June 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0782-1: moderate: Recommended update for pciutils
by maintenance＠opensuse.org 08 Jun '20

08 Jun '20

openSUSE Recommended Update: Recommended update for pciutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0782-1 Rating: moderate References: #1170554 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pciutils fixes the following issues: - Fix lspci outputs when few of the VPD data fields are displayed as unknown. (bsc#1170554, ltc#185587) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-782=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpci3-3.5.6-lp151.3.3.1 libpci3-debuginfo-3.5.6-lp151.3.3.1 pciutils-3.5.6-lp151.3.3.1 pciutils-debuginfo-3.5.6-lp151.3.3.1 pciutils-debugsource-3.5.6-lp151.3.3.1 pciutils-devel-3.5.6-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libpci3-32bit-3.5.6-lp151.3.3.1 libpci3-32bit-debuginfo-3.5.6-lp151.3.3.1 pciutils-devel-32bit-3.5.6-lp151.3.3.1 References: https://bugzilla.suse.com/1170554

1 0

openSUSE-SU-2020:0781-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 08 Jun '20

08 Jun '20

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0781-1 Rating: moderate References: #1172021 Cross-References: CVE-2019-19956 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxml2 fixes the following issues: - CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities (bsc#1172021). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-781=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libxml2-2-2.9.7-lp151.5.12.1 libxml2-2-debuginfo-2.9.7-lp151.5.12.1 libxml2-debugsource-2.9.7-lp151.5.12.1 libxml2-devel-2.9.7-lp151.5.12.1 libxml2-tools-2.9.7-lp151.5.12.1 libxml2-tools-debuginfo-2.9.7-lp151.5.12.1 python-libxml2-python-debugsource-2.9.7-lp151.5.12.1 python2-libxml2-python-2.9.7-lp151.5.12.1 python2-libxml2-python-debuginfo-2.9.7-lp151.5.12.1 python3-libxml2-python-2.9.7-lp151.5.12.1 python3-libxml2-python-debuginfo-2.9.7-lp151.5.12.1 - openSUSE Leap 15.1 (x86_64): libxml2-2-32bit-2.9.7-lp151.5.12.1 libxml2-2-32bit-debuginfo-2.9.7-lp151.5.12.1 libxml2-devel-32bit-2.9.7-lp151.5.12.1 - openSUSE Leap 15.1 (noarch): libxml2-doc-2.9.7-lp151.5.12.1 References: https://www.suse.com/security/cve/CVE-2019-19956.html https://bugzilla.suse.com/1172021

1 0

openSUSE-RU-2020:0776-1: moderate: Recommended update for fossil
by maintenance＠opensuse.org 08 Jun '20

08 Jun '20

openSUSE Recommended Update: Recommended update for fossil ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0776-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fossil fixes the following issues: fossil was updated to 2.11: * Support Markdown in the default ticket configuration * Timestamp strings in object names can now omit punctation * Enhance backlink processing so that it works with Markdown- formatted tickets and so that it works for wiki pages fossil rebuild is needed to take full advantage of this fix * Many improvements to the forum and especially email notification of forum posts * Minimum length of a self-registered user ID increased from 3 to 6 characters * Rework the fossil grep command to be more useful * Expose the redirect-to-https setting to the settings command * Most commands now support the Unix-conventional "--" flag to treat all following arguments as filenames instead of flags * Add the mimetypes config setting * security harening against possibly tampered database schemas * Now sends the Content-Security-Policy header * Stop using the IP address as part of the login cookie * many web UI and CLI improvements, documentation updates fossil was updated to 2.10: * Add support for CGI-based Server Extensions * UI improvement and extensions * Change the default hash policy to SHA3 * Performance optimizations fossil was updated to 2.9: * Add the fossil git export command * Web UI layout and behavior improvements * Add the fossil touch command, and the --setmtime option on the fossil open and fossil update commands * Add the /secureraw page that requires the complete SHA1 or SHA3 hash, not just a prefix, before it will deliver content * Improvement to clone and sync behavior * many other bug fixes and improvements fossil was updated to 2.8: * Show cherry-pick merges as dotted lines on the timeline graph. The "fossil rebuild" command must be run to create and populate the new "cherrypick" table in the repository in order for this feature to operate. * Web UI improvements * Wiki setup is now at /setup_wiki * Provide the ability to redirect all HTTP pages to HTTPS * Add the backoffice-disable setting to completely disable the backoffice feature fossil was updated to 2.7: * New email alerts feature * New discussion forum feature * UI improvements for built-in skins on small screens * Use of Content Security Policy (CSP) in built-in skins fossil was updated to 2.6: * Add the new "Classic" timeline viewing mode * Add support HTTP cache control mechanisms * Improvements to various pages and functions * Additional defenses against web-based attacks Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-776=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-776=1 Package List: - openSUSE Leap 15.1 (x86_64): fossil-2.11-lp151.3.3.1 fossil-debuginfo-2.11-lp151.3.3.1 fossil-debugsource-2.11-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): fossil-2.11-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0772-1: moderate: Recommended update for FAudio
by maintenance＠opensuse.org 05 Jun '20

