September 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1411-1: moderate: Recommended update for xrdp
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1411-1 Rating: moderate References: #1171415 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xrdp fixes the following issue: - Fallback session to icewm when a selected desktop environment is not found (bsc#1171415) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1411=1 Package List: - openSUSE Leap 15.2 (x86_64): libpainter0-0.9.13.1-lp152.3.6.1 libpainter0-debuginfo-0.9.13.1-lp152.3.6.1 librfxencode0-0.9.13.1-lp152.3.6.1 librfxencode0-debuginfo-0.9.13.1-lp152.3.6.1 xrdp-0.9.13.1-lp152.3.6.1 xrdp-debuginfo-0.9.13.1-lp152.3.6.1 xrdp-debugsource-0.9.13.1-lp152.3.6.1 xrdp-devel-0.9.13.1-lp152.3.6.1 References: https://bugzilla.suse.com/1171415

1 0

openSUSE-RU-2020:1406-1: moderate: Recommended update for yast2-bootloader, yast2-installation
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for yast2-bootloader, yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1406-1 Rating: moderate References: #1168036 #1174964 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-bootloader, yast2-installation provides the following fixes: Changes in yast2-bootloader: - Add rd.zdev to allowed kernel options on s390. (bsc#1168036) Changes in yast2-installation: - Handle device autoconfig setting in summary screen. (bsc#1168036) - Save random pool to /var/lib/systemd/random-seed. (bsc#1174964) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1406=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-bootloader-4.2.26-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): yast2-installation-4.2.45-lp152.2.6.1 References: https://bugzilla.suse.com/1168036 https://bugzilla.suse.com/1174964

1 0

openSUSE-RU-2020:1410-1: moderate: Recommended update for python3-azuremetadata
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for python3-azuremetadata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1410-1 Rating: moderate References: #1175609 #1175610 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-azuremetadata contains the following fix: - Fix provides directive (bsc#1175609, bsc#1175610) + The provides directive must set a version or update does not work as expected This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1410=1 Package List: - openSUSE Leap 15.2 (noarch): python3-azuremetadata-5.1.2-lp152.2.6.1 References: https://bugzilla.suse.com/1175609 https://bugzilla.suse.com/1175610

1 0

openSUSE-RU-2020:1408-1: moderate: Recommended update for python-importlib_resources
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for python-importlib_resources ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1408-1 Rating: moderate References: #1175707 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-importlib_resources fixes the following issue: - Add missing runtime dependencies. (bsc#1175707) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1408=1 Package List: - openSUSE Leap 15.2 (noarch): python2-importlib_resources-1.1.0-lp152.2.8.1 python3-importlib_resources-1.1.0-lp152.2.8.1 References: https://bugzilla.suse.com/1175707

1 0

openSUSE-RU-2020:1409-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1409-1 Rating: moderate References: #1092163 #1172562 #1173103 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Fixed the package alternatives for tomcat-servlet-4_0-api to use /usr/share/java/servlet.jar instead of /usr/share/java/tomcat-servlet.jar - We kept /usr/share/java/tomcat-servlet.jar as a symlink for compatibility reasons (bsc#1092163) - Removed write permissions on several files and directories for the tomcat group (bsc#1172562) - Changed the tomcat.pid location from /var/run to /run (bsc#1173103) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1409=1 Package List: - openSUSE Leap 15.2 (noarch): tomcat-9.0.36-lp152.2.7.1 tomcat-admin-webapps-9.0.36-lp152.2.7.1 tomcat-docs-webapp-9.0.36-lp152.2.7.1 tomcat-el-3_0-api-9.0.36-lp152.2.7.1 tomcat-embed-9.0.36-lp152.2.7.1 tomcat-javadoc-9.0.36-lp152.2.7.1 tomcat-jsp-2_3-api-9.0.36-lp152.2.7.1 tomcat-jsvc-9.0.36-lp152.2.7.1 tomcat-lib-9.0.36-lp152.2.7.1 tomcat-servlet-4_0-api-9.0.36-lp152.2.7.1 tomcat-webapps-9.0.36-lp152.2.7.1 References: https://bugzilla.suse.com/1092163 https://bugzilla.suse.com/1172562 https://bugzilla.suse.com/1173103

1 0

openSUSE-SU-2020:1407-1: important: Security update for go1.14
by opensuse-security＠opensuse.org 11 Sep '20

11 Sep '20

openSUSE Security Update: Security update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1407-1 Rating: important References: #1164903 #1169832 #1170826 #1172868 #1174153 #1174191 #1174977 Cross-References: CVE-2020-14039 CVE-2020-15586 CVE-2020-16845 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This update for go1.14 fixes the following issues: - go1.14 was updated to version 1.14.7 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). - go1.14.6 (released 2020-07-16) includes fixes to the go command, the compiler, the linker, vet, and the database/sql, encoding/json, net/http, reflect, and testing packages. Refs bsc#1164903 go1.14 release tracking Refs bsc#1174153 bsc#1174191 * go#39991 runtime: missing deferreturn on linux/ppc64le * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15 * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally * go#39636 reflect: DeepEqual can return true for values that are not equal * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va lues * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie s to use an older version of dlv which only supports linux/amd64 * go#39308 testing: streaming output loses parallel subtest associations * go#39288 cmd/vet: update for new number formats * go#39101 database/sql: context cancellation allows statements to execute after rollback * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586 * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only) - Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is not present bsc#1172868 gh#golang/go#35305 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1407=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.14-1.14.7-lp152.2.3.1 go1.14-doc-1.14.7-lp152.2.3.1 go1.14-race-1.14.7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14039.html https://www.suse.com/security/cve/CVE-2020-15586.html https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1164903 https://bugzilla.suse.com/1169832 https://bugzilla.suse.com/1170826 https://bugzilla.suse.com/1172868 https://bugzilla.suse.com/1174153 https://bugzilla.suse.com/1174191 https://bugzilla.suse.com/1174977

