January 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0112-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0112-1 Rating: moderate References: #1180220 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm fixes the following issues: - Remove redundant spare movement logic to fix and issue with broken reshaping. (bsc#1180220)) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-112=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.24.1 mdadm-debuginfo-4.1-lp151.4.24.1 mdadm-debugsource-4.1-lp151.4.24.1 References: https://bugzilla.suse.com/1180220

1 0

openSUSE-RU-2021:0111-1: moderate: Recommended update for akregator
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for akregator ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0111-1 Rating: moderate References: #1177572 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for akregator fixes the following issues: - Akregator icon should hide if there are zero unread articles (boo#1177572) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-111=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): akregator-20.04.2-bp152.2.6.1 - openSUSE Backports SLE-15-SP2 (noarch): akregator-lang-20.04.2-bp152.2.6.1 References: https://bugzilla.suse.com/1177572

1 0

openSUSE-RU-2021:0113-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0113-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for chromium fixes the following issues: - Comply with new Google API key rules for Derivatives Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-113=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-87.0.4280.141-lp152.2.63.1 chromedriver-debuginfo-87.0.4280.141-lp152.2.63.1 chromium-87.0.4280.141-lp152.2.63.1 chromium-debuginfo-87.0.4280.141-lp152.2.63.1 References:

1 0

openSUSE-RU-2021:0110-1: Recommended update for hamcrest
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for hamcrest ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0110-1 Rating: low References: #1120493 #1179994 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for hamcrest fixes the following issues: - Make hamcrest build reproducibly. (bsc#1120493) - Fix typo in hamcrest-core description. (bsc#1179994) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-110=1 Package List: - openSUSE Leap 15.1 (noarch): hamcrest-1.3-lp151.5.3.1 hamcrest-demo-1.3-lp151.5.3.1 hamcrest-javadoc-1.3-lp151.5.3.1 References: https://bugzilla.suse.com/1120493 https://bugzilla.suse.com/1179994

1 0

openSUSE-RU-2021:0108-1: moderate: Recommended update for bcache-tools
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for bcache-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0108-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for bcache-tools fixes the following issues: - Fix typo from `SUUP` to `SUPP` (jsc#SLE-9807) - change from `BCH_FEATURE_COMPAT_SUUP` to `BCH_FEATURE_COMPAT_SUPP` - change from `BCH_FEATURE_INCOMPAT_SUUP` to `BCH_FEATURE_INCOMPAT_SUPP` - change from `BCH_FEATURE_INCOMPAT_SUUP` to `BCH_FEATURE_RO_COMPAT_SUPP` - Call `set_bucket_size()` only for cache device (jsc#SLE-9807) - Add `BCH_FEATURE_INCOMPAT_LARGE_BUCKET` to `BCH_FEATURE_INCOMPAT_SUPP` (jsc#SLE-9807) - `BCH_FEATURE_INCOMPAT_LARGE_BUCKET` is a feature to support 32bits bucket size, which is incompatible feature for existing on-disk layout. This fix adds this feature bit to `BCH_FEATURE_INCOMPAT_SUPP` feature set. - Check for incompatible feature set (jsc#SLE-9807) - Introduce `BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE` for large bucket (jsc#SLE-9807) - Display obsoleted bucket size configuration (jsc#SLE-9807) - Recover the missing `sb.csum` for showing `bcache` device super block (jsc#SLE-9807) - Call `to_cache_sb()` only for `bcache` device in `may_add_item()` (jsc#SLE-9807) - Improve column alignment for `bcache show -m` output (jsc#SLE-9807) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-108=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bcache-tools-1.1-lp152.2.9.1 bcache-tools-debuginfo-1.1-lp152.2.9.1 bcache-tools-debugsource-1.1-lp152.2.9.1 References:

1 0

openSUSE-RU-2021:0109-1: moderate: Recommended update for prometheus-saptune_exporter
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for prometheus-saptune_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0109-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for prometheus-saptune_exporter fixes the following issues: Ship version 0.2 of prometheus-saptune_exporter. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-109=1 Package List: - openSUSE Leap 15.2 (x86_64): prometheus-saptune_exporter-0.2-lp152.2.1 References:

1 0

openSUSE-SU-2021:0106-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0106-1 Rating: moderate References: #1180706 Cross-References: CVE-2020-7071 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-106=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_php7-7.4.6-lp152.2.12.1 apache2-mod_php7-debuginfo-7.4.6-lp152.2.12.1 php7-7.4.6-lp152.2.12.1 php7-bcmath-7.4.6-lp152.2.12.1 php7-bcmath-debuginfo-7.4.6-lp152.2.12.1 php7-bz2-7.4.6-lp152.2.12.1 php7-bz2-debuginfo-7.4.6-lp152.2.12.1 php7-calendar-7.4.6-lp152.2.12.1 php7-calendar-debuginfo-7.4.6-lp152.2.12.1 php7-ctype-7.4.6-lp152.2.12.1 php7-ctype-debuginfo-7.4.6-lp152.2.12.1 php7-curl-7.4.6-lp152.2.12.1 php7-curl-debuginfo-7.4.6-lp152.2.12.1 php7-dba-7.4.6-lp152.2.12.1 php7-dba-debuginfo-7.4.6-lp152.2.12.1 php7-debuginfo-7.4.6-lp152.2.12.1 php7-debugsource-7.4.6-lp152.2.12.1 php7-devel-7.4.6-lp152.2.12.1 php7-dom-7.4.6-lp152.2.12.1 php7-dom-debuginfo-7.4.6-lp152.2.12.1 php7-embed-7.4.6-lp152.2.12.1 php7-embed-debuginfo-7.4.6-lp152.2.12.1 php7-enchant-7.4.6-lp152.2.12.1 php7-enchant-debuginfo-7.4.6-lp152.2.12.1 php7-exif-7.4.6-lp152.2.12.1 php7-exif-debuginfo-7.4.6-lp152.2.12.1 php7-fastcgi-7.4.6-lp152.2.12.1 php7-fastcgi-debuginfo-7.4.6-lp152.2.12.1 php7-fileinfo-7.4.6-lp152.2.12.1 php7-fileinfo-debuginfo-7.4.6-lp152.2.12.1 php7-firebird-7.4.6-lp152.2.12.1 php7-firebird-debuginfo-7.4.6-lp152.2.12.1 php7-fpm-7.4.6-lp152.2.12.1 php7-fpm-debuginfo-7.4.6-lp152.2.12.1 php7-ftp-7.4.6-lp152.2.12.1 php7-ftp-debuginfo-7.4.6-lp152.2.12.1 php7-gd-7.4.6-lp152.2.12.1 php7-gd-debuginfo-7.4.6-lp152.2.12.1 php7-gettext-7.4.6-lp152.2.12.1 php7-gettext-debuginfo-7.4.6-lp152.2.12.1 php7-gmp-7.4.6-lp152.2.12.1 php7-gmp-debuginfo-7.4.6-lp152.2.12.1 php7-iconv-7.4.6-lp152.2.12.1 php7-iconv-debuginfo-7.4.6-lp152.2.12.1 php7-intl-7.4.6-lp152.2.12.1 php7-intl-debuginfo-7.4.6-lp152.2.12.1 php7-json-7.4.6-lp152.2.12.1 php7-json-debuginfo-7.4.6-lp152.2.12.1 php7-ldap-7.4.6-lp152.2.12.1 php7-ldap-debuginfo-7.4.6-lp152.2.12.1 php7-mbstring-7.4.6-lp152.2.12.1 php7-mbstring-debuginfo-7.4.6-lp152.2.12.1 php7-mysql-7.4.6-lp152.2.12.1 php7-mysql-debuginfo-7.4.6-lp152.2.12.1 php7-odbc-7.4.6-lp152.2.12.1 php7-odbc-debuginfo-7.4.6-lp152.2.12.1 php7-opcache-7.4.6-lp152.2.12.1 php7-opcache-debuginfo-7.4.6-lp152.2.12.1 php7-openssl-7.4.6-lp152.2.12.1 php7-openssl-debuginfo-7.4.6-lp152.2.12.1 php7-pcntl-7.4.6-lp152.2.12.1 php7-pcntl-debuginfo-7.4.6-lp152.2.12.1 php7-pdo-7.4.6-lp152.2.12.1 php7-pdo-debuginfo-7.4.6-lp152.2.12.1 php7-pgsql-7.4.6-lp152.2.12.1 php7-pgsql-debuginfo-7.4.6-lp152.2.12.1 php7-phar-7.4.6-lp152.2.12.1 php7-phar-debuginfo-7.4.6-lp152.2.12.1 php7-posix-7.4.6-lp152.2.12.1 php7-posix-debuginfo-7.4.6-lp152.2.12.1 php7-readline-7.4.6-lp152.2.12.1 php7-readline-debuginfo-7.4.6-lp152.2.12.1 php7-shmop-7.4.6-lp152.2.12.1 php7-shmop-debuginfo-7.4.6-lp152.2.12.1 php7-snmp-7.4.6-lp152.2.12.1 php7-snmp-debuginfo-7.4.6-lp152.2.12.1 php7-soap-7.4.6-lp152.2.12.1 php7-soap-debuginfo-7.4.6-lp152.2.12.1 php7-sockets-7.4.6-lp152.2.12.1 php7-sockets-debuginfo-7.4.6-lp152.2.12.1 php7-sodium-7.4.6-lp152.2.12.1 php7-sodium-debuginfo-7.4.6-lp152.2.12.1 php7-sqlite-7.4.6-lp152.2.12.1 php7-sqlite-debuginfo-7.4.6-lp152.2.12.1 php7-sysvmsg-7.4.6-lp152.2.12.1 php7-sysvmsg-debuginfo-7.4.6-lp152.2.12.1 php7-sysvsem-7.4.6-lp152.2.12.1 php7-sysvsem-debuginfo-7.4.6-lp152.2.12.1 php7-sysvshm-7.4.6-lp152.2.12.1 php7-sysvshm-debuginfo-7.4.6-lp152.2.12.1 php7-test-7.4.6-lp152.2.12.1 php7-tidy-7.4.6-lp152.2.12.1 php7-tidy-debuginfo-7.4.6-lp152.2.12.1 php7-tokenizer-7.4.6-lp152.2.12.1 php7-tokenizer-debuginfo-7.4.6-lp152.2.12.1 php7-xmlreader-7.4.6-lp152.2.12.1 php7-xmlreader-debuginfo-7.4.6-lp152.2.12.1 php7-xmlrpc-7.4.6-lp152.2.12.1 php7-xmlrpc-debuginfo-7.4.6-lp152.2.12.1 php7-xmlwriter-7.4.6-lp152.2.12.1 php7-xmlwriter-debuginfo-7.4.6-lp152.2.12.1 php7-xsl-7.4.6-lp152.2.12.1 php7-xsl-debuginfo-7.4.6-lp152.2.12.1 php7-zip-7.4.6-lp152.2.12.1 php7-zip-debuginfo-7.4.6-lp152.2.12.1 php7-zlib-7.4.6-lp152.2.12.1 php7-zlib-debuginfo-7.4.6-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-7071.html https://bugzilla.suse.com/1180706

