September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1459-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1459-1 Rating: moderate References: #1174154 Cross-References: CVE-2020-15719 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openldap2 fixes the following issues: - bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1459=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libldap-2_4-2-2.4.46-lp152.14.6.1 libldap-2_4-2-debuginfo-2.4.46-lp152.14.6.1 openldap2-2.4.46-lp152.14.6.1 openldap2-back-meta-2.4.46-lp152.14.6.1 openldap2-back-meta-debuginfo-2.4.46-lp152.14.6.1 openldap2-back-perl-2.4.46-lp152.14.6.1 openldap2-back-perl-debuginfo-2.4.46-lp152.14.6.1 openldap2-back-sock-2.4.46-lp152.14.6.1 openldap2-back-sock-debuginfo-2.4.46-lp152.14.6.1 openldap2-back-sql-2.4.46-lp152.14.6.1 openldap2-back-sql-debuginfo-2.4.46-lp152.14.6.1 openldap2-client-2.4.46-lp152.14.6.1 openldap2-client-debuginfo-2.4.46-lp152.14.6.1 openldap2-contrib-2.4.46-lp152.14.6.1 openldap2-contrib-debuginfo-2.4.46-lp152.14.6.1 openldap2-debuginfo-2.4.46-lp152.14.6.1 openldap2-debugsource-2.4.46-lp152.14.6.1 openldap2-devel-2.4.46-lp152.14.6.1 openldap2-devel-static-2.4.46-lp152.14.6.1 openldap2-ppolicy-check-password-1.2-lp152.14.6.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp152.14.6.1 - openSUSE Leap 15.2 (x86_64): libldap-2_4-2-32bit-2.4.46-lp152.14.6.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp152.14.6.1 openldap2-devel-32bit-2.4.46-lp152.14.6.1 - openSUSE Leap 15.2 (noarch): libldap-data-2.4.46-lp152.14.6.1 openldap2-doc-2.4.46-lp152.14.6.1 References: https://www.suse.com/security/cve/CVE-2020-15719.html https://bugzilla.suse.com/1174154

1 0

openSUSE-RU-2020:1469-1: moderate: Recommended update for abcde
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for abcde ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1469-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for abcde fixes the following issues: - Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and perl(WebService::MusicBrainz) are accepted into Factory now. Note that abcde uses both MusicBrainz and CDDB by default. Build without MusicBrainz can be made by setting %_without_musibrainz 1 in prjconf. - Added dependency on WebService::MusicBrainz Update to 2.9.3 * Replace non-portable sed code for generating offset list with some simple awk instead. Should now work on FreeBSD again. * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it writes the track information to *stdin*. Closes Issue #89: https://abcde.einval.com/bugzilla/show_bug.cgi?id=89 * Add a warning in abcde.conf about mayb needing to install recode before using it in mungefilename() Update to 2.9.2: * Fix up lookup code to deal with spaces etc. in directory names * Cope with "stub" releases in Musicbrainz * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the report and the suggested fix. * Add a link to the CDDB data format in the abcde man page. * More fixups of track number padding. Thanks to John Straw for the patch. * Allow for embedding of album art downloaded by the getalbumart function. Currently this is available for flac (using metaflac), mp3 (using eyed3), m4a (using AtomicParsley) and WavPack aka wv (using wvtag). * Use md5 rather than md5sum under macOS. * Support added for encoding with Audio Interchange File Format (AIFF). * Allow selection of either cddb or musicbrainz from the command line * Allow for embedding with do_embedalbumart() for single track encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different. * Experimental support for embedding albumart with ogg files. * Massive rework of CD lookup code so support multiple sources better. Thanks to Gabriel Rosenkoetter for his initial idea in this area, and to Tomasz Goliński on irc for initial inspiration on how this should work better. There are now 3 different options for CD lookup: cddb, musicbrainz and cdtext. They can all be listed in a comma-separated list for CDDBMETHOD and the code will now call all of them in the sequence listed. All the results will be combined into one list at the end for the user to select, just like would have previously worked for one source only. * Fix Musicbrainz ID calculation in makeids() * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to Nino Burini for the patch. * Add more comprehensive examples for filename munging in the example config file. * Add a more better fix for the year lookup problem in abcde-musicbrainz-tool * Redirect stderr on "which" calls to clear up error noise on some systems. * Add Irix support. * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz Also added a specific dependency on version 1.0.4 or newer, so abcde-musicbrainz-tool will abort if the version found is too old. Since tweaked to deal with multi-artist albums and tracks more completely. * Add resume support in do_getalbumart() * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this. * Major set of code cleanups to fix up lots of warnings found with shellcheck, and a few other style issues: + Lots of quoting fixes + Use $( instead of ` + Stop using -o and -a syntax with if [ - use || or && instead + Wrap and shorten some very long lines * Wrap some output messages so they fit on a standard width console * Factor out repeated code and make page() more useful * Add version check before resuming from an old ripping run Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1469=1 Package List: - openSUSE Leap 15.2 (noarch): abcde-2.9.3-lp152.4.3.1 References:

1 0

openSUSE-SU-2020:1455-1: important: Security update for libvirt
by opensuse-security＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1455-1 Rating: important References: #1161883 #1174458 Cross-References: CVE-2020-14339 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libvirt fixes the following issues: - CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. bsc#1161883, bsc#1174458 This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1455=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libvirt-6.0.0-lp152.9.3.1 libvirt-admin-6.0.0-lp152.9.3.1 libvirt-admin-debuginfo-6.0.0-lp152.9.3.1 libvirt-client-6.0.0-lp152.9.3.1 libvirt-client-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-6.0.0-lp152.9.3.1 libvirt-daemon-config-network-6.0.0-lp152.9.3.1 libvirt-daemon-config-nwfilter-6.0.0-lp152.9.3.1 libvirt-daemon-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-interface-6.0.0-lp152.9.3.1 libvirt-daemon-driver-interface-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-lxc-6.0.0-lp152.9.3.1 libvirt-daemon-driver-lxc-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-network-6.0.0-lp152.9.3.1 libvirt-daemon-driver-network-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-nodedev-6.0.0-lp152.9.3.1 libvirt-daemon-driver-nodedev-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-nwfilter-6.0.0-lp152.9.3.1 libvirt-daemon-driver-nwfilter-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-qemu-6.0.0-lp152.9.3.1 libvirt-daemon-driver-qemu-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-secret-6.0.0-lp152.9.3.1 libvirt-daemon-driver-secret-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-core-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-core-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-disk-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-disk-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-gluster-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-gluster-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-iscsi-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-iscsi-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-logical-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-logical-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-mpath-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-mpath-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-scsi-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-scsi-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-hooks-6.0.0-lp152.9.3.1 libvirt-daemon-lxc-6.0.0-lp152.9.3.1 libvirt-daemon-qemu-6.0.0-lp152.9.3.1 libvirt-debugsource-6.0.0-lp152.9.3.1 libvirt-devel-6.0.0-lp152.9.3.1 libvirt-libs-6.0.0-lp152.9.3.1 libvirt-libs-debuginfo-6.0.0-lp152.9.3.1 libvirt-lock-sanlock-6.0.0-lp152.9.3.1 libvirt-lock-sanlock-debuginfo-6.0.0-lp152.9.3.1 libvirt-nss-6.0.0-lp152.9.3.1 libvirt-nss-debuginfo-6.0.0-lp152.9.3.1 wireshark-plugin-libvirt-6.0.0-lp152.9.3.1 wireshark-plugin-libvirt-debuginfo-6.0.0-lp152.9.3.1 - openSUSE Leap 15.2 (x86_64): libvirt-client-32bit-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-libxl-6.0.0-lp152.9.3.1 libvirt-daemon-driver-libxl-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-rbd-6.0.0-lp152.9.3.1 libvirt-daemon-driver-storage-rbd-debuginfo-6.0.0-lp152.9.3.1 libvirt-daemon-xen-6.0.0-lp152.9.3.1 libvirt-devel-32bit-6.0.0-lp152.9.3.1 - openSUSE Leap 15.2 (noarch): libvirt-bash-completion-6.0.0-lp152.9.3.1 libvirt-doc-6.0.0-lp152.9.3.1 References: https://www.suse.com/security/cve/CVE-2020-14339.html https://bugzilla.suse.com/1161883 https://bugzilla.suse.com/1174458