1 0

openSUSE-SU-2020:1405-1: important: Security update for go1.14
by opensuse-security＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Security Update: Security update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1405-1 Rating: important References: #1164903 #1169832 #1170826 #1172868 #1174153 #1174191 #1174977 Cross-References: CVE-2020-14039 CVE-2020-15586 CVE-2020-16845 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This update for go1.14 fixes the following issues: - go1.14 was updated to version 1.14.7 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977). - go1.14.6 (released 2020-07-16) includes fixes to the go command, the compiler, the linker, vet, and the database/sql, encoding/json, net/http, reflect, and testing packages. Refs bsc#1164903 go1.14 release tracking Refs bsc#1174153 bsc#1174191 * go#39991 runtime: missing deferreturn on linux/ppc64le * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15 * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally * go#39636 reflect: DeepEqual can return true for values that are not equal * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va lues * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie s to use an older version of dlv which only supports linux/amd64 * go#39308 testing: streaming output loses parallel subtest associations * go#39288 cmd/vet: update for new number formats * go#39101 database/sql: context cancellation allows statements to execute after rollback * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586 * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only) - Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is not present bsc#1172868 gh#golang/go#35305 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1405=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.14-1.14.7-lp151.13.1 go1.14-doc-1.14.7-lp151.13.1 go1.14-race-1.14.7-lp151.13.1 References: https://www.suse.com/security/cve/CVE-2020-14039.html https://www.suse.com/security/cve/CVE-2020-15586.html https://www.suse.com/security/cve/CVE-2020-16845.html https://bugzilla.suse.com/1164903 https://bugzilla.suse.com/1169832 https://bugzilla.suse.com/1170826 https://bugzilla.suse.com/1172868 https://bugzilla.suse.com/1174153 https://bugzilla.suse.com/1174191 https://bugzilla.suse.com/1174977

1 0

openSUSE-RU-2020:1404-1: moderate: Recommended update for python-importlib_resources
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for python-importlib_resources ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1404-1 Rating: moderate References: #1175707 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-importlib_resources fixes the following issue: - Add missing runtime dependencies. (bsc#1175707) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1404=1 Package List: - openSUSE Leap 15.1 (noarch): python2-importlib_resources-1.1.0-lp151.8.1 python3-importlib_resources-1.1.0-lp151.8.1 References: https://bugzilla.suse.com/1175707

1 0

openSUSE-RU-2020:1403-1: moderate: Recommended update for choqok
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for choqok ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1403-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for choqok fixes the following issues: Add upstream patches to fix problems that still were present in the 1.7.0 release: * Fixed retrieving Twitter conversations (kde#417193) * Link to the original post for retweets * twitter Dont overwrite contents of retweets (kde#370260) Update to 1.7.0: * Port to QtNetworkAuth and drop qoauth dependency * Plugin compability break: MicroBlog::profileUrl returns a QUrl instead * Plugin compability break: MicroBlog::postUrl returns a QUrl instead * Allow to disable accounts * Honour the default font (kde#372291) * Make the sign footer consistent between all microplugins * Unread post count in the application title sums all unread posts' accounts * Twitter: update char limit to 280 * Twitter: support extended tweets (kde#370260) * Twitter: fix list browsing (kde#382392) * Twitter: fix followers list * Twitter: show client source even for private messages * Twitter: show user' real name when no description is set * GNU Social: do not rely over qvitter to get the post url * GNU Social: hide linkback statuses * GNU Social: show user' real name when no description is set * Pump.io: escape the description * Pump.io: show user' real name when no description is set * Drop yFrog support from ImagePreview plugin Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1403=1 Package List: - openSUSE Leap 15.1 (x86_64): choqok-1.7.0-lp151.3.3.1 choqok-debuginfo-1.7.0-lp151.3.3.1 choqok-debugsource-1.7.0-lp151.3.3.1 choqok-devel-1.7.0-lp151.3.3.1 References:

1 0

openSUSE-OU-2020:1401-1: Optional update for meson
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Optional Update: Optional update for meson ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:1401-1 Rating: low References: #1173025 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for meson doesn't fix any user visible issues, but fixes internal test cases only (bsc#1173025) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1401=1 Package List: - openSUSE Leap 15.2 (x86_64): meson-test-0.54.2-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): meson-0.54.2-lp152.2.3.1 meson-vim-0.54.2-lp152.2.3.1 References: https://bugzilla.suse.com/1173025

1 0

openSUSE-RU-2020:1402-1: moderate: Recommended update for linssid
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for linssid ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1402-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for linssid fixes the following issues: Update to Version 3.6 * Attempts to resolve 802.11s mesh network nodes to their master. If otherwise not reported, marks SSID field of mesh node APs as "<mesh-masterSSID>". version 3.5: * New vendor database and search scheme that now looks in ieee oui large, medium, and small block databases. Previously only looked in large block database because that's where 98% of all devices are found. * Displays SSID of attach points with no SSID as "<hidden>". version 3.4: * Fixes location and owner of ".linssid.prefs" and "LinSSID.datalog". Instead of placed in /root and owned by root they are now placed in "$HOME" and owned by "$USER" when launched with linssid-pkexec which is the normal .desktop launch. * Fixed some wrongly addressed cosmetic icons. * Updated vendor data file. (Version 3.3 had some trailing characters that messed up data logging.) * Sundry under-the-hood optimizations. version 3.3: * Adds selection of table font size in preferences dialog. version 3.2: * Now shows mark for control channel on the channel plots. Very useful for making sure your control channel(s) don't overlap with the neighbors'. * Fixes potential memory leak with attached plots. version 3.1: * Big change - now requires polkit (policykit) authentication. No way around this as debian/ubuntu/* has emasculated su and sudo. A step backward IMHO. Now the whole app must run as root. So, all of the prefs and log files are now in /root and are owned by root. And, the whole app must run as root instead of just well-tested system parts. * Major rewrite of the synchronization between the main window and the data getter. * Install rewrite * Desktop file fix * Updated vendor database version 3.0: * Fix race condition with large number of SSID * Updated vendor database Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1402=1 Package List: - openSUSE Leap 15.2 (x86_64): linssid-3.6-lp152.4.3.1 linssid-debuginfo-3.6-lp152.4.3.1 linssid-debugsource-3.6-lp152.4.3.1 References:

1 0

openSUSE-RU-2020:1397-1: moderate: Recommended update for avahi
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for avahi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1397-1 Rating: moderate References: #1154063 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for avahi fixes the following issues: - When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits (bsc#1154063). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1397=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): avahi-0.7-lp152.3.3.1 avahi-autoipd-0.7-lp152.3.3.1 avahi-autoipd-debuginfo-0.7-lp152.3.3.1 avahi-compat-howl-devel-0.7-lp152.3.3.1 avahi-compat-mDNSResponder-devel-0.7-lp152.3.3.1 avahi-debuginfo-0.7-lp152.3.3.1 avahi-debugsource-0.7-lp152.3.3.1 avahi-glib2-debugsource-0.7-lp152.3.3.1 avahi-utils-0.7-lp152.3.3.1 avahi-utils-debuginfo-0.7-lp152.3.3.1 avahi-utils-gtk-0.7-lp152.3.3.1 avahi-utils-gtk-debuginfo-0.7-lp152.3.3.1 libavahi-client3-0.7-lp152.3.3.1 libavahi-client3-debuginfo-0.7-lp152.3.3.1 libavahi-common3-0.7-lp152.3.3.1 libavahi-common3-debuginfo-0.7-lp152.3.3.1 libavahi-core7-0.7-lp152.3.3.1 libavahi-core7-debuginfo-0.7-lp152.3.3.1 libavahi-devel-0.7-lp152.3.3.1 libavahi-glib-devel-0.7-lp152.3.3.1 libavahi-glib1-0.7-lp152.3.3.1 libavahi-glib1-debuginfo-0.7-lp152.3.3.1 libavahi-gobject-devel-0.7-lp152.3.3.1 libavahi-gobject0-0.7-lp152.3.3.1 libavahi-gobject0-debuginfo-0.7-lp152.3.3.1 libavahi-ui-gtk3-0-0.7-lp152.3.3.1 libavahi-ui-gtk3-0-debuginfo-0.7-lp152.3.3.1 libavahi-ui0-0.7-lp152.3.3.1 libavahi-ui0-debuginfo-0.7-lp152.3.3.1 libdns_sd-0.7-lp152.3.3.1 libdns_sd-debuginfo-0.7-lp152.3.3.1 libhowl0-0.7-lp152.3.3.1 libhowl0-debuginfo-0.7-lp152.3.3.1 python3-avahi-0.7-lp152.3.3.1 python3-avahi-gtk-0.7-lp152.3.3.1 typelib-1_0-Avahi-0_6-0.7-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): avahi-lang-0.7-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): avahi-32bit-debuginfo-0.7-lp152.3.3.1 avahi-mono-0.7-lp152.3.3.1 avahi-qt4-debugsource-0.7-lp152.3.3.1 libavahi-client3-32bit-0.7-lp152.3.3.1 libavahi-client3-32bit-debuginfo-0.7-lp152.3.3.1 libavahi-common3-32bit-0.7-lp152.3.3.1 libavahi-common3-32bit-debuginfo-0.7-lp152.3.3.1 libavahi-glib1-32bit-0.7-lp152.3.3.1 libavahi-glib1-32bit-debuginfo-0.7-lp152.3.3.1 libavahi-qt4-1-0.7-lp152.3.3.1 libavahi-qt4-1-debuginfo-0.7-lp152.3.3.1 libavahi-qt4-devel-0.7-lp152.3.3.1 libdns_sd-32bit-0.7-lp152.3.3.1 libdns_sd-32bit-debuginfo-0.7-lp152.3.3.1 References: https://bugzilla.suse.com/1154063

1 0

openSUSE-RU-2020:1398-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1398-1 Rating: moderate References: #1171281 #1172709 #1173149 #1173584 #1174405 #1174965 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update fixes the following issues: POS_Image-Graphical7: - Add plymouth-plugin-label-ft package to all *7 templates and set them to be of SLE15SP2 version - Add optional dracut-wireless comment section and move wpa_suplicant there POS_Image-JeOS7: - Add plymouth-plugin-label-ft package to all *7 templates and set them to be of SLE15SP2 version - Add optional dracut-wireless comment section and move wpa_suplicant there dracut-saltboot: - Use automatic RAID assembly only in the first phase before start of salt dracut-wireless: - Make sure ifup is scheduled (bsc#1173149) golang-github-prometheus-prometheus: - Add support for Prometheus exporters proxy mgr-osad: - Move uyuni-base-common dependency from mgr-osad to mgr-osa-dispatcher (bsc#1174405) spacecmd: - Fix softwarechannel update for vendor channels (bsc#1172709) - Fix escaping of package names (bsc#1171281) spacewalk-koan: - Use the 4.1 image to fix tests suseRegisterInfo: - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) uyuni-common-libs: - Fix issues importing RPM packages with long RPM headers (bsc#1174965) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1398=1 Package List: - openSUSE Leap 15.2 (noarch): dracut-saltboot-0.1.1595937550.0285244-lp152.2.14.1 References: https://bugzilla.suse.com/1171281 https://bugzilla.suse.com/1172709 https://bugzilla.suse.com/1173149 https://bugzilla.suse.com/1173584 https://bugzilla.suse.com/1174405 https://bugzilla.suse.com/1174965

