February 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0336-1: moderate: Recommended update for python-pycryptodomex
by maintenance＠opensuse.org 24 Feb '21

24 Feb '21

openSUSE Recommended Update: Recommended update for python-pycryptodomex ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0336-1 Rating: moderate References: #1181611 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pycryptodomex fixes the following issues: - Fixed a compatibility problem with salt 3002 (bsc#1181611) This update was imported from the SUSE:SLE-15-SP2:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-336=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): python2-pycryptodomex-3.9.9-bp152.2.3.1 python3-pycryptodomex-3.9.9-bp152.2.3.1 References: https://bugzilla.suse.com/1181611

1 0

openSUSE-SU-2021:0337-1: moderate: Security update for postgresql, postgresql13
by opensuse-security＠opensuse.org 24 Feb '21

24 Feb '21

openSUSE Security Update: Security update for postgresql, postgresql13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0337-1 Rating: moderate References: #1178666 #1178667 #1178668 #1178961 Cross-References: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVSS scores: CVE-2020-25694 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-25694 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-25695 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25695 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25696 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-25696 (SUSE): 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for postgresql, postgresql13 fixes the following issues: This update ships postgresql13. Upgrade to version 13.1: * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch) * https://www.postgresql.org/about/news/2111/ * https://www.postgresql.org/docs/13/release-13-1.html Initial packaging of PostgreSQL 13: * https://www.postgresql.org/about/news/2077/ * https://www.postgresql.org/docs/13/release-13.html - bsc#1178961: %ghost the symlinks to pg_config and ecpg. Changes in postgresql wrapper package: - Bump major version to 13. - We also transfer PostgreSQL 9.4.26 to the new package layout in SLE12-SP2 and newer. Reflect this in the conflict with postgresql94. - Also conflict with PostgreSQL versions before 9. - Conflicting with older versions is not limited to SLE. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-337=1 Package List: - openSUSE Leap 15.2 (noarch): postgresql-13-lp152.3.6.1 postgresql-contrib-13-lp152.3.6.1 postgresql-devel-13-lp152.3.6.1 postgresql-docs-13-lp152.3.6.1 postgresql-llvmjit-13-lp152.3.6.1 postgresql-plperl-13-lp152.3.6.1 postgresql-plpython-13-lp152.3.6.1 postgresql-pltcl-13-lp152.3.6.1 postgresql-server-13-lp152.3.6.1 postgresql-server-devel-13-lp152.3.6.1 postgresql-test-13-lp152.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-25694.html https://www.suse.com/security/cve/CVE-2020-25695.html https://www.suse.com/security/cve/CVE-2020-25696.html https://bugzilla.suse.com/1178666 https://bugzilla.suse.com/1178667 https://bugzilla.suse.com/1178668 https://bugzilla.suse.com/1178961

1 0

openSUSE-SU-2021:0335-1: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 Feb '21

24 Feb '21

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0335-1 Rating: low References: #1181848 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.7.1 ESR (bsc#1181848) - Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. - Buffer overflow in depth pitch calculations for compressed textures Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-335=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.7.1-lp152.2.46.1 MozillaFirefox-branding-upstream-78.7.1-lp152.2.46.1 MozillaFirefox-buildsymbols-78.7.1-lp152.2.46.1 MozillaFirefox-debuginfo-78.7.1-lp152.2.46.1 MozillaFirefox-debugsource-78.7.1-lp152.2.46.1 MozillaFirefox-devel-78.7.1-lp152.2.46.1 MozillaFirefox-translations-common-78.7.1-lp152.2.46.1 MozillaFirefox-translations-other-78.7.1-lp152.2.46.1 References: https://bugzilla.suse.com/1181848

1 0

openSUSE-SU-2021:0334-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 23 Feb '21

23 Feb '21

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0334-1 Rating: moderate References: #1178741 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues: tor was updated to 0.4.5.6: * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.ht ml * Introduce a new MetricsPort HTTP interface * Support IPv6 in the torrc Address option * Add event-tracing library support for USDT and LTTng-UST * Try to read N of N bytes on a TLS connection tor was updated to 0.4.4.7: * https://blog.torproject.org/node/1990 * Stop requiring a live consensus for v3 clients and services * Re-entry into the network is now denied at the Exit level * Fix undefined behavior on our Keccak library * Strip '\r' characters when reading text files on Unix platforms * Handle partial SOCKS5 messages correctly * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-334=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): tor-0.4.5.6-bp152.2.6.1 References: https://bugzilla.suse.com/1178741