1 0

openSUSE-RU-2020:1463-1: moderate: Recommended update for yast2-cluster
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for yast2-cluster ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1463-1 Rating: moderate References: #1175648 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-cluster fixes the following issues: - Fixes a bug where the csync2 service couldn't be disabled (bsc#1175648) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1463=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-cluster-4.2.7-lp152.2.3.1 References: https://bugzilla.suse.com/1175648

1 0

openSUSE-RU-2020:1461-1: moderate: Recommended update for gtk3
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1461-1 Rating: moderate References: #1167951 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gtk3 fixes the following issues: Update from version 3.24.14 to version 3.24.20 - Updated translations. - GtkMenu under X11 cannot work with touchscreen because it cannot handle touch events properly. (bsc#1167951) - GtkFileChooser: - Prevent selection changes after overwrite confirmation. - Don't grab focus to the sidebar on click. - Avoid a use-after-free in GtkFileSystemModel. - Fix some keynav issues. - Fix a crash. - Support selecting directories with a new enough file chooser portal. - GtkEmojiChooser: Remove blacklist. - GtkAboutDialog: Add more licenses. - GtkMenuButton: disable focus-on-click. - Adwaita: - Lower the contrast of checkboxes - Use tabular figures where appropriate. - Color tweaks for dark mode. - Improve rendering of rounded corners. - HighContrast: Export the same public colors as Adwaita - Derive the HighContrast and HighContrastInverse themes from Adwaita. - Wayland: - Fix more sizing regressions in Epiphany and LibreOffice menus and popups in general. - Fix firefox sizing problems. - Prevent Alt lingering after Alt-Tab. - Load compose sequences from ~/.Compose. - Fix a crash in the Wayland input method. - Fix problems with clipboard handling. - Fix a crash in the Wayland input method. - Support cursor scale of 400%. - Fix a crash in glade. - textview: Speed up tag handling. - css: Support font-feature-settings This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1461=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gettext-its-gtk3-3.24.20-lp152.2.3.1 gtk3-debugsource-3.24.20-lp152.2.3.1 gtk3-devel-3.24.20-lp152.2.3.1 gtk3-devel-debuginfo-3.24.20-lp152.2.3.1 gtk3-devel-doc-3.24.20-lp152.2.3.1 gtk3-immodule-amharic-3.24.20-lp152.2.3.1 gtk3-immodule-amharic-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-broadway-3.24.20-lp152.2.3.1 gtk3-immodule-broadway-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-inuktitut-3.24.20-lp152.2.3.1 gtk3-immodule-inuktitut-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-multipress-3.24.20-lp152.2.3.1 gtk3-immodule-multipress-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-thai-3.24.20-lp152.2.3.1 gtk3-immodule-thai-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-tigrigna-3.24.20-lp152.2.3.1 gtk3-immodule-tigrigna-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-vietnamese-3.24.20-lp152.2.3.1 gtk3-immodule-vietnamese-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-wayland-3.24.20-lp152.2.3.1 gtk3-immodule-wayland-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-xim-3.24.20-lp152.2.3.1 gtk3-immodule-xim-debuginfo-3.24.20-lp152.2.3.1 gtk3-tools-3.24.20-lp152.2.3.1 gtk3-tools-debuginfo-3.24.20-lp152.2.3.1 libgtk-3-0-3.24.20-lp152.2.3.1 libgtk-3-0-debuginfo-3.24.20-lp152.2.3.1 typelib-1_0-Gtk-3_0-3.24.20-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): gtk3-branding-openSUSE-15.0-lp152.4.3.1 gtk3-branding-upstream-3.24.20-lp152.2.3.1 gtk3-data-3.24.20-lp152.2.3.1 gtk3-lang-3.24.20-lp152.2.3.1 gtk3-schema-3.24.20-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): gtk3-devel-32bit-3.24.20-lp152.2.3.1 gtk3-devel-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-amharic-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-amharic-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-inuktitut-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-inuktitut-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-multipress-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-multipress-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-thai-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-thai-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-tigrigna-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-tigrigna-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-vietnamese-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-vietnamese-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-wayland-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-wayland-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-immodule-xim-32bit-3.24.20-lp152.2.3.1 gtk3-immodule-xim-32bit-debuginfo-3.24.20-lp152.2.3.1 gtk3-tools-32bit-3.24.20-lp152.2.3.1 gtk3-tools-32bit-debuginfo-3.24.20-lp152.2.3.1 libgtk-3-0-32bit-3.24.20-lp152.2.3.1 libgtk-3-0-32bit-debuginfo-3.24.20-lp152.2.3.1 References: https://bugzilla.suse.com/1167951

1 0

openSUSE-RU-2020:1467-1: moderate: Recommended update for php7-ice
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for php7-ice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1467-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for php7-ice fixes the following issues: This update ships the php7 ice module 1.6.2. * Model, get related record if field is null fix #275 * Pagination, calculate if data is array or total is specified #273 * Url, fixed getStatic() #193 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1467=1 Package List: - openSUSE Leap 15.2 (x86_64): php7-ice-1.6.2-lp152.2.3.1 php7-ice-debuginfo-1.6.2-lp152.2.3.1 php7-ice-debugsource-1.6.2-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1464-1: moderate: Recommended update for rstudio
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for rstudio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1464-1 Rating: moderate References: #1172426 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rstudio fixes the following issues: Build and deliver rstudio 1.3.1073 on Leap 15.2. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1464=1 Package List: - openSUSE Leap 15.2 (x86_64): rstudio-1.3.1073-lp152.2.3.1 rstudio-debuginfo-1.3.1073-lp152.2.3.1 rstudio-debugsource-1.3.1073-lp152.2.3.1 rstudio-desktop-1.3.1073-lp152.2.3.1 rstudio-desktop-debuginfo-1.3.1073-lp152.2.3.1 rstudio-server-1.3.1073-lp152.2.3.1 rstudio-server-debuginfo-1.3.1073-lp152.2.3.1 References: https://bugzilla.suse.com/1172426