1 0

openSUSE-RU-2020:1400-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1400-1 Rating: moderate References: #1115749 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-storage-ng provides the following fix: - Do not append a suffix to LVM Volume Group names unless it is needed. (bsc#1115749) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1400=1 Package List: - openSUSE Leap 15.1 (x86_64): yast2-storage-ng-4.1.96-lp151.2.22.1 References: https://bugzilla.suse.com/1115749

1 0

openSUSE-RU-2020:1399-1: moderate: Recommended update for yast2, yast2-packager, yast2-pkg-bindings
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for yast2, yast2-packager, yast2-pkg-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1399-1 Rating: moderate References: #1162514 #1172477 #1173133 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2, yast2-packager, yast2-pkg-bindings contains the following fixes: Changes in yast2: - Do not start an UI while evaluating current language settings. (bsc#1173133) - Improve actions to stop and start a system service. (bsc#1162514) Changes in yast2-pkg-bindings: - Extensions to handle raw repository name. (bsc#1172477) Changes in yast2-packager: - Handle variable expansion in repository name. (bsc#1172477) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1399=1 Package List: - openSUSE Leap 15.1 (x86_64): yast2-4.1.79-lp151.2.22.1 yast2-logs-4.1.79-lp151.2.22.1 yast2-packager-4.1.51-lp151.2.12.1 yast2-pkg-bindings-4.1.3-lp151.2.9.1 yast2-pkg-bindings-debuginfo-4.1.3-lp151.2.9.1 yast2-pkg-bindings-debugsource-4.1.3-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): yast2-pkg-bindings-devel-doc-4.1.3-lp151.2.9.1 References: https://bugzilla.suse.com/1162514 https://bugzilla.suse.com/1172477 https://bugzilla.suse.com/1173133

1 0

openSUSE-RU-2020:1396-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 10 Sep '20

10 Sep '20

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1396-1 Rating: moderate References: #1171281 #1172709 #1173149 #1173584 #1174405 #1174965 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update fixes the following issues: POS_Image-Graphical7: - Add plymouth-plugin-label-ft package to all *7 templates and set them to be of SLE15SP2 version - Add optional dracut-wireless comment section and move wpa_suplicant there POS_Image-JeOS7: - Add plymouth-plugin-label-ft package to all *7 templates and set them to be of SLE15SP2 version - Add optional dracut-wireless comment section and move wpa_suplicant there dracut-saltboot: - Use automatic RAID assembly only in the first phase before start of salt dracut-wireless: - Make sure ifup is scheduled (bsc#1173149) golang-github-prometheus-prometheus: - Add support for Prometheus exporters proxy mgr-osad: - Move uyuni-base-common dependency from mgr-osad to mgr-osa-dispatcher (bsc#1174405) spacecmd: - Fix softwarechannel update for vendor channels (bsc#1172709) - Fix escaping of package names (bsc#1171281) spacewalk-koan: - Use the 4.1 image to fix tests suseRegisterInfo: - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) uyuni-common-libs: - Fix issues importing RPM packages with long RPM headers (bsc#1174965) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1396=1 Package List: - openSUSE Leap 15.2 (noarch): dracut-wireless-0.1.1595937550.0285244-lp152.2.6.1 References: https://bugzilla.suse.com/1171281 https://bugzilla.suse.com/1172709 https://bugzilla.suse.com/1173149 https://bugzilla.suse.com/1173584 https://bugzilla.suse.com/1174405 https://bugzilla.suse.com/1174965

1 0

openSUSE-RU-2020:1395-1: moderate: Recommended update for fpc, lazarus
by maintenance＠opensuse.org 09 Sep '20

09 Sep '20

openSUSE Recommended Update: Recommended update for fpc, lazarus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1395-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fpc, lazarus fixes the following issues: fpc was updated to 3.2.0 * Changes see https://wiki.freepascal.org/User_Changes_3.2.0 - Lazarus released a new 2.0.10 tarball (2.0.10-2) which just includes the lazarus-2.0.10-fpc304.patch patch on top of the previous one. Use this new tarball and update the Source URL accordingly Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1395=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): fpc-3.2.0-lp152.6.3.2 fpc-debuginfo-3.2.0-lp152.6.3.2 fpc-doc-3.2.0-lp152.6.3.1 fpc-src-3.2.0-lp152.6.3.2 - openSUSE Leap 15.2 (x86_64): fpc-debugsource-3.2.0-lp152.6.3.2 lazarus-2.0.10-lp152.2.3.1 lazarus-debuginfo-2.0.10-lp152.2.3.1 lazarus-debugsource-2.0.10-lp152.2.3.1 libQt5Pas-devel-2.0.10-lp152.2.3.1 libQt5Pas1-2.0.10-lp152.2.3.1 libQt5Pas1-debuginfo-2.0.10-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): fpc-examples-3.2.0-lp152.6.3.2 References:

1 0

openSUSE-RU-2020:1394-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 09 Sep '20