1 0

openSUSE-RU-2021:0333-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 23 Feb '21

23 Feb '21

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0333-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtualbox fixes the following issues: - Add build of guest kernel modules back in for Leap 15.2. File "vboxguestconfig.sh" is added. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-333=1 Package List: - openSUSE Leap 15.2 (noarch): virtualbox-guest-desktop-icons-6.1.18-lp152.2.14.1 virtualbox-guest-source-6.1.18-lp152.2.14.1 virtualbox-host-source-6.1.18-lp152.2.14.1 - openSUSE Leap 15.2 (x86_64): python3-virtualbox-6.1.18-lp152.2.14.1 python3-virtualbox-debuginfo-6.1.18-lp152.2.14.1 virtualbox-6.1.18-lp152.2.14.1 virtualbox-debuginfo-6.1.18-lp152.2.14.1 virtualbox-debugsource-6.1.18-lp152.2.14.1 virtualbox-devel-6.1.18-lp152.2.14.1 virtualbox-guest-tools-6.1.18-lp152.2.14.1 virtualbox-guest-tools-debuginfo-6.1.18-lp152.2.14.1 virtualbox-guest-x11-6.1.18-lp152.2.14.1 virtualbox-guest-x11-debuginfo-6.1.18-lp152.2.14.1 virtualbox-kmp-debugsource-6.1.18-lp152.2.14.1 virtualbox-kmp-default-6.1.18_k5.3.18_lp152.63-lp152.2.14.1 virtualbox-kmp-default-debuginfo-6.1.18_k5.3.18_lp152.63-lp152.2.14.1 virtualbox-kmp-preempt-6.1.18_k5.3.18_lp152.63-lp152.2.14.1 virtualbox-kmp-preempt-debuginfo-6.1.18_k5.3.18_lp152.63-lp152.2.14.1 virtualbox-qt-6.1.18-lp152.2.14.1 virtualbox-qt-debuginfo-6.1.18-lp152.2.14.1 virtualbox-vnc-6.1.18-lp152.2.14.1 virtualbox-websrv-6.1.18-lp152.2.14.1 virtualbox-websrv-debuginfo-6.1.18-lp152.2.14.1 References:

1 0

openSUSE-RU-2021:0332-1: moderate: Recommended update for trytond
by maintenance＠opensuse.org 23 Feb '21

23 Feb '21

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0332-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond fixes the following issues: Update to version 5.0.33 - Security fix for https://bugs.tryton.org/issue10068 - Bug fixes This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-332=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): trytond-5.0.33-bp152.2.24.1 References:

1 0

openSUSE-SU-2021:0331-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 23 Feb '21

23 Feb '21

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0331-1 Rating: moderate References: #1176262 #1179756 #1180686 #1181126 Cross-References: CVE-2019-20916 CVE-2021-3177 CVSS scores: CVE-2019-20916 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2019-20916 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2021-3177 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3177 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for python3 fixes the following issues: - CVE-2021-3177: Fixed buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-331=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython3_6m1_0-3.6.12-lp152.4.17.1 libpython3_6m1_0-debuginfo-3.6.12-lp152.4.17.1 python3-3.6.12-lp152.4.17.1 python3-base-3.6.12-lp152.4.17.1 python3-base-debuginfo-3.6.12-lp152.4.17.1 python3-core-debugsource-3.6.12-lp152.4.17.1 python3-curses-3.6.12-lp152.4.17.1 python3-curses-debuginfo-3.6.12-lp152.4.17.1 python3-dbm-3.6.12-lp152.4.17.1 python3-dbm-debuginfo-3.6.12-lp152.4.17.1 python3-debuginfo-3.6.12-lp152.4.17.1 python3-debugsource-3.6.12-lp152.4.17.1 python3-devel-3.6.12-lp152.4.17.1 python3-devel-debuginfo-3.6.12-lp152.4.17.1 python3-doc-3.6.12-lp152.4.17.1 python3-doc-devhelp-3.6.12-lp152.4.17.1 python3-idle-3.6.12-lp152.4.17.1 python3-testsuite-3.6.12-lp152.4.17.1 python3-testsuite-debuginfo-3.6.12-lp152.4.17.1 python3-tk-3.6.12-lp152.4.17.1 python3-tk-debuginfo-3.6.12-lp152.4.17.1 python3-tools-3.6.12-lp152.4.17.1 - openSUSE Leap 15.2 (x86_64): libpython3_6m1_0-32bit-3.6.12-lp152.4.17.1 libpython3_6m1_0-32bit-debuginfo-3.6.12-lp152.4.17.1 python3-32bit-3.6.12-lp152.4.17.1 python3-32bit-debuginfo-3.6.12-lp152.4.17.1 python3-base-32bit-3.6.12-lp152.4.17.1 python3-base-32bit-debuginfo-3.6.12-lp152.4.17.1 References: https://www.suse.com/security/cve/CVE-2019-20916.html https://www.suse.com/security/cve/CVE-2021-3177.html https://bugzilla.suse.com/1176262 https://bugzilla.suse.com/1179756 https://bugzilla.suse.com/1180686 https://bugzilla.suse.com/1181126