1 0

openSUSE-RU-2020:1457-1: moderate: Recommended update for postgresql-pgagent
by maintenance＠opensuse.org 19 Sep '20

19 Sep '20

openSUSE Recommended Update: Recommended update for postgresql-pgagent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1457-1 Rating: moderate References: #1174996 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for postgresql-pgagent provides the following fixes: - Do not build postgresql11 and postgresql12 flavors where they're not available. - Drop postgresql94 flavor: pgsql 9.4 is EOL. - adding postgresql12 to _multibuild (bsc#1174996) - Remove postgresql93 from multibuild and add postgresql11. - Fix build with PostgreSQL 11. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1457=1 Package List: - openSUSE Leap 15.2 (x86_64): postgresql10-pgagent-4.0.0-lp152.3.3.1 postgresql10-pgagent-debuginfo-4.0.0-lp152.3.3.1 postgresql10-pgagent-debugsource-4.0.0-lp152.3.3.1 postgresql11-pgagent-4.0.0-lp152.3.3.1 postgresql11-pgagent-debuginfo-4.0.0-lp152.3.3.1 postgresql11-pgagent-debugsource-4.0.0-lp152.3.3.1 postgresql12-pgagent-4.0.0-lp152.3.3.1 postgresql12-pgagent-debuginfo-4.0.0-lp152.3.3.1 postgresql12-pgagent-debugsource-4.0.0-lp152.3.3.1 postgresql96-pgagent-4.0.0-lp152.3.3.1 postgresql96-pgagent-debuginfo-4.0.0-lp152.3.3.1 postgresql96-pgagent-debugsource-4.0.0-lp152.3.3.1 References: https://bugzilla.suse.com/1174996

1 0

openSUSE-SU-2020:1452-1: moderate: Security update for libqt4
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for libqt4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1452-1 Rating: moderate References: #1118595 #1118596 #1118599 #1121214 #1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for libqt4 fixes the following issues: * Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507) * Fix "double free or corruption" in QXmlStreamReader (boo#1118595, CVE-2018-15518) * Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873) * Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1452=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libqt4-4.8.7-lp151.9.3.1 libqt4-debuginfo-4.8.7-lp151.9.3.1 libqt4-debugsource-4.8.7-lp151.9.3.1 libqt4-devel-4.8.7-lp151.9.3.1 libqt4-devel-debuginfo-4.8.7-lp151.9.3.1 libqt4-linguist-4.8.7-lp151.9.3.1 libqt4-linguist-debuginfo-4.8.7-lp151.9.3.1 libqt4-private-headers-devel-4.8.7-lp151.9.3.1 libqt4-qt3support-4.8.7-lp151.9.3.1 libqt4-qt3support-debuginfo-4.8.7-lp151.9.3.1 libqt4-sql-4.8.7-lp151.9.3.1 libqt4-sql-debuginfo-4.8.7-lp151.9.3.1 libqt4-sql-sqlite-4.8.7-lp151.9.3.1 libqt4-sql-sqlite-debuginfo-4.8.7-lp151.9.3.1 libqt4-x11-4.8.7-lp151.9.3.1 libqt4-x11-debuginfo-4.8.7-lp151.9.3.1 - openSUSE Leap 15.1 (x86_64): libqt4-32bit-4.8.7-lp151.9.3.1 libqt4-32bit-debuginfo-4.8.7-lp151.9.3.1 libqt4-devel-32bit-4.8.7-lp151.9.3.1 libqt4-devel-32bit-debuginfo-4.8.7-lp151.9.3.1 libqt4-devel-doc-4.8.7-lp151.9.3.1 libqt4-devel-doc-debuginfo-4.8.7-lp151.9.3.1 libqt4-devel-doc-debugsource-4.8.7-lp151.9.3.1 libqt4-qt3support-32bit-4.8.7-lp151.9.3.1 libqt4-qt3support-32bit-debuginfo-4.8.7-lp151.9.3.1 libqt4-sql-32bit-4.8.7-lp151.9.3.1 libqt4-sql-32bit-debuginfo-4.8.7-lp151.9.3.1 libqt4-sql-plugins-debugsource-4.8.7-lp151.9.3.1 libqt4-sql-postgresql-4.8.7-lp151.9.3.1 libqt4-sql-postgresql-debuginfo-4.8.7-lp151.9.3.1 libqt4-sql-sqlite-32bit-4.8.7-lp151.9.3.1 libqt4-sql-sqlite-32bit-debuginfo-4.8.7-lp151.9.3.1 libqt4-sql-unixODBC-4.8.7-lp151.9.3.1 libqt4-sql-unixODBC-debuginfo-4.8.7-lp151.9.3.1 libqt4-x11-32bit-4.8.7-lp151.9.3.1 libqt4-x11-32bit-debuginfo-4.8.7-lp151.9.3.1 qt4-x11-tools-4.8.7-lp151.9.3.1 qt4-x11-tools-debuginfo-4.8.7-lp151.9.3.1 - openSUSE Leap 15.1 (noarch): libqt4-devel-doc-data-4.8.7-lp151.9.3.1 References: https://www.suse.com/security/cve/CVE-2018-15518.html https://www.suse.com/security/cve/CVE-2018-19869.html https://www.suse.com/security/cve/CVE-2018-19873.html https://www.suse.com/security/cve/CVE-2020-17507.html https://bugzilla.suse.com/1118595 https://bugzilla.suse.com/1118596 https://bugzilla.suse.com/1118599 https://bugzilla.suse.com/1121214 https://bugzilla.suse.com/1176315

1 0

openSUSE-RU-2020:1450-1: moderate: Recommended update for smtube
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for smtube ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1450-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for smtube fixes the following issues: Update to version 20.6.0: * New option in preferences to select the site to use as homepage. * The internal youtube code has been removed and now smtube just uses youtube-dl to get the video urls. * New option in the help menu to help install youtube-dl. - Youtube-dl is not required, so changed Suggest: youtube-dl to Required: youtube-dl This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1450=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): smtube-20.6.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): smtube-lang-20.6.0-bp152.2.3.1 References:

1 0

openSUSE-RU-2020:1451-1: moderate: Recommended update for cryptsetup
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for cryptsetup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1451-1 Rating: moderate References: #1165580 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cryptsetup fixes the following issues: Update from version 2.0.5 to version 2.0.6. (jsc#SLE-5911, bsc#1165580) - Fix support of larger metadata areas in *LUKS2* header. This release properly supports all specified metadata areas, as documented in *LUKS2* format description. Currently, only default metadata area size is used (in format or convert). Later cryptsetup versions will allow increasing this metadata area size. - If *AEAD* (authenticated encryption) is used, cryptsetup now tries to check if the requested *AEAD* algorithm with specified key size is available in kernel crypto API. This change avoids formatting a device that cannot be later activated. For this function, the kernel must be compiled with the *CONFIG_CRYPTO_USER_API_AEAD* option enabled. Note that kernel user crypto API options (*CONFIG_CRYPTO_USER_API* and *CONFIG_CRYPTO_USER_API_SKCIPHER*) are already mandatory for LUKS2. - Fix setting of integrity no-journal flag. Now you can store this flag to metadata using *\--persistent* option. - Fix cryptsetup-reencrypt to not keep temporary reencryption headers if interrupted during initial password prompt. - Adds early check to plain and LUKS2 formats to disallow device format if device size is not aligned to requested sector size. Previously it was possible, and the device was rejected to activate by kernel later. - Fix checking of hash algorithms availability for *PBKDF* early. Previously *LUKS2* format allowed non-existent hash algorithm with invalid keyslot preventing the device from activation. - Allow Adiantum cipher construction (a non-authenticated length-preserving fast encryption scheme), so it can be used both for data encryption and keyslot encryption in *LUKS1/2* devices. For benchmark, use: # cryptsetup benchmark -c xchacha12,aes-adiantum # cryptsetup benchmark -c xchacha20,aes-adiantum For LUKS format: # cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 <device> This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1451=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cryptsetup-2.0.6-lp151.2.3.1 cryptsetup-debuginfo-2.0.6-lp151.2.3.1 cryptsetup-debugsource-2.0.6-lp151.2.3.1 libcryptsetup-devel-2.0.6-lp151.2.3.1 libcryptsetup12-2.0.6-lp151.2.3.1 libcryptsetup12-debuginfo-2.0.6-lp151.2.3.1 libcryptsetup12-hmac-2.0.6-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libcryptsetup12-32bit-2.0.6-lp151.2.3.1 libcryptsetup12-32bit-debuginfo-2.0.6-lp151.2.3.1 libcryptsetup12-hmac-32bit-2.0.6-lp151.2.3.1 References: https://bugzilla.suse.com/1165580

1 0

openSUSE-RU-2020:1444-1: moderate: Recommended update for profanity
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for profanity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1444-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for profanity fixes the following issues: Update to 0.9.5: * Fix segfault in /theme properties due to uninitialized titlebar.scrollable (#1380) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1444=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): profanity-0.9.5-bp152.2.3.1 profanity-mini-0.9.5-bp152.2.3.1 profanity-standard-0.9.5-bp152.2.3.1 References:

1 0

openSUSE-RU-2020:1436-1: moderate: Recommended update for xournalpp
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for xournalpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1436-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xournalpp fixes the following issues: - Add Recommends tex(standalone.tex) instead of Requires: texlive-latex-bin, so that users can uninstall texlive packages should they not use this particular feature. The standalone pkg is required for the feature to work and it pulls in the right texlive dependencies as Recommends. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1436=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): xournalpp-1.0.18-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): xournalpp-lang-1.0.18-bp152.2.3.1 References:

1 0

openSUSE-RU-2020:1124-1: moderate: Recommended update for HepMC
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for HepMC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1124-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for HepMC fixes the following issues: HepMC was updated to version 3.2.2: * Fixed treatment of the weights in case of different number of weights and weight names. * Fixed WriterAsciiHepMC2 option for separate flows. * Improved treatment of python installation. * Split the sources of python bindings into smaller files to optimize compilation. * Improved cmake configuration for special cases, e.g. old cmake, no ROOT, some compilers, etc. Added more error handling. * Fixed compilation of the search module with Clang. * Added an example for search module. * Fixed the HepMC2 output for events without weights. * Fixed the signal vertex ID for HepMC2 output. * Added an interface for HepMC2 (in-memory-conversion). * Added functions to search module: search for relatives (particle or vertex)->(particle or vertex) in different combinations. * The previous point bumps .so version of the libHepMC3search to 4. * Improved the configuration of Pythia8 for tests (minimal version requirement). * Fixed compatibility of ROOT trees written with HePMC3.0 and removed the typedefs in the dictionaries. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1124=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): HepMC-devel-3.2.2-bp152.2.3.1 HepMC-doc-3.2.2-bp152.2.3.1 libHepMC3-1-3.2.2-bp152.2.3.1 python3-HepMC-3.2.2-bp152.2.3.1 References:

1 0

openSUSE-RU-2020:1429-1: moderate: Recommended update for libmediainfo, mediainfo
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for libmediainfo, mediainfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1429-1 Rating: moderate References: #1173630 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libmediainfo, mediainfo fixes the following issues: libmediainfo was updated to version 20.08: Added: * MPEG-H 3D Audio full featured support (group presets, switch groups, groups, signal groups) * MP4/MOV: support of more metadata locations * JSON and XML outputs: authorize "complete" output * MPEG-4: support of TrueHD * WM: show legacy value of performer if not same as modern one * WAV: trace of adtl (Associated Data List) chunk Fixed: * URL encoding detection fix for URL having a query part (issue with e.g. pre-signed AWS S3 URLs) * Don't try to seek to the end (false positive range related error with HTTP) * DPX: don't load the whole file in RAM * Opus: fix wrong channel mapping * Miscellaneous other bug fixes version 20.03 Added features: * AC-4 full featured support (presentations, groups, substreams) * MPEG-H 3D Audio basic support * MPEG-TS: audio preselection descriptor support * Dolby Vision v2 detection * MPEG-4: support of colr/nclx (color information) box Bugs fixed: * URL encoding option fixes, permitting to use URL encoded or non URL encoded links * AAC: fix SBR frequency when in ADIF * DPX: ColorimetricSpecification and TransferCharacteristic were inverted * Some API calls were not thread safe * Several crash and memory leaks fixes version 19.09 Added: * AC-4: basic detection, raw, in MP4 or TS * AC-3/E-AC-3: display time code of the first frame * Don't show anymore by default "encoded" bit rates and stream sizes * MOV: Decode more language codes Corrections: * MXF: some metadata were missing * AC-3: AC-3 actually has no bit depth, removing the default 16 value * AC-3/E-AC-3: fix bitrate info (so duration) with streams having a time code * AC-3: parse more frames also when in MP4, in order to better detect JOC (Atmos) * MP4: do not show audio bit depth if it is the "default" 16 (value is not trustable enough) * ProRes RAW: we know only width and height * SubRip: bad handling of files having a quote character version 19.07 Added: * Dolby E: readout of Dolby E program description * MXF: Detection of Dolby Vision * MP4: support of Spatial Audio Metadata * DV: color space is explicit * DV: audio format settings * Matroska: PCM bit rate * MOV, MXF: Time code frame rate * DV: DVCAM commercial name for locked audio and PAL 4:2:0 * MXF: Time code track name Corrections: * USAC: frame rate was missing in case of non standard sampling rate * USAC: fix infinite loop with some LATM streams * WAV: MP3 delay should be added to BWF time reference * TTML: fix wrong output with standalone files * N19/STL: fix crash with some uncommon framerates * VC-3: fix sub sampling with some v2 files * DV: Time code frame number was wrong (divided by 2) for 50/60 fps content version 19.04 Added: * USAC: DRC effect types, Sample peak level, True peak level, Program loudness * HDR: SMPTE ST 2094 App 4 (including HDR10+) support * HDR: move HDR10, Dolby Vision and SL-HDR meta to specific generic "HDR Format" lines * Matroska: SMPTE ST 2086 (HDR10) support * Matroska: FieldOrder support * HEIF image format support * AV1: support of AV1 in MP4, HEIF, IVF * MOV: Add a lot more countries to AppleStoreCountry field internal list * MXF: Fix memory leak when fully parsing big file with acquisition metadata * HEVC: more HEVC profiles (Multiview, Scalable, Screen Content...) * AAC: better handling of corrupted streams * AAC: better handling of unknown channel layouts * AVC in MP4: better support of corrupted streams Corrected: * B1101, AVI: fix crash with some invalid streams * B1101, SMPTE ST 337: fix crash with some invalid streams * Matroska: chapters timestamp were not display if chapters have no name * MXF: Fix false positive truncated file detection when there is no Random Index Pack * AAC: channel layout typos (Rls instead of Lrs, Lr instead of Rb) * ProRes: correctly show color space if alpha plane is present * MPEG Audio: some VBR files use "Info" Xing header, so we ignore the difference between "Info" and "Xing" * I943, MPEG-4: wrong display aspect ratio in some corner cases (32-bit release only) * I1096, OGG: assign METADATA_BLOCK_PICTURE tag to cover * I339, text in square brackets stripped in $if() section version 18.12 Added features: * DCP: support of multi-reel packages * EBUCore: added some FFV1 related metadata * JPEG: better info display of CYMK files * Provide source of the color related metadata (container or stream) (hidden by default) * MXF: display more information when wrapper/essence values are detected as not same * MXF: ProRes profiles * MPEG-4: ProRes RAW support * MPEG-TS: add support of parsing some ETSI TS 103-433 messages Bug fixes: * MPEG-2 Video: variable GOP detection fix * MPEG-7 export: some fields were missing due to the removal of some legacy fields * ADTS: Fix display of channel count for 8-channel streams * ID3v2: fix some date related issues * I298, ID3v2: fix wrong read of recording date in some cases * I1032, PBCore2: fix essenceFrameSize with non Video tracks * I1096, JPEG: fix crash with one file * Several other crash and memory leak fixes version 18.08.1 * Fix XML/MPEG-7/PBCore2 output discarding non ANSI characters version 18.08 Added features: * Dolby Atmos (in E-AC-3 or TrueHD): support of bed channel count/configuration + objects count + complexity index * AC-3/DTS/AAC: display of info about legacy decoders behavior removed * AC-3/DTS/AAC: some changes in how format is displayed * AC-3/DTS/AAC: better split between technical names and commercial names * AAC: support of profile information from MP4_IOD_Tag AudioProfileLevelIndication * USAC (xHE-AAC) support * Audio channel layout: using a new terminology, better suited for 3D Audio, see https://mediaarea.net/AudioChannelLayout * DSD (DSF & DSDIFF) support * DXD (Digital eXtreme Definition) commercial name * Dolby Vision: use new form for profile (numbers instead of acronyms) * New format "Directory" when image sequence + audio file is detected (1 directory style for the moment) * PBCore2 export update, thanks to WGBH * MPEG-7 export update * NISO export update * AV1: support of AOmedia AV1 based on 1.0.0 specifications * ATRAC9 detection * Versionned RPMs * HEVC: better support of buggy SEI * ADTS: CodecID * Support of injection of external metadata * HTTPS: support of AWS extension "x-amz-*" in HTTPS headers, permitting to manage temporary credentials (AssumeRole) * MPEG-4, #1005: Obey edit list in QuickTime Timecode track Bug corrections: * MIXML: hide fields which were hidden in normal output * Hybrid AC-3/E-AC-3 (in Blu-rays): bit rate info was wrong * Lot of bug fixes, see full log for more info version 18.05 Added: * PBCore 2.1 export update, sponsored by WGBH as part of the NEH-funded PBCore Development and Preservation Project * TIFF: more IFDs are supported (density, software...) * NISO Z39.87 output Fixed: * Mastering Display Color Primaries: was always showing BT.709 instead of real value, when present * Attachments: do not provide anymore attachments content in XML by default, fixes mediainfo was updated to