February 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:0302-1: important: Security update for python-bottle
by opensuse-security＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Security Update: Security update for python-bottle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0302-1 Rating: important References: #1182181 Cross-References: CVE-2020-28473 CVSS scores: CVE-2020-28473 (NVD) : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2020-28473 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-bottle fixes the following issues: - CVE-2020-28473: Fixed Web Cache Poisoning vulnerability using parameter cloaking (bsc#1182181). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-302=1 Package List: - openSUSE Leap 15.2 (noarch): python-bottle-doc-0.12.13-lp152.4.3.1 python2-bottle-0.12.13-lp152.4.3.1 python3-bottle-0.12.13-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-28473.html https://bugzilla.suse.com/1182181

1 0

openSUSE-RU-2021:0301-1: moderate: Recommended update for adminer
by maintenance＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Recommended Update: Recommended update for adminer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0301-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for adminer fixes the following issues: adminer was updated to version 4.7.9: * Reorder changes * Editor: Avoid trailing dot in export filename * Skip impossible condition ($link always contains ?username=) * Fix displayed foreign key columns from other DB (bug #766) * Do not display empty database in the list twice * Display CSRF logout error after connecting * Fix displaying type mapping for Elasticsearch >= 6.0 * MongoDB: Prefer modern extension * Fix MongoDB connect 'Database does not support password.' tips * Update bug numbers * Postgres - fix missing partitioned tables in navigation * Linkify URLs in SQL results * Title for select data link * Quote values with leading and trailing zeroes in CSV export (bug #777) * MySQL: Don't quote default value of text fields (bug #779) * fixed Unsupported operand types when $port is socket * Respect SQL command URL parameters * Fix XSS in browsers which don't encode URL parameters (bug #775) * SQLite: Set busy_timeout to 500 * PostgreSQL 11: Create PRIMARY KEY for auto increment columns * PostgreSQL: Support smallserial * Add comment * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL < 9.1 (bug #771) * fix wrong hungarian translation * Editor: Cast to string when searching (bug #325) * Don't syntax highlight during IME composition (bug #747) * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0) * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting) * Update Korean translation (thanks to B. Cansmile Cha) * add alternative design dracula theme * show correct collation for PostgresSQL * PostgreSQL: Fix current schema in view definition * Add external designs as submodules * Fixes to lucas-sandery theme * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749) * Fix PgSQL generated always as identity fix * Update Russian translation. * Update Ukrainian translation. * PostgreSQL: Export all FKs after all CREATE TABLE * MySQL, MariaDB: Fix doc links * Do not display SQL function for checkbox * Fix style (bug #743) * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738) * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200 * Add basic Makefile. * Travis: add php 7.4 && 8.0 * Re-enable PHP warnings Update to version 4.7.8: * Release 4.7.8 * MySQL: Use renamed variable * Avoid PDO exceptions in PHP 8 * Fix method call after #406 * Improve check for numeric ports (bug #769) * Add missing method * Fix compatibility with PHP 8 * Avoid each() not available in PHP 8 * Fix style * Escape : also in remove_from_param Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-301=1 Package List: - openSUSE Leap 15.2 (noarch): adminer-4.7.9-lp152.2.3.1 adminer-designs-4.7.9-lp152.2.3.1 adminer-editor-4.7.9-lp152.2.3.1 adminer-mysql-4.7.9-lp152.2.3.1 adminer-pgsql-4.7.9-lp152.2.3.1 adminer-sqlite-4.7.9-lp152.2.3.1 References:

1 0

openSUSE-SU-2021:0300-1: moderate: Security update for mumble
by opensuse-security＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Security Update: Security update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0300-1 Rating: moderate References: #1180068 #1182123 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for mumble fixes the following issues: mumble was updated to 1.3.4: * Fix use of outdated (non-existent) notification icon names * Fix Security vulnerability caused by allowing non http/https URL schemes in public server list (boo#1182123) * Server: Fix Exit status for actions like --version or --supw * Fix packet loss & audio artifacts caused by OCB2 XEX* mitigation - update apparmor profiles to get warning free again on 15.2 - use abstractions for ssl files - allow inet dgram sockets as mumble can also work via udp - allow netlink socket (probably for dbus) - properly allow lsb_release again - add support for optional local include - start murmurd directly as user mumble-server it gets rid of the dac_override/setgid/setuid/chown permissions Update to upstream version 1.3.3 Client: * Fixed: Chatbox invisble (zero height) (#4388) * Fixed: Handling of invalid packet sizes (#4394) * Fixed: Race-condition leading to loss of shortcuts (#4430) * Fixed: Link in About dialog is now clickable again (#4454) * Fixed: Sizing issues in ACL-Editor (#4455) * Improved: PulseAudio now always samples at 48 kHz (#4449) Server: * Fixed: Crash due to problems when using PostgreSQL (#4370) * Fixed: Handling of invalid package sizes (#4392) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-300=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): mumble-1.3.4-lp152.2.6.1 mumble-debuginfo-1.3.4-lp152.2.6.1 mumble-debugsource-1.3.4-lp152.2.6.1 mumble-server-1.3.4-lp152.2.6.1 mumble-server-debuginfo-1.3.4-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): mumble-32bit-1.3.4-lp152.2.6.1 mumble-32bit-debuginfo-1.3.4-lp152.2.6.1 References: https://bugzilla.suse.com/1180068 https://bugzilla.suse.com/1182123

1 0

openSUSE-RU-2021:0299-1: moderate: Recommended update for virt-manager
by maintenance＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Recommended Update: Recommended update for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0299-1 Rating: moderate References: #1027942 #1169708 #1172356 #1174176 #1176080 #1177620 #1179236 #1180062 #1180069 #1180897 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for virt-manager fixes the following issues: - Fix for an issue when virtual host does not boot after installing from 'ISO' image. (bsc#1180897) - Fix for 'virsh edit' error when 'XML' document failed to validate against schema. (bsc#1180069) - Fix for 'virt-install' using 'isoinfo' by including 'mkisofs' in the spec file. (bsc#1180062) - Fix for validating install location. (bsc#1179236) - Fix for an issue when deployed 'WIN2K19' guest system could not find a network adapter driver. (bsc#1177620) - Fix for an issue when selecting one 'UEFI' firmware in install wizard resets 'UI' to 'BIOS'. (bsc#1176080) - Upstream bug fix (bsc#1027942) - Fix for an issue when 'IDE' supports only 2 disks for bus 'NONE'. (bsc#1174176) - Fix for an issue when hot-plug network adapter via 'virt-manager' asks to attach on next reboot while it should be live attached. (bsc#1172356) - Fix for a bug in yast2 'virt-install' causing internal error. (bsc#1169708) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-299=1 Package List: - openSUSE Leap 15.2 (noarch): virt-install-2.2.1-lp152.9.3.1 virt-manager-2.2.1-lp152.9.3.1 virt-manager-common-2.2.1-lp152.9.3.1 References: https://bugzilla.suse.com/1027942 https://bugzilla.suse.com/1169708 https://bugzilla.suse.com/1172356 https://bugzilla.suse.com/1174176 https://bugzilla.suse.com/1176080 https://bugzilla.suse.com/1177620 https://bugzilla.suse.com/1179236 https://bugzilla.suse.com/1180062 https://bugzilla.suse.com/1180069 https://bugzilla.suse.com/1180897

1 0

openSUSE-RU-2021:0298-1: moderate: Recommended update for yast2-rear
by maintenance＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Recommended Update: Recommended update for yast2-rear ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0298-1 Rating: moderate References: #1180983 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-rear fixes the following issues: - Fixed a syntax error which has been shown while booting an image (bsc#1180983) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-298=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-rear-4.2.2-lp152.2.3.1 References: https://bugzilla.suse.com/1180983

