November 2020 - openSUSE Updates - openSUSE Mailing Lists

[opensuse-updates] openSUSE-RU-2020:1957-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 18 Nov '20

18 Nov '20

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1957-1 Rating: moderate References: #1176676 #1177684 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rpmlint fixes the following issues: - Backported systemd portable1 D-Bus whitelisting (bsc#1176676). - Backporsted pam_pwquality whitelisting for PackageHub (bsc#1177684). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1957=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpmlint-mini-1.10-lp151.5.16.1 rpmlint-mini-debuginfo-1.10-lp151.5.16.1 rpmlint-mini-debugsource-1.10-lp151.5.16.1 - openSUSE Leap 15.1 (noarch): rpmlint-1.10-lp151.9.9.1 - openSUSE Leap 15.1 (x86_64): rpmlint-tests-debugsource-84.87+git20181018.60e0249-lp151.9.9.1 References: https://bugzilla.suse.com/1176676 https://bugzilla.suse.com/1177684

1 0

[opensuse-updates] openSUSE-RU-2020:1955-1: moderate: Recommended update for seamonkey
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1955-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for seamonkey fixes the following issues: Seamonkey was requested to be included in Leap 15.1 and 15.2: https://bugzilla.opensuse.org/show_bug.cgi?id=1174300 update appdata files (Bug 1174192): * correct metadata licensing information (most of the application descriptions had been taken from https://www.seamonkey-project.org/doc/features which according to the page footer is licensed under CC-BY-SA-3.0) * update the metadata summary and the introduction in the metadata description to more accurately reflect what SeaMonkey is, giving less prominence to the long-discontinued Mozilla Application Suite that many users may no longer be familiar with * update the metadata name to more accurately reflect the name or purpose of the application * update the metadata URL with the current SeaMonkey website update to SeaMonkey 2.53.3 * The LaTex tool TexZilla, used for inserting Math, has been upgraded to 1.0.2. * It is now possible to customize the toolbars in Composer and the formatting toolbar in Mailnews composition. * All folders of an account can now be marked as read. * There is now an option for not advertizing SeaMonkey at all in the user agent. * The preference for hiding the toolbar and menubar grippies can now be changed from "Preferences->Appearance". * The preference "browser.tabs.autoHide" which autohides the tab bar when there is only one tab in a browser window open has been flipped in bug 1634879. SeaMonkey will now show the tab bar as the default. You can change it back by checking "Hide the tab bar when only one tab is open" in "Preferences->Browser->Tabbed Browsing" * Update of help page content and links. * SeaMonkey language packs are now version specific and will be disabled as part of the profile upgrade following the installation of a later version. * Search Engines have been centralized and updated in bug 1300198. * Address book now has updated IM fields, improved layout for card view pane, improved multi-word search, ability to search across multiple address books, more granular prompts when deleting items, print on the context menus and print button on the toolbar. * Multimedia support has been updated in preparation of supporting more audio video formats in the next releases. For enhanced security the Rust multimedia parser is now used for this and the libstagefright package has been removed. * SeaMonkey 2.53.3 uses the same backend as Firefox and contains the relevant Firefox 60.4 security fixes. * SeaMonkey 2.53.3 shares most parts of the mail and news code with Thunderbird. Please read the Thunderbird 60.0 release notes for specific changes and security fixes in this release. * Additional important security fixes up to Current Firefox 77 and a few enhancements have been backported. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1955=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): seamonkey-2.53.3-bp151.5.3.4 seamonkey-translations-common-2.53.3-bp151.5.3.4 seamonkey-translations-other-2.53.3-bp151.5.3.4 References:

1 0

[opensuse-updates] openSUSE-RU-2020:1954-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1954-1 Rating: moderate References: #1178248 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issues: - Fix for pointing out the default value of mount options. (bsc#1178248) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1954=1 Package List: - openSUSE Leap 15.1 (x86_64): ocfs2-tools-1.8.5-lp151.6.6.1 ocfs2-tools-debuginfo-1.8.5-lp151.6.6.1 ocfs2-tools-debugsource-1.8.5-lp151.6.6.1 ocfs2-tools-devel-1.8.5-lp151.6.6.1 ocfs2-tools-devel-static-1.8.5-lp151.6.6.1 ocfs2-tools-o2cb-1.8.5-lp151.6.6.1 ocfs2-tools-o2cb-debuginfo-1.8.5-lp151.6.6.1 References: https://bugzilla.suse.com/1178248