05 Jun '20

openSUSE Recommended Update: Recommended update for FAudio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0772-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for FAudio fixes the following issues: - Update to version 20.05. This package is provided for usage by Wine. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-772=1 Package List: - openSUSE Leap 15.1 (x86_64): FAudio-debugsource-20.05-lp151.3.1 FAudio-devel-20.05-lp151.3.1 libFAudio0-20.05-lp151.3.1 libFAudio0-debuginfo-20.05-lp151.3.1 References:

1 0

openSUSE-RU-2020:0771-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 04 Jun '20

04 Jun '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0771-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: - Update to version 0.6.11: * Bugfixes: + Fixed MPRIS missing art url when playing albums with embedded cover. + Fixed updating local non collection songs when manually unsetting cover. + Fixed infinite loop and preceding crash when CSS background-color was set in qt5ct. + Fixed UI freeze when updating the database from a large Subsonic or Tidal collection. + Fixed crash when CD loading fails in devices. + Fixed CD devices showing up with having 0 songs after loading. + Fixed the album cover loading indicator being stuck if no cover providers were available. + Fixed the playing widget not updating artist, album or title after metadata has changed for a song when no album cover was loaded. * Enhancements: + Sort songs in collection by song title instead of track if previous grouping is not the album. + Added option to switch on/off automatically searching for album covers to context settings. + Reset last played song when playlist is finished. + Checking content type of received HTTP request for image when receiving album covers. + Added option to scrobbler setting for turning off login error popup. + Made MusicBrainz and Discogs cover providers respect rate limiting. * New features: + Added option to show/hide sidebar. + Added settings for selecting album cover and lyrics providers. + Added album covers from Musixmatch and Spotify. + Added lyrics from Genius, Musixmatch and ChartLyrics. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-771=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): strawberry-0.6.11-bp151.2.21.1 References:

1 0

openSUSE-RU-2020:0770-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 04 Jun '20

04 Jun '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0770-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: strawberry was updated to version 0.6.10: * Bugfixes: + Fixed Subsonic album covers not working for albums with non ASCII charcters. + Fixed reading date and genre from individual tracks in CUE sheets. + Fixed resume playback on startup for CUE songs. + Fixed album cover manager not showing complete album titles in the list of album covers. + Fixed save album cover to file saving "no cover" image instead of actual album cover. + Fixed device state text color in devices not being visible when using a dark theme. + Fixed engine and device in context using too large icons when icons were loaded from the system theme. + Fixed "Secure connection setup failed" problem on Windows when playing streams. + Fixed margin for song title text in context. + Fixed UNC paths with non ASCII charcters not working. * Enhancements: + Allowing all characters except slash and backslash when organising music unless options to strip characters is checked. + New option in organising music to remove problematic filename characters that removes less characters than the FAT option. + General improvements to the album cover loader and album cover providers code. + Fixed loading album cover images from album directory for songs added to the playlist from outside of the collection. + Made automatic album cover search work for songs outside of the collection and for streams. + Made album cover search work based on artist + title if album title is not present for providers supporting song/track search. + Update art manual in playlist for local files, devices and CDDA to avoid loading covers multiple times. + Made lyrics search work for streams. + Added "add stream" to menu. + Only showing song length in context when available. + Sort album cover search results by score and pick the best 3 first before trying others to improve album cover search speed. + Make scrobbler work for streams. + Added search for lyrics as a seperate option in context. + Made font and font sizes in context configurable. + Splitting artist and song title to the relevant metadata when artist and song title is sent as title seperated by a dash in streams. + Added label to show collection pixmap disk cache used in settings. + Icreased default collection pixmap disk cache to 360. * New features: + Added back Tidal streaming support. + Added Qobuz album cover provider. * Removed features: + Removed Phonon engine support. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-770=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): strawberry-0.6.10-bp151.2.17.11 References:

1 0

openSUSE-RU-2020:0768-1: moderate: Recommended update for go1.9
by maintenance＠opensuse.org 04 Jun '20

04 Jun '20

openSUSE Recommended Update: Recommended update for go1.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0768-1 Rating: moderate References: #1082409 #1119634 #1121397 #974800 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for go1.9 fixes the following issues: - Fix for bootstrap to work gcc other than gcc9 at armv7l. (bsc#974800) - Fix for build failures with gcc7. (bsc#1121397) - Set GOPATH automatically and removes go.sh and GOROOT, in order to make switching between versions no longer break. (bsc#1119634) - Fix for an issue in build when symlinks pointing to versions that were never installed at all. (bsc#1082409) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-768=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.9-1.9.7-bp151.2.3.1 go1.9-doc-1.9.7-bp151.2.3.1 go1.9-race-1.9.7-bp151.2.3.1 References: https://bugzilla.suse.com/1082409 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1121397 https://bugzilla.suse.com/974800