1 0

openSUSE-SU-2021:0330-1: moderate: Security update for tomcat
by opensuse-security＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0330-1 Rating: moderate References: #1180947 Cross-References: CVE-2021-24122 CVSS scores: CVE-2021-24122 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-24122 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-330=1 Package List: - openSUSE Leap 15.2 (noarch): tomcat-9.0.36-lp152.2.19.1 tomcat-admin-webapps-9.0.36-lp152.2.19.1 tomcat-docs-webapp-9.0.36-lp152.2.19.1 tomcat-el-3_0-api-9.0.36-lp152.2.19.1 tomcat-embed-9.0.36-lp152.2.19.1 tomcat-javadoc-9.0.36-lp152.2.19.1 tomcat-jsp-2_3-api-9.0.36-lp152.2.19.1 tomcat-jsvc-9.0.36-lp152.2.19.1 tomcat-lib-9.0.36-lp152.2.19.1 tomcat-servlet-4_0-api-9.0.36-lp152.2.19.1 tomcat-webapps-9.0.36-lp152.2.19.1 References: https://www.suse.com/security/cve/CVE-2021-24122.html https://bugzilla.suse.com/1180947

1 0

openSUSE-RU-2021:0329-1: moderate: Recommended update for go1.14
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for go1.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0329-1 Rating: moderate References: #1164903 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.14 fixes the following issues: - go1.14.15 (released 2021-02-04) includes fixes to the compiler, runtime, the go command, and the net/http package. * go#43859 cmd/go: handle space in path to C compiler * go#43796 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged * go#43792 internal/execabs: disable tests on js-wasm * go#43574 cmd/compile: 32-bit random data corruption * go#43405 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls" * go#42586 net/http: race in http2Transport This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-329=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.14-1.14.15-lp152.2.21.1 go1.14-doc-1.14.15-lp152.2.21.1 go1.14-race-1.14.15-lp152.2.21.1 References: https://bugzilla.suse.com/1164903

1 0

openSUSE-RU-2021:0328-1: moderate: Recommended update for go1.15
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for go1.15 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0328-1 Rating: moderate References: #1175132 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.15 fixes the following issues: - go1.15.8 (released 2021-02-04) includes fixes to the compiler, linker, runtime, the go command, and the net/http package. * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails * go#43860 cmd/go: handle space in path to C compiler * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged * go#43793 internal/execabs: disable tests on js-wasm * go#43575 cmd/compile: 32-bit random data corruption * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls" * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576 * go#42539 net/http: race in http2Transport * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-328=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.15-1.15.8-lp152.11.1 go1.15-doc-1.15.8-lp152.11.1 go1.15-race-1.15.8-lp152.11.1 References: https://bugzilla.suse.com/1175132

1 0

openSUSE-RU-2021:0327-1: moderate: Recommended update for openssh
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0327-1 Rating: moderate References: #1180501 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssh fixes the following issues: - Fixed a crash which sometimes occured on connection termination, caused by accessing freed memory (bsc#1180501) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-327=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): openssh-8.1p1-lp152.4.12.1 openssh-cavs-8.1p1-lp152.4.12.1 openssh-cavs-debuginfo-8.1p1-lp152.4.12.1 openssh-debuginfo-8.1p1-lp152.4.12.1 openssh-debugsource-8.1p1-lp152.4.12.1 openssh-fips-8.1p1-lp152.4.12.1 openssh-helpers-8.1p1-lp152.4.12.1 openssh-helpers-debuginfo-8.1p1-lp152.4.12.1 - openSUSE Leap 15.2 (x86_64): openssh-askpass-gnome-8.1p1-lp152.4.12.1 openssh-askpass-gnome-debuginfo-8.1p1-lp152.4.12.1 openssh-askpass-gnome-debugsource-8.1p1-lp152.4.12.1 References: https://bugzilla.suse.com/1180501

