January 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0216-1: moderate: Recommended update for dwarves
by maintenance＠opensuse.org 31 Jan '21

31 Jan '21

openSUSE Recommended Update: Recommended update for dwarves ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0216-1 Rating: moderate References: #1176095 #1177921 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dwarves fixes the following issues: + DW_AT_alignment is defined in 1.19 so dwarves now is compatible with older libdw. Update to release 1.19 * Support for split BTF. * Support cross-compiled ELF binaries with different endianness. * Support for showing typedefs for anonymous types, like structs, unions and enums. Move to 1.18.g19 (863e6f0f) * btf_encoder: Ignore zero-sized ELF symbols update to 1.18_15g040fd7f (boo#1177921): * btf_encoder: Support cross-compiled ELF binaries with different endianness * strings: use BTF's string APIs for strings management * strings: Rename strings.h to avoid clashing with /usr/include/strings.h * dwarf_loader: increase the size of lookup hash map * btf_encoder: revamp how per-CPU variables are encoded * btf_encoder: Discard CUs after BTF encoding * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type * btf_encoder: Use libbpf APIs to encode BTF type info * btf_loader: Use libbpf to load BTF * dwarves: Expose and maintain active debug info loader operations * btf_encoder: detect BTF encoding errors and exit * libbpf: Update to latest libbpf version * dwarf_loader: Conditionally define DW_AT_alignment * pahole: Implement --packed * man-pages: Fix 'coimbine' typo Update to release 1.18 * pahole now should be segfault free when handling gdb test suit DWARF files, including ADA, FORTRAN, rust and dwp compressed files (the latter is refused). * Bail out on partial units for now, avoiding segfaults. - Backport fixes for segfault when processing dwz-ed kernel [boo#1176095,https://github.com/acmel/dwarves/issues/10] Update to release 1.17 * Support raw BTF as available in /sys/kernel/btf/vmlinux. * Make --find_pointers_to consider unions. * Make --contains and --find_pointers_to honour --unions. * Add support for finding pointers to void. * Make --contains and --find_pointers_to to work with base types. Update to release 1.16 * btf_loader: Add support for BTF_KIND_FUNC Update to new upstream release 1.15 * Avoid null dereference with NULL configs * Fixup printing "const" early with "const void" * Fix recursively printing named structs in --expand_types version 1.13 * Use of the recently introduced BTF deduplication algorithm * Introduce a 'btfdiff' utility * Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs and unions in the same fashion as with DWARF info * Better union support * Infer __attribute__((__packed__)) when structs have no alignment holes * Support DWARF5's DW_AT_alignment * Add a '--compile' option to 'pfunct' Update to new upstream release 1.12 * Added a BTF (BPF Type Format) encoder * Initial support for DW_TAG_partial_unit * Print cacheline boundaries in multiple union members * Show offsets at union members Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-216=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dwarves-1.19-lp152.4.3.1 dwarves-debuginfo-1.19-lp152.4.3.1 dwarves-debugsource-1.19-lp152.4.3.1 libdwarves-devel-1.19-lp152.4.3.1 libdwarves1-1.19-lp152.4.3.1 libdwarves1-debuginfo-1.19-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): libdwarves-devel-32bit-1.19-lp152.4.3.1 libdwarves1-32bit-1.19-lp152.4.3.1 libdwarves1-32bit-debuginfo-1.19-lp152.4.3.1 References: https://bugzilla.suse.com/1176095 https://bugzilla.suse.com/1177921

1 0

openSUSE-RU-2021:0215-1: moderate: Recommended update for openafs
by maintenance＠opensuse.org 31 Jan '21