version 20.08: Added: * MPEG-H 3D Audio full featured support (group presets, switch groups, groups, signal groups) * MP4/MOV: support of more metadata locations * JSON and XML outputs: authorize "complete" output * MPEG-4: support of TrueHD * WM: show legacy value of performer if not same as modern one * WAV: trace of adtl (Associated Data List) chunk Fixed: * URL encoding detection fix for URL having a query part (issue with e.g. pre-signed AWS S3 URLs) * Don't try to seek to the end (false positive range related error with HTTP) * DPX: don't load the whole file in RAM * Opus: fix wrong channel mapping * Miscellaneous other bug fixes version 20.03 Added features: * AC-4 full featured support (presentations, groups, substreams) * MPEG-H 3D Audio basic support * MPEG-TS: audio preselection descriptor support * Dolby Vision v2 detection * MPEG-4: support of colr/nclx (color information) box Bugs fixed: * URL encoding option fixes, permitting to use URL encoded or non URL encoded links * AAC: fix SBR frequency when in ADIF * DPX: ColorimetricSpecification and TransferCharacteristic were inverted * Several crash and memory leaks fixes version 19.09 Added: * AC-4: basic detection, raw, in MP4 or TS * AC-3/E-AC-3: display time code of the first frame * Don't show anymore by default "encoded" bit rates and stream sizes * MOV: Decode more language codes Corrections: * MXF: some metadata were missing * AC-3: AC-3 actually has no bit depth, removing the default 16 value * AC-3/E-AC-3: fix bitrate info (so duration) with streams having a time code * AC-3: parse more frames also when in MP4, in order to better detect JOC (Atmos) * MP4: do not show audio bit depth if it is the "default" 16 (value is not trustable enough) * ProRes RAW: we know only width and height * SubRip: bad handling of files having a quote character version 19.07 Added: * Dolby E: readout of Dolby E program description * MXF: Detection of Dolby Vision * MP4: support of Spatial Audio Metadata * DV: color space is explicit * DV: audio format settings * Matroska: PCM bit rate * MOV, MXF: Time code frame rate * DV: DVCAM commercial name for locked audio and PAL 4:2:0 * MXF: Time code track name Corrected: * USAC: frame rate was missing in case of non standard sampling rate * USAC: fix infinite loop with some LATM streams * WAV: MP3 delay should be added to BWF time reference * TTML: fix wrong output with standalone files * N19/STL: fix crash with some uncommon framerates * VC-3: fix sub sampling with some v2 files * DV: Time code frame number was wrong (divided by 2) for 50/60 fps content version 19.04 Added: * USAC: DRC effect types, Sample peak level, True peak level, Program loudness * HDR: SMPTE ST 2094 App 4 (including HDR10+) support * HDR: move HDR10, Dolby Vision and SL-HDR meta to specific generic "HDR Format" lines * Matroska: SMPTE ST 2086 (HDR10) support * Matroska: FieldOrder support * HEIF image format support * AV1: support of AV1 in MP4, HEIF, IVF * MOV: Add a lot more countries to AppleStoreCountry field internal list * MXF: Fix memory leak when fully parsing big file with acquisition metadata * HEVC: more HEVC profiles (Multiview, Scalable, Screen Content...) * AAC: better handling of corrupted streams * AAC: better handling of unknown channel layouts * AVC in MP4: better support of corrupted streams Changed: * B1101, AVI: fix crash with some invalid streams * B1101, SMPTE ST 337: fix crash with some invalid streams * Matroska: chapters timestamp were not display if chapters have no name * MXF: Fix false positive truncated file detection when there is no Random Index Pack * AAC: channel layout typos (Rls instead of Lrs, Lr instead of Rb) * ProRes: correctly show color space if alpha plane is present * MPEG Audio: some VBR files use "Info" Xing header, so we ignore the difference between "Info" and "Xing" * I943, MPEG-4: wrong display aspect ratio in some corner cases (32-bit release only) * I1096, OGG: assign METADATA_BLOCK_PICTURE tag to cover version 18.12 Added features: * DCP: support of multi-reel packages * EBUCore: added some FFV1 related metadata * JPEG: better info display of CYMK files * Provide source of the color related metadata (container or stream) (hidden by default) * MXF: display more information when wrapper/essence values are detected as not same * MXF: ProRes profiles * MPEG-4: ProRes RAW support * MPEG-TS: add support of parsing some ETSI TS 103-433 messages Bug fixes: * MPEG-2 Video: variable GOP detection fix * MPEG-7 export: some fields were missing due to the removal of some legacy fields * ADTS: Fix display of channel count for 8-channel streams * ID3v2: fix some date related issues * I298, ID3v2: fix wrong read of recording date in some cases * I1032, PBCore2: fix essenceFrameSize with non Video tracks * I1096, JPEG: fix crash with one file * Several other crash and memory leak fixes version 18.08.1 * Fix XML/MPEG-7/PBCore2 output discarding non ANSI characters version 18.08 Added features: * Dolby Atmos (in E-AC-3 or TrueHD): support of bed channel count/configuration + objects count + complexity index * AC-3/DTS/AAC: display of info about legacy decoders behavior removed * AC-3/DTS/AAC: some changes in how format is displayed * AC-3/DTS/AAC: better split between technical names and commercial names * AAC: support of profile information from MP4_IOD_Tag AudioProfileLevelIndication * USAC (xHE-AAC) support * Audio channel layout: using a new terminology, better suited for 3D Audio, see https://mediaarea.net/AudioChannelLayout * DSD (DSF & DSDIFF) support * DXD (Digital eXtreme Definition) commercial name * Dolby Vision: use new form for profile (numbers instead of acronyms) * New format "Directory" when image sequence + audio file is detected (1 directory style for the moment) * PBCore2 export update, thanks to WGBH * MPEG-7 export update * NISO export update * AV1: support of AOmedia AV1 based on 1.0.0 specifications * ATRAC9 detection * Versionned RPMs * HEVC: better support of buggy SEI * ADTS: CodecID * Support of injection of external metadata * HTTPS: support of AWS extension "x-amz-*" in HTTPS headers, permitting to manage temporary credentials (AssumeRole) * MPEG-4, #1005: Obey edit list in QuickTime Timecode track Bug corrections: * MIXML: hide fields which were hidden in normal output * Hybrid AC-3/E-AC-3 (in Blu-rays): bit rate info was wrong * Lot of bug fixes, see full log for more info version 18.05 Added: * PBCore 2.1 export update, sponsored by WGBH as part of the NEH-funded PBCore Development and Preservation Project * TIFF: more IFDs are supported (density, software...) * NISO Z39.87 output Fixed: * Mastering Display Color Primaries: was always showing BT.709 instead of real value, when present * Attachments: do not provide anymore attachments content in XML by default, fixes This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1429=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): kf5-mediainfo-20.08-bp152.4.3.1 libmediainfo-devel-20.08-bp152.4.3.1 libmediainfo0-20.08-bp152.4.3.1 mediainfo-20.08-bp152.4.3.1 mediainfo-debuginfo-20.08-bp152.4.3.1 mediainfo-debugsource-20.08-bp152.4.3.1 mediainfo-gui-20.08-bp152.4.3.1 mediainfo-gui-debuginfo-20.08-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): libmediainfo0-64bit-20.08-bp152.4.3.1 References: https://bugzilla.suse.com/1173630