1 0

openSUSE-RU-2021:0326-1: moderate: Recommended update for Box2D
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for Box2D ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0326-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for Box2D fixes the following issues: - Download the real upstream tarball Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-326=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): Box2D-debugsource-2.3.1-lp152.4.3.1 libBox2D-devel-2.3.1-lp152.4.3.1 libBox2D2_3_1-2.3.1-lp152.4.3.1 libBox2D2_3_1-debuginfo-2.3.1-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): Box2D-doc-2.3.1-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): libBox2D-devel-32bit-2.3.1-lp152.4.3.1 libBox2D2_3_1-32bit-2.3.1-lp152.4.3.1 libBox2D2_3_1-32bit-debuginfo-2.3.1-lp152.4.3.1 References:

1 0

openSUSE-RU-2021:0323-1: important: Recommended update for lvm2
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0323-1 Rating: important References: #1179691 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - lvm2 will no longer use external_device_info_source="udev" as default because it introduced a regression (bsc#1179691). If this behavior is still wanted, please change this manually in the lvm.conf This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-323=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): device-mapper-1.02.163-lp152.7.18.1 device-mapper-debuginfo-1.02.163-lp152.7.18.1 device-mapper-devel-1.02.163-lp152.7.18.1 libdevmapper-event1_03-1.02.163-lp152.7.18.1 libdevmapper-event1_03-debuginfo-1.02.163-lp152.7.18.1 libdevmapper1_03-1.02.163-lp152.7.18.1 libdevmapper1_03-debuginfo-1.02.163-lp152.7.18.1 liblvm2cmd2_03-2.03.05-lp152.7.18.1 liblvm2cmd2_03-debuginfo-2.03.05-lp152.7.18.1 lvm2-2.03.05-lp152.7.18.1 lvm2-debuginfo-2.03.05-lp152.7.18.1 lvm2-debugsource-2.03.05-lp152.7.18.1 lvm2-devel-2.03.05-lp152.7.18.1 lvm2-device-mapper-debugsource-2.03.05-lp152.7.18.1 lvm2-lockd-2.03.05-lp152.7.18.1 lvm2-lockd-debuginfo-2.03.05-lp152.7.18.1 lvm2-lvmlockd-debugsource-2.03.05-lp152.7.18.1 lvm2-testsuite-2.03.05-lp152.7.18.1 lvm2-testsuite-debuginfo-2.03.05-lp152.7.18.1 - openSUSE Leap 15.2 (x86_64): device-mapper-devel-32bit-1.02.163-lp152.7.18.1 libdevmapper-event1_03-32bit-1.02.163-lp152.7.18.1 libdevmapper-event1_03-32bit-debuginfo-1.02.163-lp152.7.18.1 libdevmapper1_03-32bit-1.02.163-lp152.7.18.1 libdevmapper1_03-32bit-debuginfo-1.02.163-lp152.7.18.1 References: https://bugzilla.suse.com/1179691

1 0

openSUSE-RU-2021:0324-1: moderate: Recommended update for MozillaThunderbird
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0324-1 Rating: moderate References: #1181848 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.7.1 (bsc#1181848) * changed: Building OpenPGP shared library linked to system libraries now supported * changed: MailExtension errors now shown in Developer Tools console by default * changed: MailExtensions: Dynamic registration of calendar providers now supported * fixed: OpenPGP improvements * fixed: Message preview was sometimes blank after upgrading from Thunderbird 68 * fixed: Email addresses whitelisted for remote content not displayed in preferences * fixed: Importing data from Seamonkey did not work * fixed: Renaming a mail list did not update the side bar * fixed: MailExtensions: messenger.* namespace was undefined This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-324=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.7.1-lp152.2.32.1 MozillaThunderbird-debuginfo-78.7.1-lp152.2.32.1 MozillaThunderbird-debugsource-78.7.1-lp152.2.32.1 MozillaThunderbird-translations-common-78.7.1-lp152.2.32.1 MozillaThunderbird-translations-other-78.7.1-lp152.2.32.1 References: https://bugzilla.suse.com/1181848