09 Sep '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1394-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc was updated to version 2.6.1: - Add menu entries for auto-typing only username or only password [#4891] - Browser: Add command for retrieving current TOTP [#5278] - Improve man pages [#5010] - Linux: Support Xfce screen lock signals [#4971] - Linux: Add OARS metadata to AppStream markup [#5031] - SSH Agent: Substitute tilde with %USERPROFILE% on Windows [#5116] - Improve password generator UI and UX [#5129] - Do not prompt to restart if switching the theme back and forth [#5084] - Change actions for F1, F2, and F3 keys [#5082] - Skip referenced passwords in health check report [#5056] - Check system-wide Qt translations directory for downstream - translations packaging [#5064] - macOS: Change password visibility toggle shortcut to Ctrl+H to - avoid conflict with system shortcut [#5114] - Browser: Only display domain name in browser access confirm dialog to avoid overly wide window sizes [#5214] - Fix clipboard not being cleared when database is locked while timeout is still active [#5184] - Fix list of previous databases not being cleared in some cases [#5123] - Fix saving of non-data changes on database lock [#5210] - Fix search results banner theming [#5197] - Don’t enforce theme palette in Classic theme mode and add hover effect for buttons [#5122, #5267] - Fix label clipping in settings on high-DPI screens [#5227] - Fix excessive memory usage by icons on systems with high-DPI screens [#5266] - Fix crash if number of TOTP digits exceeds ten [#5106] - Fix slot detection when first YubiKey is configured on the second slot [#5004] - Prevent crash if focus widget gets deleted during saving [#5005] - Always show buttons for opening or saving attachments [#4956] - Update link to Auto-Type help [#5228] - Fix build errors with Ninja [#5121] - CLI: Fix db-info command wrongly labelled as db-show in usage listing [#5140] - Windows: Use Classic theme by default if high-contrast mode is on [#5191] - Linux: Add workaround for qt5ct bug, causing icons not to show up [#5011] - Linux: Correct high-DPI display by not allowing fractional scaling [#5185] - Browser: Consider subdomain and path when requesting only “best-matching credentials” [#4832] - SSH Agent: Always forget all keys on lock [#5115] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1394=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1394=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1394=1 Package List: - openSUSE Leap 15.2 (noarch): keepassxc-lang-2.6.1-lp152.3.6.1 - openSUSE Leap 15.2 (x86_64): keepassxc-2.6.1-lp152.3.6.1 keepassxc-debuginfo-2.6.1-lp152.3.6.1 keepassxc-debugsource-2.6.1-lp152.3.6.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.6.1-lp151.2.21.1 keepassxc-debuginfo-2.6.1-lp151.2.21.1 keepassxc-debugsource-2.6.1-lp151.2.21.1 - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.6.1-lp151.2.21.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.6.1-bp151.3.18.1 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.6.1-bp151.3.18.1 References:

1 0

openSUSE-SU-2020:1393-1: moderate: Security update for python-Flask-Cors
by opensuse-security＠opensuse.org 09 Sep '20

09 Sep '20

openSUSE Security Update: Security update for python-Flask-Cors ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1393-1 Rating: moderate References: #1175986 Cross-References: CVE-2020-25032 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability (bsc#1175986). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1393=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1393=1 Package List: - openSUSE Leap 15.2 (noarch): python2-Flask-Cors-3.0.8-lp152.2.3.1 python3-Flask-Cors-3.0.8-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): python2-Flask-Cors-3.0.7-lp151.2.3.1 python3-Flask-Cors-3.0.7-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-25032.html https://bugzilla.suse.com/1175986

1 0

openSUSE-SU-2020:1391-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1391-1 Rating: moderate References: #1173991 #1174284 #1175686 Cross-References: CVE-2020-15663 CVE-2020-15664 CVE-2020-15670 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.2.0 ESR * Fixed: Various stability, functionality, and security fixes - Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686) * CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege * CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2 - Fixed Firefox tab crash in FIPS mode (bsc#1174284). - Fix broken translation-loading (bsc#1173991) * allow addon sideloading * mark signatures for langpacks non-mandatory * do not autodisable user profile scopes - Google API key is not usable for geolocation service any more This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1391=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.2.0-lp152.2.18.1 MozillaFirefox-branding-upstream-78.2.0-lp152.2.18.1 MozillaFirefox-buildsymbols-78.2.0-lp152.2.18.1 MozillaFirefox-debuginfo-78.2.0-lp152.2.18.1 MozillaFirefox-debugsource-78.2.0-lp152.2.18.1 MozillaFirefox-devel-78.2.0-lp152.2.18.1 MozillaFirefox-translations-common-78.2.0-lp152.2.18.1 MozillaFirefox-translations-other-78.2.0-lp152.2.18.1 References: https://www.suse.com/security/cve/CVE-2020-15663.html https://www.suse.com/security/cve/CVE-2020-15664.html https://www.suse.com/security/cve/CVE-2020-15670.html https://bugzilla.suse.com/1173991 https://bugzilla.suse.com/1174284 https://bugzilla.suse.com/1175686

1 0

openSUSE-SU-2020:1392-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1392-1 Rating: important References: #1175686 Cross-References: CVE-2020-15663 CVE-2020-15664 CVE-2020-15669 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 68.12 (bsc#1175686) - CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege - CVE-2020-15664: Attacker-induced prompt for extension installation - CVE-2020-15669: Use-After-Free when aborting an operation This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1392=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-68.12.0-lp152.2.10.1 MozillaThunderbird-debuginfo-68.12.0-lp152.2.10.1 MozillaThunderbird-debugsource-68.12.0-lp152.2.10.1 MozillaThunderbird-translations-common-68.12.0-lp152.2.10.1 MozillaThunderbird-translations-other-68.12.0-lp152.2.10.1 References: https://www.suse.com/security/cve/CVE-2020-15663.html https://www.suse.com/security/cve/CVE-2020-15664.html https://www.suse.com/security/cve/CVE-2020-15669.html https://bugzilla.suse.com/1175686