31 Jan '21

openSUSE Recommended Update: Recommended update for openafs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0215-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for openafs fixes the following issues: update to HEAD of git branch openafs-stable-1_8_x * fix critical bug described in https://lists.openafs.org/pipermail/openafs-info/2021-January/043026.html - add firewalld-configuration files Update to official 1.8.6. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-215=1 Package List: - openSUSE Leap 15.1 (x86_64): openafs-1.8.7-lp151.2.6.1 openafs-authlibs-1.8.7-lp151.2.6.1 openafs-authlibs-debuginfo-1.8.7-lp151.2.6.1 openafs-authlibs-devel-1.8.7-lp151.2.6.1 openafs-client-1.8.7-lp151.2.6.1 openafs-client-debuginfo-1.8.7-lp151.2.6.1 openafs-debuginfo-1.8.7-lp151.2.6.1 openafs-debugsource-1.8.7-lp151.2.6.1 openafs-devel-1.8.7-lp151.2.6.1 openafs-devel-debuginfo-1.8.7-lp151.2.6.1 openafs-fuse_client-1.8.7-lp151.2.6.1 openafs-fuse_client-debuginfo-1.8.7-lp151.2.6.1 openafs-kernel-source-1.8.7-lp151.2.6.1 openafs-kmp-default-1.8.7_k4.12.14_lp151.28.91-lp151.2.6.1 openafs-kmp-default-debuginfo-1.8.7_k4.12.14_lp151.28.91-lp151.2.6.1 openafs-server-1.8.7-lp151.2.6.1 openafs-server-debuginfo-1.8.7-lp151.2.6.1 References:

1 0

openSUSE-RU-2021:0213-1: moderate: Recommended update for ffmpeg-4
by maintenance＠opensuse.org 31 Jan '21

31 Jan '21

openSUSE Recommended Update: Recommended update for ffmpeg-4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0213-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for ffmpeg-4 fixes the following issues: - fixed a call to dlopen, as there is no libfdk-aac.so.1 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-213=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): ffmpeg-4-libavcodec-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libavdevice-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libavfilter-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libavformat-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libavresample-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libavutil-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libpostproc-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libswresample-devel-4.2.1-bp152.2.3.1 ffmpeg-4-libswscale-devel-4.2.1-bp152.2.3.1 ffmpeg-4-private-devel-4.2.1-bp152.2.3.1 libavcodec58-4.2.1-bp152.2.3.1 libavdevice58-4.2.1-bp152.2.3.1 libavfilter7-4.2.1-bp152.2.3.1 libavformat58-4.2.1-bp152.2.3.1 libavresample4-4.2.1-bp152.2.3.1 libavutil56-4.2.1-bp152.2.3.1 libpostproc55-4.2.1-bp152.2.3.1 libswresample3-4.2.1-bp152.2.3.1 libswscale5-4.2.1-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): libavcodec58-64bit-4.2.1-bp152.2.3.1 libavdevice58-64bit-4.2.1-bp152.2.3.1 libavfilter7-64bit-4.2.1-bp152.2.3.1 libavformat58-64bit-4.2.1-bp152.2.3.1 libavresample4-64bit-4.2.1-bp152.2.3.1 libavutil56-64bit-4.2.1-bp152.2.3.1 libpostproc55-64bit-4.2.1-bp152.2.3.1 libswresample3-64bit-4.2.1-bp152.2.3.1 libswscale5-64bit-4.2.1-bp152.2.3.1 References:

1 0

openSUSE-RU-2021:0211-1: moderate: Recommended update for apache2
by maintenance＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0211-1 Rating: moderate References: #1180530 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - Fix for an issue when 'gensslcert' does not set CA:True. (bsc#1180530) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-211=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-2.4.43-lp152.2.12.1 apache2-debuginfo-2.4.43-lp152.2.12.1 apache2-debugsource-2.4.43-lp152.2.12.1 apache2-devel-2.4.43-lp152.2.12.1 apache2-event-2.4.43-lp152.2.12.1 apache2-event-debuginfo-2.4.43-lp152.2.12.1 apache2-example-pages-2.4.43-lp152.2.12.1 apache2-prefork-2.4.43-lp152.2.12.1 apache2-prefork-debuginfo-2.4.43-lp152.2.12.1 apache2-utils-2.4.43-lp152.2.12.1 apache2-utils-debuginfo-2.4.43-lp152.2.12.1 apache2-worker-2.4.43-lp152.2.12.1 apache2-worker-debuginfo-2.4.43-lp152.2.12.1 - openSUSE Leap 15.2 (noarch): apache2-doc-2.4.43-lp152.2.12.1 References: https://bugzilla.suse.com/1180530