1 0

openSUSE-RU-2021:0325-1: moderate: Recommended update for highlight
by maintenance＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Recommended Update: Recommended update for highlight ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0325-1 Rating: moderate References: #1142155 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for highlight fixes the following issues: Update from version 3.42 to 3.59: - HTML output: Added `white-space: pre-wrap` to pre tag CSS. - Updated mark_lines.lua plug-in accept a line range as input parameter and output xterm256 terminal sequences. - Improved Ruby code folding of the outhtml_codefold plug-in. - Updated astyle lib to rev 672. - Added support for reStructured Text. - Added support for Rego (openpolicyagent.org) - Added `outhtml_copy_clipboard.lua` plugin. - CLI: Adapted default xterm256/truecolor theme to terminal background colour. - CLI: Adapted ANSI line numbers to terminal background colour. - CLI: Fixed segfault if the user home directory cannot be determined. - GUI: Initial font set to Monospace. - GUI: Replaced highlight.xpm by highlight.png icon. - Add hicolor-icon-themes as build requirement: Required since move of highlight-gui icon. - Improved `--force` fallback argument handling. - Added C++ attribute syntax support. - Added Lua fuction `StoreValue` to set and retrieve information across Lua states. - Added `extras/eclipse-themes/eclipse_color_themes.py` script to retrieve themes from eclipsecolorthemes.org. - Added support for Web Assembly Text. - Updated mark_lines.lua to output 16m terminal sequences - Fixed issues in bash.lang. - Fixed Bash heredoc highlighting in bash_functions.lua - CLI: `highlight --version -q` only prints the version number. * GUI: Added theme contrast indicator. - Added support for Haml. - Added support for Wren. * Added Lua function `OverrideParam`. - Fixed regression in xterm256 or truecolor output * Fixed `--list-scripts` with read-only language definitions - Improved several language definitions. * Added support for Sequence Alignment Maps (SAM files). * Added empty-file mode to --no-trailing-nl - Fixed issue with --syntax-by-name waiting for stdin - Fixed issue with --syntax reading matching files in the current working directory - Fixed string parsing in lisp.lang * Fixed output of UTF-8 text in xterm256 or truecolor output * Fixed regex in js.lang. * Fixed calculation of testcase markers with UTF-8 input. - Allowed number literals with underscores in Java, Scala, D, Julia, C#, Perl and Ada definitions. * Added Nord theme. - Improved handling of empty files in xterm256 and truecolor output - Added EncodingHint attributes to filetypes.conf and language definitions - CLI: Allowed file paths as --theme and --syntax argument * GUI: Removed deprecated QTime API call. - Fixed default colour output in BBCode - Fixed corner case in sh.lang. * Fixed syntax tests with UTF-8 input - Added support for Bash in outhtml_codefold.lua plug-in. * Added ballerina.lang. * Added block strings to java.lang. - Added author hints in themes and language definitions. * Added C++20 reserved words in c.lang. - Added editorconfig file and validated all files accordingly. * CLI: Fixed --list-scripts with -d or HIGHLIGHT_DATADIR env variable * GUI: Removed AsciiDoc instruction lines from the README popup window. - Use lang_package macro for highlight-gui-lang declaration. - Fixed out-of-range exception with repeated AddKeyword calls. - Added KeywordFormatHints, Priority and Constraints elements to syntax definitions. - Added Lua function AddPersistentState - Renamed md.lang to markdown.lang. - Added Fish syntax definition. - Makefile: added _FILE_OFFSET_BITS=64 flag. - CLI: added optional fallback syntax to --force - CLI: added option --max-size * GUI: added multibyte path trace window. * GUI: fixed superfluous creation of the same stylesheet file. - Fix build instability (bsc#1142155). - Added negation `~` to test state indicators - Added support for Hugo. * Added 5 duotone themes. - CLI: fixed segfault with `--force` * GUI: limited font selection to monospace fonts * SVG output: Added `white-space: pre` in styles. - HTML output: Replaced `'` by `'` - HTML output: Fixed index file format (missing close tags). - CLI: Moved syntax recognition functions to DataDir class. * CLI: Added regular expressions and default false values to --verbose output. - CLI: Fixed `--list-cat` without `--list-scripts` * CLI: Added optional argument to `--base16` * CLI: Added default base16 themes - CLI: Added `--isolate` option - Added lineno, column parameters to OnStateChange hook. - Added support for Crystal. - Added support for Slim. - Fixed several typos in documentaion and manpages. * CLI: Added `--syntax-by-name` option. * CLI: Removed deprecated `--list-langs` and`--list-themes` options. - GUI: Added terminal sequence output options - Added support for Meson, Solidity, TOML and Terraform. - Improved Perl and Yaml highlighting. - Added Categories field to all config files. - CLI: added category info in --list-scripts output. * CLI: added --list-cat option - CLI: added optional topic parameter to --help. * GUI: added theme category selection. - GUI: display categories of selected syntax or theme. - Fixed --list-scripts abortion with Fedora default compile options * Fixed a problem with syntax test indicators reporting wrong states after comments. - Improved Verilog syntax. - Improved quoted string highlighting for Perl and Ruby. - Detection of pkg-config's Lua version in src/makefile. - Fixed xterm256 and truecolor whitespace output #2 - Fixed LaTeX, TeX, SVG and ODT whitespace output (regression of version 3.45). * Added darkplus theme. * Converted ChangeLog to AsciiDoc. - Allowed state test indicators to match both whitespace (ws) and the enclosing state (others). - CLI: Default output changed to xterm256 or truecolor if run in a terminal with color support and only a single file is outputted. - GUI: Added checkbox in the clipboard tab to output selected lines only. - Fixed xterm256 and truecolor whitespace output - Converted manuals to AsciiDoc. - Added DocumentHeader and DocumentFooter plug-in hooks. - Added RemoveKeyword Lua function for syntax definitions. - Added syntax test indicators (see README_TESTCASES). - Added support for ISO and R10 variants of Modula2. - Fixed R identifiers. - Fixed ALAN IF identifiers. - Fixed issue with Bash string interpolation. - Added Swift keywords and types. - Added Gradle extension mapping. - Fixed Ruby string interpolation - Added support for ALAN IF. - Added 107 Base16 themes. * Updated Rust and Java reserved words lists. * Revised documentation. - Moved extras/css-themes into extras/themes-resources. * Added extras/themes-resources/base16. * GUI: added Base16 theme selection checkbox. * CLI: added --base16 option to enable the new themes. - CLI: accept - as argument to read from stdin - Make the build of gui subpackage conditional (built by default). - Updated astyle code to release 3.1 (Rev. 655). - Added webkit reformatting style. - Improved several language definitions. - Fixed Matlab string recognition - Fixed Autohotkey escape sequence recognition. - Added excel.lang - Improved Qt pro file - CLI: Added --reformat-option * CLI: Added --line-range - GUI: Added Bulgarian translation. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-325=1 Package List: - openSUSE Leap 15.2 (noarch): highlight-gui-lang-3.59-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): highlight-3.59-lp152.4.3.1 highlight-debuginfo-3.59-lp152.4.3.1 highlight-debugsource-3.59-lp152.4.3.1 highlight-gui-3.59-lp152.4.3.1 highlight-gui-debuginfo-3.59-lp152.4.3.1 References: https://bugzilla.suse.com/1142155

