ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1800-1 Rating: moderate References: #1096894 #1118301 #1118346 #1118348 #1118349 #1118351 #1119789 #1121943 #1121944 #1121945 #1133200 #1133201 Cross-References: CVE-2018-11499 CVE-2018-19797 CVE-2018-19827 CVE-2018-19837 CVE-2018-19838 CVE-2018-19839 CVE-2018-20190 CVE-2018-20821 CVE-2018-20822 CVE-2019-6283 CVE-2019-6284 CVE-2019-6286 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for libsass to version 3.6.1 fixes the following issues: Security issues fixed: - CVE-2019-6283: Fixed heap-buffer-overflow in Sass::Prelexer::parenthese_scope(char const*) (boo#1121943). - CVE-2019-6284: Fixed heap-based buffer over-read exists in Sass:Prelexer:alternatives (boo#1121944). - CVE-2019-6286: Fixed heap-based buffer over-read exists in Sass:Prelexer:skip_over_scopes (boo#1121945). - CVE-2018-11499: Fixed use-after-free vulnerability in sass_context.cpp:handle_error (boo#1096894). - CVE-2018-19797: Disallowed parent selector in selector_fns arguments (boo#1118301). - CVE-2018-19827: Fixed use-after-free vulnerability exists in the SharedPtr class (boo#1118346). - CVE-2018-19837: Fixed stack overflow in Eval::operator() (boo#1118348). - CVE-2018-19838: Fixed stack-overflow at IMPLEMENT_AST_OPERATORS expansion (boo#1118349). - CVE-2018-19839: Fixed buffer-overflow (OOB read) against some invalid input (boo#1118351). - CVE-2018-20190: Fixed Null pointer dereference in Sass::Eval::operator()(Sass::Supports_Operator*) (boo#1119789). - CVE-2018-20821: Fixed uncontrolled recursion in Sass:Parser:parse_css_variable_value (boo#1133200). - CVE-2018-20822: Fixed stack-overflow at Sass::Inspect::operator() (boo#1133201). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1800=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libsass-3_6_1-1-3.6.1-bp150.3.3.1 libsass-devel-3.6.1-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-11499.html https://www.suse.com/security/cve/CVE-2018-19797.html https://www.suse.com/security/cve/CVE-2018-19827.html https://www.suse.com/security/cve/CVE-2018-19837.html https://www.suse.com/security/cve/CVE-2018-19838.html https://www.suse.com/security/cve/CVE-2018-19839.html https://www.suse.com/security/cve/CVE-2018-20190.html https://www.suse.com/security/cve/CVE-2018-20821.html https://www.suse.com/security/cve/CVE-2018-20822.html https://www.suse.com/security/cve/CVE-2019-6283.html https://www.suse.com/security/cve/CVE-2019-6284.html https://www.suse.com/security/cve/CVE-2019-6286.html https://bugzilla.suse.com/1096894 https://bugzilla.suse.com/1118301 https://bugzilla.suse.com/1118346 https://bugzilla.suse.com/1118348 https://bugzilla.suse.com/1118349 https://bugzilla.suse.com/1118351 https://bugzilla.suse.com/1119789 https://bugzilla.suse.com/1121943 https://bugzilla.suse.com/1121944 https://bugzilla.suse.com/1121945 https://bugzilla.suse.com/1133200 https://bugzilla.suse.com/1133201

1 0

openSUSE-RU-2019:1799-1: moderate: Recommended update for tracker
by maintenance＠opensuse.org 24 Jul '19

24 Jul '19

openSUSE Recommended Update: Recommended update for tracker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1799-1 Rating: moderate References: #1123869 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tracker provides the following fixes: - Delete TrackerResource elements one by one. (bsc#1123869) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1799=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1799=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libtracker-common-2_0-2.0.3-lp151.6.3.1 libtracker-common-2_0-debuginfo-2.0.3-lp151.6.3.1 libtracker-control-2_0-0-2.0.3-lp151.6.3.1 libtracker-control-2_0-0-debuginfo-2.0.3-lp151.6.3.1 libtracker-miner-2_0-0-2.0.3-lp151.6.3.1 libtracker-miner-2_0-0-debuginfo-2.0.3-lp151.6.3.1 libtracker-sparql-2_0-0-2.0.3-lp151.6.3.1 libtracker-sparql-2_0-0-debuginfo-2.0.3-lp151.6.3.1 tracker-2.0.3-lp151.6.3.1 tracker-debuginfo-2.0.3-lp151.6.3.1 tracker-debugsource-2.0.3-lp151.6.3.1 tracker-devel-2.0.3-lp151.6.3.1 typelib-1_0-Tracker-2_0-2.0.3-lp151.6.3.1 typelib-1_0-TrackerControl-2_0-2.0.3-lp151.6.3.1 typelib-1_0-TrackerMiner-2_0-2.0.3-lp151.6.3.1 - openSUSE Leap 15.1 (noarch): tracker-lang-2.0.3-lp151.6.3.1 - openSUSE Leap 15.0 (i586 x86_64): libtracker-common-2_0-2.0.3-lp150.4.6.1 libtracker-common-2_0-debuginfo-2.0.3-lp150.4.6.1 libtracker-control-2_0-0-2.0.3-lp150.4.6.1 libtracker-control-2_0-0-debuginfo-2.0.3-lp150.4.6.1 libtracker-miner-2_0-0-2.0.3-lp150.4.6.1 libtracker-miner-2_0-0-debuginfo-2.0.3-lp150.4.6.1 libtracker-sparql-2_0-0-2.0.3-lp150.4.6.1 libtracker-sparql-2_0-0-debuginfo-2.0.3-lp150.4.6.1 tracker-2.0.3-lp150.4.6.1 tracker-debuginfo-2.0.3-lp150.4.6.1 tracker-debugsource-2.0.3-lp150.4.6.1 tracker-devel-2.0.3-lp150.4.6.1 typelib-1_0-Tracker-2_0-2.0.3-lp150.4.6.1 typelib-1_0-TrackerControl-2_0-2.0.3-lp150.4.6.1 typelib-1_0-TrackerMiner-2_0-2.0.3-lp150.4.6.1 - openSUSE Leap 15.0 (noarch): tracker-lang-2.0.3-lp150.4.6.1 References: https://bugzilla.suse.com/1123869