1 0

openSUSE-RU-2020:1097-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1097-1 Rating: moderate References: #1171438 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for keepassxc fixes the following issues: - Update to version 2.6.0: * https://keepassxc.org/blog/2020-07-07-2.6.0-released/ * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1097=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.0-bp152.3.8.1 - openSUSE Backports SLE-15-SP2 (noarch): keepassxc-lang-2.6.0-bp152.3.8.1 References: https://bugzilla.suse.com/1171438

1 0

openSUSE-RU-2020:1125-1: moderate: Recommended update for HepMC2
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for HepMC2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1125-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for HepMC2 fixes the following issues: HepMC2 was updated to version 2.06.11: * HepMC/HepMCDefs.h: Add a HEPMC_HAS_ORDERED_WEIGHTS #define. * HepMC/WeightContainer.h: Add weights() and weight_names() public methods. * src/WeightContainer.cc: Fix print() to use canonical weight ordering. * src/GenEventStreamIO.cc: Fix the I/O streaming to preserve the weight ordering. * Fixed the tests. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1125=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): HepMC2-devel-2.06.11-bp152.4.3.1 libHepMC4-2.06.11-bp152.4.3.1 References:

1 0

openSUSE-RU-2020:1434-1: moderate: Recommended update for osc-plugin-collab
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for osc-plugin-collab ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1434-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for osc-plugin-collab fixes the following issues: Update to version 0.103: + Call time.tzset() after changing the timezone (#53) + Fix python2 compatibility (#49) Update to version 0.102: + Fix configuring on python3 + Fix another str vs. bytes issue Update to version 0.101: + Port to python3 + Use https on the server Update to version 0.100: + Support new location for oscrc in ~/.config/osc/ This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1434=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): osc-plugin-collab-0.103-bp152.4.3.1 References:

1 0

openSUSE-SU-2020:1215-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1215-1 Rating: important References: #1174497 #1175044 #1175085 Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 (boo#1175085) * CVE-2020-6542: Use after free in ANGLE * CVE-2020-6543: Use after free in task scheduling * CVE-2020-6544: Use after free in media * CVE-2020-6545: Use after free in audio * CVE-2020-6546: Inappropriate implementation in installer * CVE-2020-6547: Incorrect security UI in media * CVE-2020-6548: Heap buffer overflow in Skia * CVE-2020-6549: Use after free in media * CVE-2020-6550: Use after free in IndexedDB * CVE-2020-6551: Use after free in WebXR * CVE-2020-6552: Use after free in Blink * CVE-2020-6553: Use after free in offline mode * CVE-2020-6554: Use after free in extensions * CVE-2020-6555: Out of bounds read in WebGL * Various fixes from internal audits, fuzzing and other initiatives - Disable wayland everywhere as it breaks headless and middle mouse copy everywhere: boo#1174497 boo#1175044 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1215=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): chromedriver-84.0.4147.125-bp152.2.13.1 chromium-84.0.4147.125-bp152.2.13.1 References: https://www.suse.com/security/cve/CVE-2020-6542.html https://www.suse.com/security/cve/CVE-2020-6543.html https://www.suse.com/security/cve/CVE-2020-6544.html https://www.suse.com/security/cve/CVE-2020-6545.html https://www.suse.com/security/cve/CVE-2020-6546.html https://www.suse.com/security/cve/CVE-2020-6547.html https://www.suse.com/security/cve/CVE-2020-6548.html https://www.suse.com/security/cve/CVE-2020-6549.html https://www.suse.com/security/cve/CVE-2020-6550.html https://www.suse.com/security/cve/CVE-2020-6551.html https://www.suse.com/security/cve/CVE-2020-6552.html https://www.suse.com/security/cve/CVE-2020-6553.html https://www.suse.com/security/cve/CVE-2020-6554.html https://www.suse.com/security/cve/CVE-2020-6555.html https://bugzilla.suse.com/1174497 https://bugzilla.suse.com/1175044 https://bugzilla.suse.com/1175085

1 0

openSUSE-RU-2020:1054-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1054-1 Rating: moderate References: #1171438 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for keepassxc fixes the following issues: - Update to version 2.6.0: * https://keepassxc.org/blog/2020-07-07-2.6.0-released/ * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1054=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.0-bp152.3.4.1 - openSUSE Backports SLE-15-SP2 (noarch): keepassxc-lang-2.6.0-bp152.3.4.1 References: https://bugzilla.suse.com/1171438

1 0

openSUSE-RU-2020:1394-2: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1394-2 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc was updated to version 2.6.1: - Add menu entries for auto-typing only username or only password [#4891] - Browser: Add command for retrieving current TOTP [#5278] - Improve man pages [#5010] - Linux: Support Xfce screen lock signals [#4971] - Linux: Add OARS metadata to AppStream markup [#5031] - SSH Agent: Substitute tilde with %USERPROFILE% on Windows [#5116] - Improve password generator UI and UX [#5129] - Do not prompt to restart if switching the theme back and forth [#5084] - Change actions for F1, F2, and F3 keys [#5082] - Skip referenced passwords in health check report [#5056] - Check system-wide Qt translations directory for downstream - translations packaging [#5064] - macOS: Change password visibility toggle shortcut to Ctrl+H to - avoid conflict with system shortcut [#5114] - Browser: Only display domain name in browser access confirm dialog to avoid overly wide window sizes [#5214] - Fix clipboard not being cleared when database is locked while timeout is still active [#5184] - Fix list of previous databases not being cleared in some cases [#5123] - Fix saving of non-data changes on database lock [#5210] - Fix search results banner theming [#5197] - Don’t enforce theme palette in Classic theme mode and add hover effect for buttons [#5122, #5267] - Fix label clipping in settings on high-DPI screens [#5227] - Fix excessive memory usage by icons on systems with high-DPI screens [#5266] - Fix crash if number of TOTP digits exceeds ten [#5106] - Fix slot detection when first YubiKey is configured on the second slot [#5004] - Prevent crash if focus widget gets deleted during saving [#5005] - Always show buttons for opening or saving attachments [#4956] - Update link to Auto-Type help [#5228] - Fix build errors with Ninja [#5121] - CLI: Fix db-info command wrongly labelled as db-show in usage listing [#5140] - Windows: Use Classic theme by default if high-contrast mode is on [#5191] - Linux: Add workaround for qt5ct bug, causing icons not to show up [#5011] - Linux: Correct high-DPI display by not allowing fractional scaling [#5185] - Browser: Consider subdomain and path when requesting only “best-matching credentials” [#4832] - SSH Agent: Always forget all keys on lock [#5115] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1394=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.1-bp152.3.11.1 keepassxc-debuginfo-2.6.1-bp152.3.11.1 keepassxc-debugsource-2.6.1-bp152.3.11.1 - openSUSE Backports SLE-15-SP2 (noarch): keepassxc-lang-2.6.1-bp152.3.11.1 References:

1 0

openSUSE-SU-2020:1428-1: important: Security update for librepo
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for librepo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1428-1 Rating: important References: #1175475 Cross-References: CVE-2020-14352 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for librepo fixes the following issues: - Fixed path validation to prevent directory traversal attacks (bsc#1175475, CVE-2020-14352) This update was imported from the SUSE:SLE-15-SP2:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1428=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): librepo-devel-1.11.2-bp152.2.3.1 librepo0-1.11.2-bp152.2.3.1 python3-librepo-1.11.2-bp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14352.html https://bugzilla.suse.com/1175475