1 0

openSUSE-RU-2021:0297-1: Recommended update for libmodulemd
by maintenance＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Recommended Update: Recommended update for libmodulemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0297-1 Rating: low References: #1181004 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libmodulemd fixes the following issues: - Fixed a building issue for 32-bit architectures This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-297=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libmodulemd-debuginfo-2.10.0-lp152.8.3.1 libmodulemd-debugsource-2.10.0-lp152.8.3.1 libmodulemd-devel-2.10.0-lp152.8.3.1 libmodulemd2-2.10.0-lp152.8.3.1 libmodulemd2-debuginfo-2.10.0-lp152.8.3.1 modulemd-validator-2.10.0-lp152.8.3.1 modulemd-validator-debuginfo-2.10.0-lp152.8.3.1 python3-libmodulemd-2.10.0-lp152.8.3.1 typelib-1_0-Modulemd-2_0-2.10.0-lp152.8.3.1 References: https://bugzilla.suse.com/1181004

1 0

openSUSE-SU-2021:0296-1: important: Security update for opera
by opensuse-security＠opensuse.org 15 Feb '21

15 Feb '21

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0296-1 Rating: important References: #1181827 Cross-References: CVE-2021-21148 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement client_capabilities negotiation for Flow / Sync - DNA-90560 [Search Tabs] Open Tabs On Top - DNA-90620 Add opauto tests for tab snoozing - DNA-90628 Update opauto tests after design changes - DNA-90818 Only 3 recently closed tabs are shown in a search mode - DNA-90911 Enable search-tabs-open-tabs-on-top on developer - DNA-90990 Crash at opera::AddressBarView::NotifyBoundsChanged() - DNA-90991 Opera doesn��t show version and ��Relaunch�� button despite update is ready - DNA-91097 Crash at extensions::BrowserSidebarPrivateGetPremium ExtensionsInfoFunction::Run() - DNA-91163 [Win] ��URL navigation filters�� subpage doesn��t react on actions - DNA-91196 [Flow] Device capabilities is not properly saved in Local State - DNA-91276 Sidebar setup wont open - The update to chromium 88.0.4324.150 fixes following issues: - CVE-2021-21148 (1181827) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2021-296=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-74.0.3911.107-lp152.2.34.1 References: https://www.suse.com/security/cve/CVE-2021-21148.html https://bugzilla.suse.com/1181827

1 0

openSUSE-SU-2021:0295-1: important: Security update for librepo
by opensuse-security＠opensuse.org 15 Feb '21

15 Feb '21

openSUSE Security Update: Security update for librepo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0295-1 Rating: important References: #1175475 Cross-References: CVE-2020-14352 CVSS scores: CVE-2020-14352 (NVD) : 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2020-14352 (SUSE): 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for librepo fixes the following issues: - Upgrade to 1.12.1 + Validate path read from repomd.xml (bsc#1175475, CVE-2020-14352) - Changes from 1.12.0 + Prefer mirrorlist/metalink over baseurl (rh#1775184) + Decode package URL when using for local filename (rh#1817130) + Fix memory leak in lr_download_metadata() and lr_yum_download_remote() + Download sources work when at least one of specified is working (rh#1775184) This update was imported from the SUSE:SLE-15-SP2:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-295=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): librepo-devel-1.12.1-bp152.2.6.1 librepo0-1.12.1-bp152.2.6.1 python3-librepo-1.12.1-bp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-14352.html https://bugzilla.suse.com/1175475

1 0

openSUSE-RU-2021:0294-1: moderate: Recommended update for gimp
by maintenance＠opensuse.org 15 Feb '21