1 0

openSUSE-RU-2020:1390-1: moderate: Recommended update for libmediainfo, mediainfo
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for libmediainfo, mediainfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1390-1 Rating: moderate References: #1173630 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libmediainfo, mediainfo fixes the following issues: libmediainfo was updated to version 20.08: Added: * MPEG-H 3D Audio full featured support (group presets, switch groups, groups, signal groups) * MP4/MOV: support of more metadata locations * JSON and XML outputs: authorize "complete" output * MPEG-4: support of TrueHD * WM: show legacy value of performer if not same as modern one * WAV: trace of adtl (Associated Data List) chunk Fixed: * URL encoding detection fix for URL having a query part (issue with e.g. pre-signed AWS S3 URLs) * Don't try to seek to the end (false positive range related error with HTTP) * DPX: don't load the whole file in RAM * Opus: fix wrong channel mapping * Miscellaneous other bug fixes version 20.03 Added features: * AC-4 full featured support (presentations, groups, substreams) * MPEG-H 3D Audio basic support * MPEG-TS: audio preselection descriptor support * Dolby Vision v2 detection * MPEG-4: support of colr/nclx (color information) box Bugs fixed: * URL encoding option fixes, permitting to use URL encoded or non URL encoded links * AAC: fix SBR frequency when in ADIF * DPX: ColorimetricSpecification and TransferCharacteristic were inverted * Some API calls were not thread safe * Several crash and memory leaks fixes version 19.09 Added: * AC-4: basic detection, raw, in MP4 or TS * AC-3/E-AC-3: display time code of the first frame * Don't show anymore by default "encoded" bit rates and stream sizes * MOV: Decode more language codes Corrections: * MXF: some metadata were missing * AC-3: AC-3 actually has no bit depth, removing the default 16 value * AC-3/E-AC-3: fix bitrate info (so duration) with streams having a time code * AC-3: parse more frames also when in MP4, in order to better detect JOC (Atmos) * MP4: do not show audio bit depth if it is the "default" 16 (value is not trustable enough) * ProRes RAW: we know only width and height * SubRip: bad handling of files having a quote character version 19.07 Added: * Dolby E: readout of Dolby E program description * MXF: Detection of Dolby Vision * MP4: support of Spatial Audio Metadata * DV: color space is explicit * DV: audio format settings * Matroska: PCM bit rate * MOV, MXF: Time code frame rate * DV: DVCAM commercial name for locked audio and PAL 4:2:0 * MXF: Time code track name Corrections: * USAC: frame rate was missing in case of non standard sampling rate * USAC: fix infinite loop with some LATM streams * WAV: MP3 delay should be added to BWF time reference * TTML: fix wrong output with standalone files * N19/STL: fix crash with some uncommon framerates * VC-3: fix sub sampling with some v2 files * DV: Time code frame number was wrong (divided by 2) for 50/60 fps content version 19.04 Added: * USAC: DRC effect types, Sample peak level, True peak level, Program loudness * HDR: SMPTE ST 2094 App 4 (including HDR10+) support * HDR: move HDR10, Dolby Vision and SL-HDR meta to specific generic "HDR Format" lines * Matroska: SMPTE ST 2086 (HDR10) support * Matroska: FieldOrder support * HEIF image format support * AV1: support of AV1 in MP4, HEIF, IVF * MOV: Add a lot more countries to AppleStoreCountry field internal list * MXF: Fix memory leak when fully parsing big file with acquisition metadata * HEVC: more HEVC profiles (Multiview, Scalable, Screen Content...) * AAC: better handling of corrupted streams * AAC: better handling of unknown channel layouts * AVC in MP4: better support of corrupted streams Corrected: * B1101, AVI: fix crash with some invalid streams * B1101, SMPTE ST 337: fix crash with some invalid streams * Matroska: chapters timestamp were not display if chapters have no name * MXF: Fix false positive truncated file detection when there is no Random Index Pack * AAC: channel layout typos (Rls instead of Lrs, Lr instead of Rb) * ProRes: correctly show color space if alpha plane is present * MPEG Audio: some VBR files use "Info" Xing header, so we ignore the difference between "Info" and "Xing" * I943, MPEG-4: wrong display aspect ratio in some corner cases (32-bit release only) * I1096, OGG: assign METADATA_BLOCK_PICTURE tag to cover * I339, text in square brackets stripped in $if() section version 18.12 Added features: * DCP: support of multi-reel packages * EBUCore: added some FFV1 related metadata * JPEG: better info display of CYMK files * Provide source of the color related metadata (container or stream) (hidden by default) * MXF: display more information when wrapper/essence values are detected as not same * MXF: ProRes profiles * MPEG-4: ProRes RAW support * MPEG-TS: add support of parsing some ETSI TS 103-433 messages Bug fixes: * MPEG-2 Video: variable GOP detection fix * MPEG-7 export: some fields were missing due to the removal of some legacy fields * ADTS: Fix display of channel count for 8-channel streams * ID3v2: fix some date related issues * I298, ID3v2: fix wrong read of recording date in some cases * I1032, PBCore2: fix essenceFrameSize with non Video tracks * I1096, JPEG: fix crash with one file * Several other crash and memory leak fixes version 18.08.1 * Fix XML/MPEG-7/PBCore2 output discarding non ANSI characters version 18.08 Added features: * Dolby Atmos (in E-AC-3 or TrueHD): support of bed channel count/configuration + objects count + complexity index * AC-3/DTS/AAC: display of info about legacy decoders behavior removed * AC-3/DTS/AAC: some changes in how format is displayed * AC-3/DTS/AAC: better split between technical names and commercial names * AAC: support of profile information from MP4_IOD_Tag AudioProfileLevelIndication * USAC (xHE-AAC) support * Audio channel layout: using a new terminology, better suited for 3D Audio, see https://mediaarea.net/AudioChannelLayout * DSD (DSF & DSDIFF) support * DXD (Digital eXtreme Definition) commercial name * Dolby Vision: use new form for profile (numbers instead of acronyms) * New format "Directory" when image sequence + audio file is detected (1 directory style for the moment) * PBCore2 export update, thanks to WGBH * MPEG-7 export update * NISO export update * AV1: support of AOmedia AV1 based on 1.0.0 specifications * ATRAC9 detection * Versionned RPMs * HEVC: better support of buggy SEI * ADTS: CodecID * Support of injection of external metadata * HTTPS: support of AWS extension "x-amz-*" in HTTPS headers, permitting to manage temporary credentials (AssumeRole) * MPEG-4, #1005: Obey edit list in QuickTime Timecode track Bug corrections: * MIXML: hide fields which were hidden in normal output * Hybrid AC-3/E-AC-3 (in Blu-rays): bit rate info was wrong * Lot of bug fixes, see full log for more info version 18.05 Added: * PBCore 2.1 export update, sponsored by WGBH as part of the NEH-funded PBCore Development and Preservation Project * TIFF: more IFDs are supported (density, software...) * NISO Z39.87 output Fixed: * Mastering Display Color Primaries: was always showing BT.709 instead of real value, when present * Attachments: do not provide anymore attachments content in XML by default, fixes mediainfo was updated to version 20.08: Added: * MPEG-H 3D Audio full featured support (group presets, switch groups, groups, signal groups) * MP4/MOV: support of more metadata locations * JSON and XML outputs: authorize "complete" output * MPEG-4: support of TrueHD * WM: show legacy value of performer if not same as modern one * WAV: trace of adtl (Associated Data List) chunk Fixed: * URL encoding detection fix for URL having a query part (issue with e.g. pre-signed AWS S3 URLs) * Don't try to seek to the end (false positive range related error with HTTP) * DPX: don't load the whole file in RAM * Opus: fix wrong channel mapping * Miscellaneous other bug fixes version 20.03 Added features: * AC-4 full featured support (presentations, groups, substreams) * MPEG-H 3D Audio basic support * MPEG-TS: audio preselection descriptor support * Dolby Vision v2 detection * MPEG-4: support of colr/nclx (color information) box Bugs fixed: * URL encoding option fixes, permitting to use URL encoded or non URL encoded links * AAC: fix SBR frequency when in ADIF * DPX: ColorimetricSpecification and TransferCharacteristic were inverted * Several crash and memory leaks fixes version 19.09 Added: * AC-4: basic detection, raw, in MP4 or TS * AC-3/E-AC-3: display time code of the first frame * Don't show anymore by default "encoded" bit rates and stream sizes * MOV: Decode more language codes Corrections: * MXF: some metadata were missing * AC-3: AC-3 actually has no bit depth, removing the default 16 value * AC-3/E-AC-3: fix bitrate info (so duration) with streams having a time code * AC-3: parse more frames also when in MP4, in order to better detect JOC (Atmos) * MP4: do not show audio bit depth if it is the "default" 16 (value is not trustable enough) * ProRes RAW: we know only width and height * SubRip: bad handling of files having a quote character version 19.07 Added: * Dolby E: readout of Dolby E program description * MXF: Detection of Dolby Vision * MP4: support of Spatial Audio Metadata * DV: color space is explicit * DV: audio format settings * Matroska: PCM bit rate * MOV, MXF: Time code frame rate * DV: DVCAM commercial name for locked audio and PAL 4:2:0 * MXF: Time code track name Corrected: * USAC: frame rate was missing in case of non standard sampling rate * USAC: fix infinite loop with some LATM streams * WAV: MP3 delay should be added to BWF time reference * TTML: fix wrong output with standalone files * N19/STL: fix crash with some uncommon framerates * VC-3: fix sub sampling with some v2 files * DV: Time code frame number was wrong (divided by 2) for 50/60 fps content version 19.04 Added: * USAC: DRC effect types, Sample peak level, True peak level, Program loudness * HDR: SMPTE ST 2094 App 4 (including HDR10+) support * HDR: move HDR10, Dolby Vision and SL-HDR meta to specific generic "HDR Format" lines * Matroska: SMPTE ST 2086 (HDR10) support * Matroska: FieldOrder support * HEIF image format support * AV1: support of AV1 in MP4, HEIF, IVF * MOV: Add a lot more countries to AppleStoreCountry field internal list * MXF: Fix memory leak when fully parsing big file with acquisition metadata * HEVC: more HEVC profiles (Multiview, Scalable, Screen Content...) * AAC: better handling of corrupted streams * AAC: better handling of unknown channel layouts * AVC in MP4: better support of corrupted streams Changed: * B1101, AVI: fix crash with some invalid streams * B1101, SMPTE ST 337: fix crash with some invalid streams * Matroska: chapters timestamp were not display if chapters have no name * MXF: Fix false positive truncated file detection when there is no Random Index Pack * AAC: channel layout typos (Rls instead of Lrs, Lr instead of Rb) * ProRes: correctly show color space if alpha plane is present * MPEG Audio: some VBR files use "Info" Xing header, so we ignore the difference between "Info" and "Xing" * I943, MPEG-4: wrong display aspect ratio in some corner cases (32-bit release only) * I1096, OGG: assign METADATA_BLOCK_PICTURE tag to cover version 18.12 Added features: * DCP: support of multi-reel packages * EBUCore: added some FFV1 related metadata * JPEG: better info display of CYMK files * Provide source of the color related metadata (container or stream) (hidden by default) * MXF: display more information when wrapper/essence values are detected as not same * MXF: ProRes profiles * MPEG-4: ProRes RAW support * MPEG-TS: add support of parsing some ETSI TS 103-433 messages Bug fixes: * MPEG-2 Video: variable GOP detection fix * MPEG-7 export: some fields were missing due to the removal of some legacy fields * ADTS: Fix display of channel count for 8-channel streams * ID3v2: fix some date related issues * I298, ID3v2: fix wrong read of recording date in some cases * I1032, PBCore2: fix essenceFrameSize with non Video tracks * I1096, JPEG: fix crash with one file * Several other crash and memory leak fixes version 18.08.1 * Fix XML/MPEG-7/PBCore2 output discarding non ANSI characters version 18.08 Added features: * Dolby Atmos (in E-AC-3 or TrueHD): support of bed channel count/configuration + objects count + complexity index * AC-3/DTS/AAC: display of info about legacy decoders behavior removed * AC-3/DTS/AAC: some changes in how format is displayed * AC-3/DTS/AAC: better split between technical names and commercial names * AAC: support of profile information from MP4_IOD_Tag AudioProfileLevelIndication * USAC (xHE-AAC) support * Audio channel layout: using a new terminology, better suited for 3D Audio, see https://mediaarea.net/AudioChannelLayout * DSD (DSF & DSDIFF) support * DXD (Digital eXtreme Definition) commercial name * Dolby Vision: use new form for profile (numbers instead of acronyms) * New format "Directory" when image sequence + audio file is detected (1 directory style for the moment) * PBCore2 export update, thanks to WGBH * MPEG-7 export update * NISO export update * AV1: support of AOmedia AV1 based on 1.0.0 specifications * ATRAC9 detection * Versionned RPMs * HEVC: better support of buggy SEI * ADTS: CodecID * Support of injection of external metadata * HTTPS: support of AWS extension "x-amz-*" in HTTPS headers, permitting to manage temporary credentials (AssumeRole) * MPEG-4, #1005: Obey edit list in QuickTime Timecode track Bug corrections: * MIXML: hide fields which were hidden in normal output * Hybrid AC-3/E-AC-3 (in Blu-rays): bit rate info was wrong * Lot of bug fixes, see full log for more info version 18.05 Added: * PBCore 2.1 export update, sponsored by WGBH as part of the NEH-funded PBCore Development and Preservation Project * TIFF: more IFDs are supported (density, software...) * NISO Z39.87 output Fixed: * Mastering Display Color Primaries: was always showing BT.709 instead of real value, when present * Attachments: do not provide anymore attachments content in XML by default, fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1390=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libmediainfo-debugsource-20.08-lp152.4.3.1 libmediainfo-devel-20.08-lp152.4.3.1 libmediainfo0-20.08-lp152.4.3.1 libmediainfo0-debuginfo-20.08-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): kf5-mediainfo-20.08-lp152.4.3.1 libmediainfo0-32bit-20.08-lp152.4.3.1 libmediainfo0-32bit-debuginfo-20.08-lp152.4.3.1 mediainfo-20.08-lp152.4.3.1 mediainfo-debuginfo-20.08-lp152.4.3.1 mediainfo-debugsource-20.08-lp152.4.3.1 mediainfo-gui-20.08-lp152.4.3.1 mediainfo-gui-debuginfo-20.08-lp152.4.3.1 References: https://bugzilla.suse.com/1173630

