June 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0885-1: moderate: Recommended update for profanity
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for profanity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0885-1 Rating: moderate References: #1160244 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for profanity fixes the following issues: profanity was updated to 0.9.4: * Fix NULL terminated list (#1367) * Add missing string.h (#1372) * Fix gcc warnings for cygwin (#1373) Update to 0.9.3: * Fix expansion in eval_password (#1364) Update to 0.9.2: * Dont manipulate pointer from getenv (#1357) * Fix reading/writing linked files (#1362) * Use gnu99 C standard (#1357) Update to 0.9.1: * Make legacy auth optional (#1360) (@pasis) Update to 0.9.0: * Support for XEP-0308: Last Message Correction (#805) See `/correction` and `/correct`. * Code cleanup of UI and Message functions * Always send delivery receipts if they are enabled (#1268) * By default don't allow sending unencrypted files in an encrypted chat session (#1270) (@moppman and @jubalh) See `/omemo|otr|pgp sendfile`. * Add CI for OpenBSD via sr.ht (@wstrm) * OMEMO: switch to 12 byte IV for sending (#1272) * Allow UTF-8 symbols as OMEMO/OTR/PGP indicator char (#1264) * Make color of the trackbar configurable Use `main.trackbar` in themes. * Allow setting custom log file `profanity -f TEST` will log to `~/.local/share/profanity/logs/TEST.log`. * Send proper OS names for OpenBSD and NetBSD if `/os` is enabled * Fix plenty memory leaks (@pasis and @jubalh) * XEP-0084: Add option to open avatars directly (#1281) `/avatar odin(a)valhalla.org` became `/avatar get odin(a)valhalla.org` New is: `/executable avatar feh` `/avatar open odin(a)valhalla.org` xdg-open is used by default. So it will take your default application. * Enable popular features by default. For a nicer out of the box experience we enable: - allow message correction - sending receipts - enabling carbons - type/chat states * Add slashguard feature to prevent sending commands with typos Should protect against `q/uit` or ` /quit`. See `/slashguard`. * Optionally display both MUC name and MUC JID in titlebar (#1284) `/titlebar use name|jid` -> `/titlebar show|hide name|jid`. * Add option to define a theme at startup (#1286) `/profanity -t bios` * Add setting to not colorize own nick if XEP-0392 is enabled (#1288) `/color own on|off`. * Add new theme: jubalian * Fix docker related CI tests (#1294) * Fix OMEMO autocompletion (75a43f, df23c3) * Modify our README * Store logs in SQLite backend (#1282) * Request OMEMO device list only for non anon MUCs (#1315) (@DebXWoody) * Don't display MUC history in one uniform colour, instead colour messages like regular ones (#1261) * Fix autocompletion for `/software` in regular chat windows (#1337) * XEP-0092: Make it possible to ask servers for their version (#1338) * Add possibility to easily open URLs (#1340, #1348) `/executable urlopen firefox` `/urlopen <tab>` * Display hint when window is scrolled (#1289) Theme via `titlebar.scrolled` * Add option to hide windows with no new messages in statusbar (#1285) `/statusbar show|hide read` * Support bookmark names (#697) * Preserve Gajims minimize flag in bookmarks (#1326) * Don't show resource in titlebar in narrow windows if it is too long (#715) * Improve autoping (#1333, #1315) (@DebXWoody) * Fix titlebar status display when using PGP (#1327) (@DebXWoody) * OMEMO: Only request "current" item (#1329) (@DebXWoody) * Add feature to ignore the autojoin flag for bookmarks (#1115) Helps users who want to autojoin MUCs with most clients but not with all. `/bookmark ignore` * Fix edge case where contacts get displayed as offline when they are online (3d7a31) * Add option for legacy authentication (#1236) (@pasis) `/connect <account> [auth default|legacy]` `/account <account> set auth default|legacy` * All issues: https://github.com/profanity-im/profanity/milestone/19 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-885=1 Package List: - openSUSE Leap 15.2 (x86_64): profanity-0.9.4-lp152.2.3.1 profanity-debuginfo-0.9.4-lp152.2.3.1 profanity-debugsource-0.9.4-lp152.2.3.1 profanity-mini-0.9.4-lp152.2.3.1 profanity-mini-debuginfo-0.9.4-lp152.2.3.1 profanity-standard-0.9.4-lp152.2.3.1 profanity-standard-debuginfo-0.9.4-lp152.2.3.1 References: https://bugzilla.suse.com/1160244