15 Feb '21

openSUSE Recommended Update: Recommended update for gimp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0294-1 Rating: moderate References: #1178726 #1180770 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gimp fixes the following issues: - Fixed a crash when importing ps files (bsc#1180770, bsc#1178726) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-294=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gimp-2.10.12-lp152.2.3.1 gimp-debuginfo-2.10.12-lp152.2.3.1 gimp-debugsource-2.10.12-lp152.2.3.1 gimp-devel-2.10.12-lp152.2.3.1 gimp-devel-debuginfo-2.10.12-lp152.2.3.1 gimp-plugin-aa-2.10.12-lp152.2.3.1 gimp-plugin-aa-debuginfo-2.10.12-lp152.2.3.1 gimp-plugins-python-2.10.12-lp152.2.3.1 gimp-plugins-python-debuginfo-2.10.12-lp152.2.3.1 libgimp-2_0-0-2.10.12-lp152.2.3.1 libgimp-2_0-0-debuginfo-2.10.12-lp152.2.3.1 libgimpui-2_0-0-2.10.12-lp152.2.3.1 libgimpui-2_0-0-debuginfo-2.10.12-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): gimp-lang-2.10.12-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libgimp-2_0-0-32bit-2.10.12-lp152.2.3.1 libgimp-2_0-0-32bit-debuginfo-2.10.12-lp152.2.3.1 libgimpui-2_0-0-32bit-2.10.12-lp152.2.3.1 libgimpui-2_0-0-32bit-debuginfo-2.10.12-lp152.2.3.1 References: https://bugzilla.suse.com/1178726 https://bugzilla.suse.com/1180770

1 0

openSUSE-RU-2021:0293-1: moderate: Recommended update for sendmail
by maintenance＠opensuse.org 15 Feb '21