1 0

openSUSE-SU-2021:0107-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0107-1 Rating: moderate References: #1178909 #1179503 Cross-References: CVE-2020-25709 CVE-2020-25710 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909). - CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909). Non-security issue fixed: - Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-107=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libldap-2_4-2-2.4.46-lp152.14.15.1 libldap-2_4-2-debuginfo-2.4.46-lp152.14.15.1 openldap2-2.4.46-lp152.14.15.1 openldap2-back-meta-2.4.46-lp152.14.15.1 openldap2-back-meta-debuginfo-2.4.46-lp152.14.15.1 openldap2-back-perl-2.4.46-lp152.14.15.1 openldap2-back-perl-debuginfo-2.4.46-lp152.14.15.1 openldap2-back-sock-2.4.46-lp152.14.15.1 openldap2-back-sock-debuginfo-2.4.46-lp152.14.15.1 openldap2-back-sql-2.4.46-lp152.14.15.1 openldap2-back-sql-debuginfo-2.4.46-lp152.14.15.1 openldap2-client-2.4.46-lp152.14.15.1 openldap2-client-debuginfo-2.4.46-lp152.14.15.1 openldap2-contrib-2.4.46-lp152.14.15.1 openldap2-contrib-debuginfo-2.4.46-lp152.14.15.1 openldap2-debuginfo-2.4.46-lp152.14.15.1 openldap2-debugsource-2.4.46-lp152.14.15.1 openldap2-devel-2.4.46-lp152.14.15.1 openldap2-devel-static-2.4.46-lp152.14.15.1 openldap2-ppolicy-check-password-1.2-lp152.14.15.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp152.14.15.1 - openSUSE Leap 15.2 (noarch): libldap-data-2.4.46-lp152.14.15.1 openldap2-doc-2.4.46-lp152.14.15.1 - openSUSE Leap 15.2 (x86_64): libldap-2_4-2-32bit-2.4.46-lp152.14.15.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp152.14.15.1 openldap2-devel-32bit-2.4.46-lp152.14.15.1 References: https://www.suse.com/security/cve/CVE-2020-25709.html https://www.suse.com/security/cve/CVE-2020-25710.html https://bugzilla.suse.com/1178909 https://bugzilla.suse.com/1179503

1 0

openSUSE-RU-2021:0105-1: moderate: Recommended update for aide
by maintenance＠opensuse.org 18 Jan '21

18 Jan '21

openSUSE Recommended Update: Recommended update for aide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0105-1 Rating: moderate References: #1180165 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aide fixes the following issue: - Add a `syslog_format` to Advanced Intrusion Detection Environment (AIDE). (bsc#1180165) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-105=1 Package List: - openSUSE Leap 15.2 (x86_64): aide-0.16-lp152.5.3.1 aide-debuginfo-0.16-lp152.5.3.1 aide-debugsource-0.16-lp152.5.3.1 aide-test-0.16-lp152.5.3.1 References: https://bugzilla.suse.com/1180165

1 0

openSUSE-RU-2021:0104-1: moderate: Recommended update for aide
by maintenance＠opensuse.org 17 Jan '21

17 Jan '21

openSUSE Recommended Update: Recommended update for aide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0104-1 Rating: moderate References: #1180165 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aide fixes the following issue: - Add a `syslog_format` to Advanced Intrusion Detection Environment (AIDE). (bsc#1180165) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-104=1 Package List: - openSUSE Leap 15.1 (x86_64): aide-0.16-lp151.3.6.1 aide-debuginfo-0.16-lp151.3.6.1 aide-debugsource-0.16-lp151.3.6.1 aide-test-0.16-lp151.3.6.1 References: https://bugzilla.suse.com/1180165

1 0