1 0

openSUSE-RU-2020:0884-1: moderate: Recommended update for nodejs10
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for nodejs10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0884-1 Rating: moderate References: #1172728 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nodejs10 fixes the following issues: - Added Require for nodejs10 when intalling npm10 (bsc#1172728) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-884=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): nodejs10-10.21.0-lp152.2.3.1 nodejs10-debuginfo-10.21.0-lp152.2.3.1 nodejs10-debugsource-10.21.0-lp152.2.3.1 nodejs10-devel-10.21.0-lp152.2.3.1 npm10-10.21.0-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): nodejs10-docs-10.21.0-lp152.2.3.1 References: https://bugzilla.suse.com/1172728

1 0

openSUSE-SU-2020:0883-1: important: Security update for curl
by opensuse-security＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0883-1 Rating: important References: #1173026 #1173027 Cross-References: CVE-2020-8169 CVE-2020-8177 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for curl fixes the following issues: - CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option (bsc#1173027). - CVE-2020-8169: Fixed an issue where could have led to partial password leak over DNS on HTTP redirect (bsc#1173026). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-883=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): curl-7.66.0-lp152.3.3.1 curl-debuginfo-7.66.0-lp152.3.3.1 curl-debugsource-7.66.0-lp152.3.3.1 curl-mini-7.66.0-lp152.3.3.1 curl-mini-debuginfo-7.66.0-lp152.3.3.1 curl-mini-debugsource-7.66.0-lp152.3.3.1 libcurl-devel-7.66.0-lp152.3.3.1 libcurl-mini-devel-7.66.0-lp152.3.3.1 libcurl4-7.66.0-lp152.3.3.1 libcurl4-debuginfo-7.66.0-lp152.3.3.1 libcurl4-mini-7.66.0-lp152.3.3.1 libcurl4-mini-debuginfo-7.66.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libcurl-devel-32bit-7.66.0-lp152.3.3.1 libcurl4-32bit-7.66.0-lp152.3.3.1 libcurl4-32bit-debuginfo-7.66.0-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-8169.html https://www.suse.com/security/cve/CVE-2020-8177.html https://bugzilla.suse.com/1173026 https://bugzilla.suse.com/1173027

1 0

openSUSE-SU-2020:0880-1: Security update for mercurial
by opensuse-security＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0880-1 Rating: low References: #1133035 Cross-References: CVE-2019-3902 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mercurial fixes the following issues: Security issue fixed: - CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-880=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): mercurial-4.5.2-lp152.7.3.1 mercurial-debuginfo-4.5.2-lp152.7.3.1 mercurial-debugsource-4.5.2-lp152.7.3.1 - openSUSE Leap 15.2 (noarch): mercurial-lang-4.5.2-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2019-3902.html https://bugzilla.suse.com/1133035

1 0

openSUSE-RU-2020:0882-1: moderate: Recommended update for python-M2Crypto
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for python-M2Crypto ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0882-1 Rating: moderate References: #1172226 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-M2Crypto fixes the following issues: - Release python3-M2crypto to LTSS channels, to allow using salt even when the Server Applications Module is not used. (bsc#1172226) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-882=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): python-M2Crypto-debuginfo-0.35.2-lp152.2.3.1 python-M2Crypto-debugsource-0.35.2-lp152.2.3.1 python2-M2Crypto-0.35.2-lp152.2.3.1 python2-M2Crypto-debuginfo-0.35.2-lp152.2.3.1 python3-M2Crypto-0.35.2-lp152.2.3.1 python3-M2Crypto-debuginfo-0.35.2-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): python-M2Crypto-doc-0.35.2-lp152.2.3.1 References: https://bugzilla.suse.com/1172226

1 0

openSUSE-RU-2020:0881-1: moderate: Recommended update for python-pyroute2
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for python-pyroute2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0881-1 Rating: moderate References: #1160933 #1161898 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides python-pyroute2 for use by the gcp-vpc-move-route agent in resource-agents. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-881=1 Package List: - openSUSE Leap 15.2 (noarch): python2-pyroute2-0.5.10-lp152.4.3.1 python3-pyroute2-0.5.10-lp152.4.3.1 References: https://bugzilla.suse.com/1160933 https://bugzilla.suse.com/1161898