1 0

openSUSE-SU-2020:1438-1: moderate: Security update for hylafax+
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1438-1 Rating: moderate References: #1173519 #1173521 Cross-References: CVE-2020-15396 CVE-2020-15397 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for hylafax+ fixes the following issues: Hylafax was updated to upstream version 7.0.3. Security issues fixed: - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521). - CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519). Non-security issues fixed: * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl (31 Jul 2020) * be more resilient in listening for the Phase C carrier (30 Jul 2020) * make sure to return to command mode if HDLC receive times out (29 Jul 2020) * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020) * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020) * don't ever respond to CRP with CRP (28 Jul 2020) * reset frame counter when a sender retransmits PPS for a previously confirmed ECM block (26 Jul 2020) * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020) * fix modem recovery after SSL Fax failure (22, 26 Jul 2020) * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020) * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020) * run scripts directly rather than invoking them via a shell for security hardening (3-5 Jul 2020) * add senderFumblesECM feature (3 Jul 2020) * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN feature, and utilize PIN for rare conditions where it may be helpful (2, 6, 13-14 Jul 2020) * add senderConfusesRTN feature (25-26 Jun 2020) * add MissedPageHandling feature (24 Jun 2020) * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020) * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020) * fix listening for retransmission of MPS/EOP/EOM if it was received corrupt on the first attempt (15 Jun 2020) * don't use CRP when receiving PPS/PPM as some senders think we are sending MCF (12 Jun 2020) * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020) * have faxinfo put units on non-standard page dimensions (28 May 2020) * improve error messages for JobHost connection errors (22 May 2020) * fix perpetual blocking of jobs when a job preparation fails, attempt to fix similar blocking problems for bad jobs in batches, and add "unblock" faxconfig feature (21 May 2020) * ignore TCF if we're receiving an SSL Fax (31 Jan 2020) * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1438=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): hylafax+-7.0.3-bp152.3.4.1 hylafax+-client-7.0.3-bp152.3.4.1 libfaxutil7_0_3-7.0.3-bp152.3.4.1 References: https://www.suse.com/security/cve/CVE-2020-15396.html https://www.suse.com/security/cve/CVE-2020-15397.html https://bugzilla.suse.com/1173519 https://bugzilla.suse.com/1173521

1 0

openSUSE-SU-2020:1100-1: important: Security update for singularity
by opensuse-security＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Security Update: Security update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1100-1 Rating: important References: #1174148 #1174150 #1174152 Cross-References: CVE-2020-13845 CVE-2020-13846 CVE-2020-13847 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for singularity fixes the following issues: - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems: - CVE-2020-13845, boo#1174150 In Singularity 3.x versions below 3.6.0, issues allow the ECL to be bypassed by a malicious user. - CVE-2020-13846, boo#1174148 In Singularity 3.5 the --all / -a option to singularity verify returns success even when some objects in a SIF container are not signed, or cannot be verified. - CVE-2020-13847, boo#1174152 In Singularity 3.x versions below 3.6.0, Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file, allowing an attacker to cause unexpected behavior. A signed container may verify successfully, even when it has been modified in ways that could be exploited to cause malicious behavior. - New features / functionalities - A new '--legacy-insecure' flag to verify allows verification of SIF signatures in the old, insecure format. - A new '-l / --logs' flag for instance list that shows the paths to instance STDERR / STDOUT log files. - The --json output of instance list now include paths to STDERR / STDOUT log files. - Singularity now supports the execution of minimal Docker/OCI containers that do not contain /bin/sh, e.g. docker://hello-world. - A new cache structure is used that is concurrency safe on a filesystem that supports atomic rename. If you downgrade to Singularity 3.5 or older after using 3.6 you will need to run singularity cache clean. - A plugin system rework adds new hook points that will allow the development of plugins that modify behavior of the runtime. An image driver concept is introduced for plugins to support new ways of handling image and overlay mounts. Plugins built for <=3.5 are not compatible with 3.6. - The --bind flag can now bind directories from a SIF or ext3 image into a container. - The --fusemount feature to mount filesystems to a container via FUSE drivers is now a supported feature (previously an experimental hidden flag). - This permits users to mount e.g. sshfs and cvmfs filesystems to the container at runtime. - A new -c/--config flag allows an alternative singularity.conf to be specified by the root user, or all users in an unprivileged installation. - A new --env flag allows container environment variables to be set via the Singularity command line. - A new --env-file flag allows container environment variables to be set from a specified file. - A new --days flag for cache clean allows removal of items older than a specified number of days. Replaces the --name flag which is not generally useful as the cache entries are stored by hash, not a friendly name. - Changed defaults / behaviours - New signature format (see security fixes above). - Fixed spacing of singularity instance list to be dynamically changing based off of input lengths instead of fixed number of spaces to account for long instance names. - Environment variables prefixed with SINGULARITYENV_ always take precedence over variables without SINGULARITYENV_ prefix. - The %post build section inherits environment variables from the base image. - %files from ... will now follow symlinks for sources that are directly specified, or directly resolved from a glob pattern. It will not follow symlinks found through directory traversal. This mirrors Docker multi-stage COPY behaviour. - Restored the CWD mount behaviour of v2, implying that CWD path is not recreated inside container and any symlinks in the CWD path are not resolved anymore to determine the destination path inside container. - The %test build section is executed the same manner as singularity test image. --fusemount with the container: default directive will foreground the FUSE process. Use container-daemon: for previous behavior. - Deprecate -a / --all option to sign/verify as new signature behavior makes this the default. - For more information about upstream changes, please check: https://github.com/hpcng/singularity/blob/master/CHANGELOG.md - Removed --name flag for cache clean; replaced with --days. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1100=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): singularity-3.6.0-bp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-13845.html https://www.suse.com/security/cve/CVE-2020-13846.html https://www.suse.com/security/cve/CVE-2020-13847.html https://bugzilla.suse.com/1174148 https://bugzilla.suse.com/1174150 https://bugzilla.suse.com/1174152

1 0

openSUSE-RU-2020:1441-1: moderate: Recommended update for akonadi-server
by maintenance＠opensuse.org 18 Sep '20

18 Sep '20

openSUSE Recommended Update: Recommended update for akonadi-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1441-1 Rating: moderate References: #1172539 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for akonadi-server fixes the following issues: - SUSE Linux Enterprise Desktop doesn't include mysql/mariadb but SUSE Linux Enterprise Server does. So make mysql a Recommended (instead of Required) package when building for Backports and add a patch that checks in runtime if mysql is available before setting it as the default database and if it's not, use the QSQLITE3 driver (boo#1172539). Patches already submitted and approved by upstream. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1441=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): akonadi-server-20.04.2-bp152.2.3.1 akonadi-server-devel-20.04.2-bp152.2.3.1 akonadi-server-sqlite-20.04.2-bp152.2.3.1 libKF5AkonadiAgentBase5-20.04.2-bp152.2.3.1 libKF5AkonadiCore5-20.04.2-bp152.2.3.1 libKF5AkonadiPrivate5-20.04.2-bp152.2.3.1 libKF5AkonadiWidgets5-20.04.2-bp152.2.3.1 libKF5AkonadiXml5-20.04.2-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): akonadi-server-lang-20.04.2-bp152.2.3.1 References: https://bugzilla.suse.com/1172539

1 0