1 0

openSUSE-SU-2019:1796-1: important: Security update for neovim
by opensuse-security＠opensuse.org 23 Jul '19

23 Jul '19

openSUSE Security Update: Security update for neovim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1796-1 Rating: important References: #1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for neovim fixes the following issues: neovim was updated to version 0.3.7: * CVE-2019-12735: source should check sandbox (boo#1137443) * genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: * options: properly reset directories on 'autochdir' * Remove MSVC optimization workaround for SHM_ALL * Make SHM_ALL to a variable instead of a compound literal #define * doc: mention "pynvim" module rename * screen: don't crash when drawing popupmenu with 'rightleft' option * look-behind match may use the wrong line number * :terminal : set topline based on window height * :recover : Fix crash on non-existent *.swp Version Update to version 0.3.4: * test: add tests for conceal cursor movement * display: unify ursorline and concealcursor redraw logic Version Update to version 0.3.3: * health/provider: Check for available pynvim when neovim mod is missing * python#CheckForModule: Use the given module string instead of hard-coding pynvim * (health.provider)/python: Import the neovim, rather than pynvim, module * TUI: Konsole DECSCUSR fixup Version Update to version 0.3.2:- * Features - clipboard: support Custom VimL functions (#9304) - win/TUI: improve terminal/console support (#9401) - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077) - support mapping in more places (#9299) - diff/highlight: show underline for low-priority CursorLine (#9028) - signs: Add "nuhml" argument (#9113) - clipboard: support Wayland (#9230) - TUI: add support for undercurl and underline color (#9052) - man.vim: soft (dynamic) wrap (#9023) * API - API: implement object namespaces (#6920) - API: implement nvim_win_set_buf() (#9100) - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180) - API: add nvim_buf_is_loaded() (#8660) - API: nvm_buf_get_offset_for_line (#8221) - API/UI: ext_newgrid, ext_histate (#8221) * UI - TUI: use BCE again more often (smoother resize) (#8806) - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315) - TUI: clip invalid regions on resize (#8779) - TUI: improvements for scrolling and clearing (#9193) - TUI: disable clearing almost everywhere (#9143) - TUI: always use safe cursor movement after resize (#9079) - ui_options: also send when starting or from OptionSet (#9211) - TUI: Avoid reset_color_cursor_color in old VTE (#9191) - Don't erase screen on :hi Normal during startup (#9021) - TUI: Hint wrapped lines to terminals (#8915) * FIXES - RPC: turn errors from async calls into notifications - TUI: Restore terminal title via "title stacking" (#9407) - genappimage: Unset $ARGV0 at invocation (#9376) - TUI: Konsole 18.07.70 supports DECSCUSR (#9364) - provider: improve error message (#9344) - runtime/syntax: Fix highlighting of autogroup contents (#9328) - VimL/confirm(): Show dialog even if :silent (#9297) - clipboard: prefer xclip (#9302) - provider/nodejs: fix npm, yarn detection - channel: avoid buffering output when only terminal is active (#9218) - ruby: detect rbenv shims for other versions (#8733) - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123) - jobstart(): Fix hang on non-executable cwd (#9204) - provide/nodejs: Simultaneously query npm and yarn (#9054) - undo: Fix infinite loop if undo_read_byte returns EOF (#2880) - 'swapfile: always show dialog' (#9034) - Add to the system-wide configuration file extension of runtimepath by /usr/share/vim/site, so that neovim uses other Vim plugins installed from packages. - Add /usr/share/vim/site tree of directories to be owned by neovim as well. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1796=1 Package List: - openSUSE Backports SLE-15 (noarch): neovim-lang-0.3.7-bp150.2.9.1 - openSUSE Backports SLE-15 (x86_64): neovim-0.3.7-bp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-12735.html https://bugzilla.suse.com/1137443

1 0