1 0

[opensuse-updates] openSUSE-RU-2020:1953-1: moderate: Recommended update for python-py2pack
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for python-py2pack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1953-1 Rating: moderate References: #1178103 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-py2pack fixes the following issues: python-py2pack was updated to 0.8.6 (boo#1178103): * Fix test/exampes/py2pack-opensuse.dsc * enhance test\_template with augmented opensuse and update examples to 0.8.5 * cleanup script basename filter * update test reference * Fix flake8 errors * remove python2 from travis and tox * change test suite block * Replace python3\_only scripts with python\_alternatives * migrate metadate fetch to JSON API * remove python2 shims * update copyright header update to 0.8.5: * Use 3.8 python in the travis by default * Use python 3.8 and 3.9 in tox * Execute flake8 on latest py3 instead of old py2 version * Add missing comment to opensuse template header * Switch to pytest * Just say we support py2 and py3 do not bother with minor versions * gitignore coverage datafile * Do not bother with creating group tag as it is optional these days in openSUSE * Run tests under python 3.7 and fix tests * tests: replace year in tests by placeholder * bug: show help if no command given * Fix date in test examples * fix fedora tests * fix opensuse tests * Update py2pack-opensuse-legacy.spec * Update py2pack-opensuse.spec * Make template compatible with spec-cleaner * Add default empty for scripts * Just get rid of whole line in opensuse-legacy.spec, this breaks things * Don't add BR on python-devel without thinking * Add test for non-existent file * Add documentation to py2pack/utils.py * Add test with invalid archive * Raise a ValueError from \_get\_archive\_filelist instead of Exception * Add type hints to py2pack.utils * Ignore flake8 unused import warning for typing imports * Require typing module for python < 3.5 * Bump python version in test case * Shorten overlong line * Add docstrings & type hints to functions in requires.py * Replace filter() with list/generator expressions * Fix indentation of \_requirement\_find\_lowest\_possible * Fix DeprecationWarnings for invalid escape sequences with python3 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1953=1 Package List: - openSUSE Leap 15.2 (noarch): python-py2pack-doc-0.8.6-lp152.2.3.1 python2-py2pack-0.8.6-lp152.2.3.1 python3-py2pack-0.8.6-lp152.2.3.1 References: https://bugzilla.suse.com/1178103

1 0

[opensuse-updates] openSUSE-SU-2020:1952-1: important: Security update for opera
by opensuse-security＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1952-1 Rating: important References: Cross-References: CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 CVE-2020-16011 Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 72.0.3815.320 - CHR-8177 Update chromium on desktop-stable-86-3815 to 86.0.4240.183 - DNA-89748 ��Manage Extensions�� dialog is displayed with preloaded extensions - DNA-89766 Address bar does not respond to actions - The update to chromium 86.0.4240.183 fixes following issues: CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16007, CVE-2020-16008, CVE-2020-16009, CVE-2020-16011 - Update to version 72.0.3815.200 - DNA-87150 Speed Dial tile can��t be dragged to proper place - DNA-89632 Improve hovering over icons - DNA-89647 [Light mode] Wrong URL color in ��Add Site�� section - DNA-89791 Typo in Spanish - The update to chromium 86.0.4240.111 fixes following issues: CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, CVE-2020-15999, CVE-2020-16003 - Complete Opera 72.0 changelog at: https://blogs.opera.com/desktop/changelog-for-72/ - Update to version 71.0.3770.271 - DNA-88353 Crash at opera::TabCyclerView::HighlightContents (content::WebContents*, bool) - DNA-89177 Device update request should only be called when FCM token has changed - DNA-89186 Handle device expired case in all server calls - DNA-89202 Pages are rendered in dark mode when force dark mode prefs were synced from Opera GX - DNA-89247 [Mac] Fullscreen video broken if sidebar is hidden - DNA-89298 Some elements of VPN popup are misaligned to design - DNA-89305 Crash after closing Downloads pop-up Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1952=1 - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1952=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-72.0.3815.320-lp152.2.21.1 - openSUSE Leap 15.1:NonFree (x86_64): opera-72.0.3815.320-lp151.2.33.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16000.html https://www.suse.com/security/cve/CVE-2020-16001.html https://www.suse.com/security/cve/CVE-2020-16002.html https://www.suse.com/security/cve/CVE-2020-16003.html https://www.suse.com/security/cve/CVE-2020-16004.html https://www.suse.com/security/cve/CVE-2020-16005.html https://www.suse.com/security/cve/CVE-2020-16006.html https://www.suse.com/security/cve/CVE-2020-16007.html https://www.suse.com/security/cve/CVE-2020-16008.html https://www.suse.com/security/cve/CVE-2020-16009.html https://www.suse.com/security/cve/CVE-2020-16011.html