1 0

openSUSE-RU-2021:0210-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0210-1 Rating: moderate References: #1141597 #1174436 #1175458 #1177490 #1179363 #1179824 #1180225 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Added a timestamp to the output of the busctl monitor command (bsc#1180225) - Fixed a NULL pointer dereference bug when attempting to close the journal file handle (bsc#1179824) - Improved the caching of cgroups member mask (bsc#1175458) - Fixed the dependency definition of sound.target (bsc#1179363) - Fixed a bug that could lead to a potential error, when daemon-reload is called between StartTransientUnit and scope_start() (bsc#1174436) - time-util: treat /etc/localtime missing as UTC (bsc#1141597) - Removed mq-deadline selection from 60-io-scheduler.rules (bsc#1177490) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-210=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsystemd0-234-lp152.31.16.1 libsystemd0-debuginfo-234-lp152.31.16.1 libsystemd0-mini-234-lp152.31.16.1 libsystemd0-mini-debuginfo-234-lp152.31.16.1 libudev-devel-234-lp152.31.16.1 libudev-mini-devel-234-lp152.31.16.1 libudev-mini1-234-lp152.31.16.1 libudev-mini1-debuginfo-234-lp152.31.16.1 libudev1-234-lp152.31.16.1 libudev1-debuginfo-234-lp152.31.16.1 nss-myhostname-234-lp152.31.16.1 nss-myhostname-debuginfo-234-lp152.31.16.1 nss-mymachines-234-lp152.31.16.1 nss-mymachines-debuginfo-234-lp152.31.16.1 nss-systemd-234-lp152.31.16.1 nss-systemd-debuginfo-234-lp152.31.16.1 systemd-234-lp152.31.16.1 systemd-container-234-lp152.31.16.1 systemd-container-debuginfo-234-lp152.31.16.1 systemd-coredump-234-lp152.31.16.1 systemd-coredump-debuginfo-234-lp152.31.16.1 systemd-debuginfo-234-lp152.31.16.1 systemd-debugsource-234-lp152.31.16.1 systemd-devel-234-lp152.31.16.1 systemd-journal-remote-234-lp152.31.16.1 systemd-journal-remote-debuginfo-234-lp152.31.16.1 systemd-logger-234-lp152.31.16.1 systemd-mini-234-lp152.31.16.1 systemd-mini-container-mini-234-lp152.31.16.1 systemd-mini-container-mini-debuginfo-234-lp152.31.16.1 systemd-mini-coredump-mini-234-lp152.31.16.1 systemd-mini-coredump-mini-debuginfo-234-lp152.31.16.1 systemd-mini-debuginfo-234-lp152.31.16.1 systemd-mini-debugsource-234-lp152.31.16.1 systemd-mini-devel-234-lp152.31.16.1 systemd-mini-sysvinit-234-lp152.31.16.1 systemd-network-234-lp152.31.16.1 systemd-network-debuginfo-234-lp152.31.16.1 systemd-sysvinit-234-lp152.31.16.1 udev-234-lp152.31.16.1 udev-debuginfo-234-lp152.31.16.1 udev-mini-234-lp152.31.16.1 udev-mini-debuginfo-234-lp152.31.16.1 - openSUSE Leap 15.2 (noarch): systemd-bash-completion-234-lp152.31.16.1 systemd-mini-bash-completion-234-lp152.31.16.1 - openSUSE Leap 15.2 (x86_64): libsystemd0-32bit-234-lp152.31.16.1 libsystemd0-32bit-debuginfo-234-lp152.31.16.1 libudev-devel-32bit-234-lp152.31.16.1 libudev1-32bit-234-lp152.31.16.1 libudev1-32bit-debuginfo-234-lp152.31.16.1 nss-myhostname-32bit-234-lp152.31.16.1 nss-myhostname-32bit-debuginfo-234-lp152.31.16.1 nss-mymachines-32bit-234-lp152.31.16.1 nss-mymachines-32bit-debuginfo-234-lp152.31.16.1 systemd-32bit-234-lp152.31.16.1 systemd-32bit-debuginfo-234-lp152.31.16.1 References: https://bugzilla.suse.com/1141597 https://bugzilla.suse.com/1174436 https://bugzilla.suse.com/1175458 https://bugzilla.suse.com/1177490 https://bugzilla.suse.com/1179363 https://bugzilla.suse.com/1179824 https://bugzilla.suse.com/1180225