1 0

openSUSE-RU-2020:0879-1: moderate: Recommended update for growpart
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for growpart ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0879-1 Rating: moderate References: #1164736 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for growpart fixes the following issues: - Operation system disk is not automatically resized beyond 2TB on Azure hosts. (bsc#1164736) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-879=1 Package List: - openSUSE Leap 15.2 (noarch): growpart-0.31-lp152.8.3.1 References: https://bugzilla.suse.com/1164736

1 0

openSUSE-RU-2020:0878-1: moderate: Recommended update for xkeyboard-config
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for xkeyboard-config ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0878-1 Rating: moderate References: #1153774 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xkeyboard-config fixes the following issues: - Fix capslock in Old Hungarian layout (bsc#1153774) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-878=1 Package List: - openSUSE Leap 15.2 (noarch): xkeyboard-config-2.23.1-lp152.5.3.1 xkeyboard-config-lang-2.23.1-lp152.5.3.1 References: https://bugzilla.suse.com/1153774

1 0

openSUSE-RU-2020:0877-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 27 Jun '20

27 Jun '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0877-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.12: * Bugfixes: + Fixed height of about dialog. * Enhancements: + Only save settings for pages that actually has been changed. + Replaced use of deprecated Qt functionality as of 5.15. + Made scrobbler show error dialog for all errors when show error dialog option is on. + Dont append disc to album titles for Subsonic and Tidal. + Sort folders added from file view. + Changed default collection grouping to album - disc. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-877=1 Package List: - openSUSE Leap 15.1 (x86_64): strawberry-0.6.12-lp151.2.24.1 strawberry-debuginfo-0.6.12-lp151.2.24.1 strawberry-debugsource-0.6.12-lp151.2.24.1 References:

1 0

openSUSE-SU-2020:0876-1: moderate: Security update for graphviz
by opensuse-security＠opensuse.org 26 Jun '20

26 Jun '20

openSUSE Security Update: Security update for graphviz ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0876-1 Rating: moderate References: #1132091 Cross-References: CVE-2019-11023 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphviz fixes the following issues: Security issue fixed: - CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-876=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): graphviz-2.40.1-lp152.7.2.1 graphviz-addons-debuginfo-2.40.1-lp152.7.3.1 graphviz-addons-debugsource-2.40.1-lp152.7.3.1 graphviz-debuginfo-2.40.1-lp152.7.2.1 graphviz-debugsource-2.40.1-lp152.7.2.1 graphviz-devel-2.40.1-lp152.7.2.1 graphviz-doc-2.40.1-lp152.7.3.1 graphviz-gd-2.40.1-lp152.7.3.1 graphviz-gd-debuginfo-2.40.1-lp152.7.3.1 graphviz-gnome-2.40.1-lp152.7.3.1 graphviz-gnome-debuginfo-2.40.1-lp152.7.3.1 graphviz-guile-2.40.1-lp152.7.3.1 graphviz-guile-debuginfo-2.40.1-lp152.7.3.1 graphviz-gvedit-2.40.1-lp152.7.3.1 graphviz-gvedit-debuginfo-2.40.1-lp152.7.3.1 graphviz-java-2.40.1-lp152.7.3.1 graphviz-java-debuginfo-2.40.1-lp152.7.3.1 graphviz-lua-2.40.1-lp152.7.3.1 graphviz-lua-debuginfo-2.40.1-lp152.7.3.1 graphviz-perl-2.40.1-lp152.7.3.1 graphviz-perl-debuginfo-2.40.1-lp152.7.3.1 graphviz-php-2.40.1-lp152.7.3.1 graphviz-php-debuginfo-2.40.1-lp152.7.3.1 graphviz-plugins-core-2.40.1-lp152.7.2.1 graphviz-plugins-core-debuginfo-2.40.1-lp152.7.2.1 graphviz-python-2.40.1-lp152.7.3.1 graphviz-python-debuginfo-2.40.1-lp152.7.3.1 graphviz-ruby-2.40.1-lp152.7.3.1 graphviz-ruby-debuginfo-2.40.1-lp152.7.3.1 graphviz-smyrna-2.40.1-lp152.7.3.1 graphviz-smyrna-debuginfo-2.40.1-lp152.7.3.1 graphviz-tcl-2.40.1-lp152.7.3.1 graphviz-tcl-debuginfo-2.40.1-lp152.7.3.1 libgraphviz6-2.40.1-lp152.7.2.1 libgraphviz6-debuginfo-2.40.1-lp152.7.2.1 References: https://www.suse.com/security/cve/CVE-2019-11023.html https://bugzilla.suse.com/1132091

1 0