1 0

openSUSE-RU-2020:0769-1: moderate: Recommended update for go1.10
by maintenance＠opensuse.org 04 Jun '20

04 Jun '20

openSUSE Recommended Update: Recommended update for go1.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0769-1 Rating: moderate References: #1170826 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.10 fixes the following issues: - Add 'binutils-gold' as a dependency for arm and aarch64 architectures. (bsc#1170826) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-769=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): go1.10-1.10.8-bp151.2.3.1 go1.10-doc-1.10.8-bp151.2.3.1 go1.10-race-1.10.8-bp151.2.3.1 References: https://bugzilla.suse.com/1170826

1 0

openSUSE-RU-2020:0767-1: moderate: Recommended update for ocr
by maintenance＠opensuse.org 04 Jun '20

04 Jun '20

openSUSE Recommended Update: Recommended update for ocr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0767-1 Rating: moderate References: #1171636 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocr fixes the following issues: - Enable openmpi3 build for all SLE versions. (bsc#1171636) This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-767=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ocr_1_0_1-gnu-openmpi1-hpc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-devel-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-doc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi1-hpc-examples-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-devel-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-doc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi3-hpc-examples-1.0.1-bp151.2.6.1 - openSUSE Backports SLE-15-SP1 (ppc64le s390x): ocr_1_0_1-gnu-hpc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-hpc-devel-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-hpc-doc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-hpc-examples-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-devel-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-doc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mpich-hpc-examples-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-devel-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-doc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-mvapich2-hpc-examples-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-devel-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-doc-1.0.1-bp151.2.6.1 ocr_1_0_1-gnu-openmpi2-hpc-examples-1.0.1-bp151.2.6.1 - openSUSE Backports SLE-15-SP1 (noarch): ocr-gnu-hpc-1.0.1-bp151.2.6.1 ocr-gnu-hpc-devel-1.0.1-bp151.2.6.1 ocr-gnu-hpc-doc-1.0.1-bp151.2.6.1 ocr-gnu-hpc-examples-1.0.1-bp151.2.6.1 ocr-gnu-mpich-hpc-1.0.1-bp151.2.6.1 ocr-gnu-mpich-hpc-devel-1.0.1-bp151.2.6.1 ocr-gnu-mpich-hpc-doc-1.0.1-bp151.2.6.1 ocr-gnu-mpich-hpc-examples-1.0.1-bp151.2.6.1 ocr-gnu-mvapich2-hpc-1.0.1-bp151.2.6.1 ocr-gnu-mvapich2-hpc-devel-1.0.1-bp151.2.6.1 ocr-gnu-mvapich2-hpc-doc-1.0.1-bp151.2.6.1 ocr-gnu-mvapich2-hpc-examples-1.0.1-bp151.2.6.1 ocr-gnu-openmpi1-hpc-1.0.1-bp151.2.6.1 ocr-gnu-openmpi1-hpc-devel-1.0.1-bp151.2.6.1 ocr-gnu-openmpi1-hpc-doc-1.0.1-bp151.2.6.1 ocr-gnu-openmpi1-hpc-examples-1.0.1-bp151.2.6.1 ocr-gnu-openmpi2-hpc-1.0.1-bp151.2.6.1 ocr-gnu-openmpi2-hpc-devel-1.0.1-bp151.2.6.1 ocr-gnu-openmpi2-hpc-doc-1.0.1-bp151.2.6.1 ocr-gnu-openmpi2-hpc-examples-1.0.1-bp151.2.6.1 ocr-gnu-openmpi3-hpc-1.0.1-bp151.2.6.1 ocr-gnu-openmpi3-hpc-devel-1.0.1-bp151.2.6.1 ocr-gnu-openmpi3-hpc-doc-1.0.1-bp151.2.6.1 ocr-gnu-openmpi3-hpc-examples-1.0.1-bp151.2.6.1 References: https://bugzilla.suse.com/1171636

1 0

openSUSE-SU-2020:0763-1: moderate: Security update for python-rpyc
by opensuse-security＠opensuse.org 03 Jun '20

03 Jun '20

openSUSE Security Update: Security update for python-rpyc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0763-1 Rating: moderate References: #1152987 Cross-References: CVE-2019-16328 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-763=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-rpyc-4.1.5-bp151.2.3.1 python3-rpyc-4.1.5-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16328.html https://bugzilla.suse.com/1152987

1 0