1 0

[opensuse-updates] openSUSE-RU-2020:1951-1: moderate: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1951-1 Rating: moderate References: #1174918 #1176192 #1176435 #1176712 #1176740 #1176902 #1177238 #935885 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for libsolv, libzypp, zypper fixes the following issues: libzypp was updated to version 17.25.1: - Fix bsc#1176902: When kernel-rt has been installed, the purge-kernels service fails during boot. - Use package name provides as group key in purge-kernel (bsc#1176740 bsc#1176192) kernel-default-base has new packaging, where the kernel uname -r does not reflect the full package version anymore. This patch adds additional logic to use the most generic/shortest edition each package provides with %{packagename}=<version> to group the kernel packages instead of the rpm versions. This also changes how the keep-spec for specific versions is applied, instead of matching the package versions, each of the package name provides will be matched. - RepoInfo: Return the type of the local metadata cache as fallback (bsc#1176435) - VendorAttr: Fix broken "suse,opensuse" equivalence handling. Enhance API and testcases. (bsc#1174918) - Update docs regarding 'opensuse' namepace matching. - New solver testcase format. - Link against libzsd to close libsolvs open references (as we link statically) zypper was updated to version 1.14.40. - info: Assume descriptions starting with '<p>' are richtext (bsc#935885) - Use new testcase API in libzypp. - BuildRequires: libzypp-devel >= 17.25.0. - help: prevent 'whatis' from writing to stderr (bsc#1176712) - wp: point out that command is aliased to a search command and searches case-insensitive (jsc#SLE-16271) libsolv was updated to version 0.7.16: - do not ask the namespace callback for splitprovides when writing a testcase - fix add_complex_recommends() selecting conflicted packages in rare cases leading to crashes - improve choicerule generation so that package updates are prefered in more cases - make testcase_mangle_repo_names deal correctly with freed repos [bsc#1177238] - fix deduceq2addedmap clearing bits outside of the map - conda: feature depriorization first - conda: fix startswith implementation - move find_update_seeds() call in cleandeps calculation - set SOLVABLE_BUILDHOST in rpm and rpmmd parsers - new testcase_mangle_repo_names() function - new solv_fmemopen() function This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1951=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsolv-debuginfo-0.7.16-lp151.2.22.1 libsolv-debugsource-0.7.16-lp151.2.22.1 libsolv-demo-0.7.16-lp151.2.22.1 libsolv-demo-debuginfo-0.7.16-lp151.2.22.1 libsolv-devel-0.7.16-lp151.2.22.1 libsolv-devel-debuginfo-0.7.16-lp151.2.22.1 libsolv-tools-0.7.16-lp151.2.22.1 libsolv-tools-debuginfo-0.7.16-lp151.2.22.1 perl-solv-0.7.16-lp151.2.22.1 perl-solv-debuginfo-0.7.16-lp151.2.22.1 python-solv-0.7.16-lp151.2.22.1 python-solv-debuginfo-0.7.16-lp151.2.22.1 python3-solv-0.7.16-lp151.2.22.1 python3-solv-debuginfo-0.7.16-lp151.2.22.1 ruby-solv-0.7.16-lp151.2.22.1 ruby-solv-debuginfo-0.7.16-lp151.2.22.1 - openSUSE Leap 15.1 (x86_64): libzypp-17.25.1-lp151.2.25.1 libzypp-debuginfo-17.25.1-lp151.2.25.1 libzypp-debugsource-17.25.1-lp151.2.25.1 libzypp-devel-17.25.1-lp151.2.25.1 libzypp-devel-doc-17.25.1-lp151.2.25.1 zypper-1.14.40-lp151.2.20.1 zypper-debuginfo-1.14.40-lp151.2.20.1 zypper-debugsource-1.14.40-lp151.2.20.1 - openSUSE Leap 15.1 (noarch): zypper-aptitude-1.14.40-lp151.2.20.1 zypper-log-1.14.40-lp151.2.20.1 zypper-needs-restarting-1.14.40-lp151.2.20.1 References: https://bugzilla.suse.com/1174918 https://bugzilla.suse.com/1176192 https://bugzilla.suse.com/1176435 https://bugzilla.suse.com/1176712 https://bugzilla.suse.com/1176740 https://bugzilla.suse.com/1176902 https://bugzilla.suse.com/1177238 https://bugzilla.suse.com/935885