1 0

openSUSE-RU-2020:1389-1: moderate: Recommended update for AusweisApp2
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for AusweisApp2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1389-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for AusweisApp2 fixes the following issues: AusweisApp2 version 1.20.2 * It is now possible to paste a PIN/CAN/PUK using the common methods of the operating system in use, enabling the use of password managers. * Fixed an issue on Android 9 and older which prevented switching the screen to the WiFi settings on some devices. * Some help texts have been improved. * A tooltip has been added to the Windows installer for the firewall settings. * Search performance in the provider screen has been improved. * Fixed an issue on Android where an error message was shown incorrectly when the ID card was presented to the card reader before starting authentication. * Display fonts have been improved on OnePlus devices. * On macOS, the app will now use the integrated graphics adapter if possible. * Small bug fixes. * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added. * Fixed a compatibility issue with Qt 5.10. * Fixed an issue where an incorrect text was shown in comfort mode when using a smartphone with the CAN-allowed function. * Fixed an issue on Android where the feedback screen was incorrectly shown after using the external SDK. * Documentation for the integrated SDK on Android has been extended to include logging facilities and App Bundles. * Use of more inclusive terminology, the terms "blacklist" and "suppressions" have been removed or renamed. Version 1.20.1 * Password-protected proxy servers can now also be used from the new user interface. * A new option for mobile devices now allows switching between portrait and landscape viewing mode. * On Android, canceling the authentication process should now be faster and the previously occurring crash was fixed. * On Windows, a progress bar is now also shown during the authentication process when using the new user interface. * Small bug fixes. * Enterprise installations using the MSI package have gained the possibility to enable on-site-readout and providing a proxy configuration. * The mobile app now allows enabling and disabling debug mode when retrieving one's own personal ID data by tapping the magnifier icon ten times. * Also in the mobile app, tapping the version number in the about dialog ten times will now activate the advanced settings dialog which allows one to enable the on-site-readout. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1389=1 Package List: - openSUSE Leap 15.2 (x86_64): AusweisApp2-1.20.2-lp152.2.3.1 AusweisApp2-debuginfo-1.20.2-lp152.2.3.1 AusweisApp2-debugsource-1.20.2-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1387-1: moderate: Recommended update for sbsigntools
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for sbsigntools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1387-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sbsigntools fixes the following issues: sbsigntools is shipped in version 0.9.3: * README: update git location and add mailing list information * sbvarsign: fix "EFI_VARIABLE_AUTHENTICATION_2.TimeStamp.Year" assignment * Fix PE/COFF checksum calculation * src/image.c: remove alignment of regions * sbvarsign: use SignedData instead of PKCS7 for authenticated updates * sbsign, sbvarsign: support engine based private keys Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1387=1 Package List: - openSUSE Leap 15.2 (x86_64): sbsigntools-0.9.3-lp152.2.1 sbsigntools-debuginfo-0.9.3-lp152.2.1 sbsigntools-debugsource-0.9.3-lp152.2.1 References:

1 0

openSUSE-RU-2020:1386-1: moderate: Recommended update for sbsigntools
by maintenance＠opensuse.org 08 Sep '20

08 Sep '20

openSUSE Recommended Update: Recommended update for sbsigntools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1386-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sbsigntools fixes the following issues: sbsigntool is shipped in version 0.9.3: * README: update git location and add mailing list information * sbvarsign: fix "EFI_VARIABLE_AUTHENTICATION_2.TimeStamp.Year" assignment * Fix PE/COFF checksum calculation * src/image.c: remove alignment of regions * sbvarsign: use SignedData instead of PKCS7 for authenticated updates * sbsign, sbvarsign: support engine based private keys Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1386=1 Package List: - openSUSE Leap 15.1 (x86_64): sbsigntools-0.9.3-lp151.2.1 sbsigntools-debuginfo-0.9.3-lp151.2.1 sbsigntools-debugsource-0.9.3-lp151.2.1 References:

1 0