15 Feb '21

openSUSE Recommended Update: Recommended update for sendmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0293-1 Rating: moderate References: #1171164 #1174572 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sendmail fixes the following issues: - Move SMTPD_LISTEN_REMOTE hack into valid code of update script - Change location of update script in fillup/sysconfig files - Add better support for IPv6 Update to sendmail 8.16.1 2020/07/05 (boo#1174572) - SECURITY: If sendmail tried to reuse an SMTP session which had already been closed by the server, then the connection cache could have invalid information about the session. One possible consequence was that STARTTLS was not used even if offered. This problem has been fixed by clearing out all relevant status information when a closed session is encountered. - Initial support for DANE (see RFC 7672 et.al.) is available if the compile time option DANE is set. Only TLSA RR 3-1-x is currently implemented. - New options SSLEngine and SSLEnginePath to support OpenSSL engines. Note: this feature has so far only been tested with the "chil" engine; please report problems with other engines if you encounter any. - New option CRLPath to specify a directory which contains hashes pointing to certificate revocations files. Based on patch from Al Smith. - New rulesets tls_srv_features and tls_clt_features which can return a (semicolon separated) list of TLS related options, e.g., CipherList, CertFile, KeyFile, see doc/op/op.me for details. - To automatically handle TLS interoperability problems for outgoing mail, sendmail can now immediately try a connection again without STARTTLS after a TLS handshake failure. This can be configured globally via the option TLSFallbacktoClear or per session via the 'C' flag of tls_clt_features. This also adds the new value "CLEAR" for the macro {verify}: STARTTLS has been disabled internally for a clear text delivery attempt. - Apply Timeout.starttls also to the server waiting for the TLS handshake to begin. Based on patch from Simon Hradecky. - New compile time option TLS_EC to enable the use of elliptic curve cryptography in STARTTLS (previously available as _FFR_TLS_EC). - Handle MIME boundaries specified in headers which contain CRLF. - Fix detection of loopback net (it was broken when compiled with NETINET6) and only set the macros {if_addr_out} and {if_family_out} if the interface of the outgoing connection does not belong to the loopback net. - Fix logic to enable a milter to delete a recipient in DeliveryMode=interactive even if it might be subject to alias expansion. - Log name of a milter making changes (this was missing for some functions). - Log the actual reply of a server when an SMTP delivery problem occurs in a "reply=" field if possible. - Log user= for failed AUTH attempts if possible. Based on patch from Packet Hack, Jim Hranicky, Kevin A. McGrail, and Joe Quinn. - Add CDB as map type. Note: CDB is a "Constant DataBase", i.e., no changes can be made after it is created, hence it does not work with vacation(1) nor editmap(8) (except for query mode). - Fix some memory leaks (mostly in error cases) and properly handle copied varargs in sm_io_vfprintf(). The issues were found using Coverity Scan and reported (including patches) by Ond��ej Lyson��k of Red Hat. - Do not override ServerSSLOptions and ClientSSLOptions when they are specified on the command line. Based on patch from Hiroki Sato. - Add RFC7505 Null MX support for domains that declare they do not accept mail. - New compile time option LDAP_NETWORK_TIMEOUT which is set automatically when LDAPMAP is used and LDAP_OPT_NETWORK_TIMEOUT is available to enable the new -c option for LDAP maps to specify the network timeout. - CONFIG: New FEATURE(`tls_session_features') to enable standard rules for tls_srv_features and tls_clt_features; for details see cf/README. - CONFIG: New options confSSL_ENGINE and confSSL_ENGINE_PATH for SSLEngine and SSLEnginePath, respectively. - CONFIG: New options confDANE to enable DANE support. - CONFIG: New option confTLS_FALLBACK_TO_CLEAR for TLSFallbacktoClear. - CONFIG: New extension CITag: for TLS restrictions, see cf/README for details. - CONFIG: FEATURE(`blacklist_recipients') renamed to FEATURE(`blocklist_recipients'). - CONTRIB: cidrexpand updated to support IPv6 CIDR ranges and to canonicalize IPv6 addresses; if cidrexpand is used with IPv6 addresses then UseCompressedIPv6Addresses must be disabled. - DOC: The dns map can return multiple values in a single result if the -z option is used. - DOC: Note to set MustQuoteChars=. due to DKIM signatures. - LIBMILTER: Fix typo in a macro. Patch from Ignacio Goyret of Alcatel-Lucent. - LIBMILTER: Fix reference in xxfi_negotiate documentation. Patch from Sven Neuhaus. - LIBMILTER: Fix function name in smfi_addrcpt_par documentation. Patch from G.W. Haywood. - LIBMILTER: Fix a potential memory leak in smfi_setsymlist(). Patch from Martin Svec. - MAKEMAP: New map type "implicit" refers to the first available type, i.e., it depends on the compile time options NEWDB, DBM, and CDB. This can be used in conjunction with the "implicit" map type in sendmail.cf. Note: makemap, libsmdb, and sendmail must be compiled with the same options (and library versions of course). - Portability: - Add support for Darwin 14-18 (Mac OS X 10.x). - New option HAS_GETHOSTBYNAME2: set if your system supports gethostbyname2(2). - Set SM_CONF_SEM=2 for FreeBSD 12 and later due to changes in sys/sem.h - On Linux set MAXHOSTNAMELEN (the maximum length of a FQHN) to 256 if it is less than that value. - Added Files: - cf/feature/blocklist_recipients.m4 - cf/feature/tls_failures.m4 - devtools/OS/Darwin.14.x - devtools/OS/Darwin.15.x - devtools/OS/Darwin.16.x - libsmdb/smcdb.c - sendmail/ratectrl.h - Use DANE and TLS_EC Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-293=1 Package List: - openSUSE Leap 15.2 (x86_64): libmilter1_0-8.16.1-lp152.10.3.1 libmilter1_0-debuginfo-8.16.1-lp152.10.3.1 rmail-8.16.1-lp152.10.3.1 rmail-debuginfo-8.16.1-lp152.10.3.1 sendmail-8.16.1-lp152.10.3.1 sendmail-debuginfo-8.16.1-lp152.10.3.1 sendmail-debugsource-8.16.1-lp152.10.3.1 sendmail-devel-8.16.1-lp152.10.3.1 - openSUSE Leap 15.2 (noarch): libmilter-doc-8.16.1-lp152.10.3.1 sendmail-starttls-8.16.1-lp152.10.3.1 References: https://bugzilla.suse.com/1171164 https://bugzilla.suse.com/1174572

1 0