1 0

[opensuse-updates] openSUSE-RU-2020:1950-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1950-1 Rating: moderate References: #1176676 #1177684 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rpmlint fixes the following issues: - Backported systemd portable1 D-Bus whitelisting (bsc#1176676). - Backporsted pam_pwquality whitelisting for PackageHub (bsc#1177684). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1950=1 Package List: - openSUSE Leap 15.2 (x86_64): rpmlint-tests-debugsource-84.87+git20181018.60e0249-lp152.12.3.1 - openSUSE Leap 15.2 (noarch): rpmlint-1.10-lp152.12.3.1 References: https://bugzilla.suse.com/1176676 https://bugzilla.suse.com/1177684

1 0

[opensuse-updates] openSUSE-RU-2020:1948-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1948-1 Rating: moderate References: #1177987 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-vm-tools fixes the following issues: - Fixed a memory leak that occurred in disk device mapping information for IDE, SATA, or SAS configured in the guest - Many more bug fixes have been addressed with this release. Please refer to this rpm's changelog in order to see the full list of fixes This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1948=1 Package List: - openSUSE Leap 15.2 (x86_64): libvmtools-devel-11.2.0-lp152.3.9.1 libvmtools0-11.2.0-lp152.3.9.1 libvmtools0-debuginfo-11.2.0-lp152.3.9.1 open-vm-tools-11.2.0-lp152.3.9.1 open-vm-tools-debuginfo-11.2.0-lp152.3.9.1 open-vm-tools-debugsource-11.2.0-lp152.3.9.1 open-vm-tools-desktop-11.2.0-lp152.3.9.1 open-vm-tools-desktop-debuginfo-11.2.0-lp152.3.9.1 open-vm-tools-sdmp-11.2.0-lp152.3.9.1 open-vm-tools-sdmp-debuginfo-11.2.0-lp152.3.9.1 References: https://bugzilla.suse.com/1177987

1 0

[opensuse-updates] openSUSE-SU-2020:1949-1: important: Security update for raptor
by opensuse-security＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Security Update: Security update for raptor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1949-1 Rating: important References: #1178593 Cross-References: CVE-2017-18926 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for raptor fixes the following issues: - Fixed a heap overflow vulnerability (bsc#1178593, CVE-2017-18926). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1949=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libraptor-devel-2.0.15-lp152.4.3.1 libraptor2-0-2.0.15-lp152.4.3.1 libraptor2-0-debuginfo-2.0.15-lp152.4.3.1 raptor-2.0.15-lp152.4.3.1 raptor-debuginfo-2.0.15-lp152.4.3.1 raptor-debugsource-2.0.15-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): libraptor2-0-32bit-2.0.15-lp152.4.3.1 libraptor2-0-32bit-debuginfo-2.0.15-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-18926.html https://bugzilla.suse.com/1178593

1 0

[opensuse-updates] openSUSE-RU-2020:1947-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 17 Nov '20

17 Nov '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1947-1 Rating: moderate References: #1178759 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.8 (boo#1178759) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-8-has-been-released/9458 + vTPM support + VirtioFS support for virtual machines + Full CGroup2 support + rebase mode for zfs.clone_copy + --reuse option in lxc snapshot and lxc storage volume snapshot * restarted lifecycle event * Improved logging of user requests Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1947=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1947=1 Package List: - openSUSE Leap 15.2 (noarch): lxd-bash-completion-4.8-lp152.2.15.1 - openSUSE Leap 15.2 (x86_64): lxd-4.8-lp152.2.15.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.8-lp151.54.1 - openSUSE Leap 15.1 (x86_64): lxd-4.8-lp151.54.1 References: https://bugzilla.suse.com/1178759

1 0