1 0

openSUSE-SU-2021:0208-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0208-1 Rating: important References: #1181414 Cross-References: CVE-2020-15685 CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 78.7.0 ESR (MFSA 2021-05, bsc#1181414) * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC * CVE-2021-23964: Fixed Memory safety bugs * CVE-2020-15685: Fixed an IMAP Response Injection when using STARTTLS This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-208=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-78.7.0-lp151.2.69.1 MozillaThunderbird-debuginfo-78.7.0-lp151.2.69.1 MozillaThunderbird-debugsource-78.7.0-lp151.2.69.1 MozillaThunderbird-translations-common-78.7.0-lp151.2.69.1 MozillaThunderbird-translations-other-78.7.0-lp151.2.69.1 References: https://www.suse.com/security/cve/CVE-2020-15685.html https://www.suse.com/security/cve/CVE-2020-26976.html https://www.suse.com/security/cve/CVE-2021-23953.html https://www.suse.com/security/cve/CVE-2021-23954.html https://www.suse.com/security/cve/CVE-2021-23960.html https://www.suse.com/security/cve/CVE-2021-23964.html https://bugzilla.suse.com/1181414

1 0

openSUSE-RU-2021:0212-1: moderate: Recommended update for susepaste
by maintenance＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Recommended Update: Recommended update for susepaste ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0212-1 Rating: moderate References: #1166669 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for susepaste fixes the following issues: - Fixed parsing of location header returned by susepaste.org (boo#1166669). updated to version 0.6 - error out when pasting unreadable file - fix one bashism - allow to specify protocol This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-212=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): susepaste-0.6-bp152.4.3.1 susepaste-screenshot-0.6-bp152.4.3.1 References: https://bugzilla.suse.com/1166669

1 0

openSUSE-SU-2021:0209-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0209-1 Rating: important References: #1181414 Cross-References: CVE-2020-15685 CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 78.7.0 ESR (MFSA 2021-05, bsc#1181414) * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC * CVE-2021-23964: Fixed Memory safety bugs * CVE-2020-15685: Fixed an IMAP Response Injection when using STARTTLS This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-209=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.7.0-lp152.2.29.1 MozillaThunderbird-debuginfo-78.7.0-lp152.2.29.1 MozillaThunderbird-debugsource-78.7.0-lp152.2.29.1 MozillaThunderbird-translations-common-78.7.0-lp152.2.29.1 MozillaThunderbird-translations-other-78.7.0-lp152.2.29.1 References: https://www.suse.com/security/cve/CVE-2020-15685.html https://www.suse.com/security/cve/CVE-2020-26976.html https://www.suse.com/security/cve/CVE-2021-23953.html https://www.suse.com/security/cve/CVE-2021-23954.html https://www.suse.com/security/cve/CVE-2021-23960.html https://www.suse.com/security/cve/CVE-2021-23964.html https://bugzilla.suse.com/1181414

1 0

openSUSE-SU-2021:0207-1: moderate: Security update for segv_handler
by opensuse-security＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Security Update: Security update for segv_handler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0207-1 Rating: moderate References: #1180665 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for segv_handler fixes the following issues: - Replace by empty package with README explaining the removal for security reasons (boo#1180665). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-207=1 Package List: - openSUSE Leap 15.2 (x86_64): segv_handler-0.0.1-lp152.4.3.1 References: https://bugzilla.suse.com/1180665

1 0

openSUSE-RU-2021:0206-1: moderate: Recommended update for python-Pygments
by maintenance＠opensuse.org 30 Jan '21

30 Jan '21

openSUSE Recommended Update: Recommended update for python-Pygments ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0206-1 Rating: moderate References: #1180252 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-Pygments fixes the following issues: - Fixed an issue when the package executes install in the uninstall rpm section. (bsc#1180252) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-206=1 Package List: - openSUSE Leap 15.2 (noarch): python2-Pygments-2.2.0-lp152.5.3.1 python3-Pygments-2.2.0-lp152.5.3.1 References: https://bugzilla.suse.com/1180252

1 0