1 0

openSUSE-SU-2021:0322-1: important: Security update for python-djangorestframework
by opensuse-security＠opensuse.org 22 Feb '21

22 Feb '21

openSUSE Security Update: Security update for python-djangorestframework ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0322-1 Rating: important References: #1177205 Cross-References: CVE-2020-25626 CVSS scores: CVE-2020-25626 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-25626 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-djangorestframework fixes the following issues: Update to 3.11.2 * Security: Drop urlize_quoted_links template tag in favour of Django's built-in urlize. Removes a XSS vulnerability for some kinds of content in the browsable API. (boo#1177205, CVE-2020-25626) * update Django for APIs book to 3.0 edition * decode base64 credentials as utf8; adjust tests * Remove compat urls for Django < 2.0 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-322=1 Package List: - openSUSE Leap 15.2 (noarch): python3-djangorestframework-3.11.2-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-25626.html https://bugzilla.suse.com/1177205

1 0

openSUSE-RU-2021:0321-1: moderate: Recommended update for docker, golang-github-docker-libnetwork
by maintenance＠opensuse.org 21 Feb '21

21 Feb '21

openSUSE Recommended Update: Recommended update for docker, golang-github-docker-libnetwork ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0321-1 Rating: moderate References: #1178801 #1180401 #1182168 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for docker, golang-github-docker-libnetwork fixes the following issues: - A libnetwork firewalld integration enhancement was broken, disable it (bsc#1178801,bsc#1180401,bsc#1182168) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-321=1 Package List: - openSUSE Leap 15.2 (x86_64): docker-19.03.15_ce-lp152.2.9.1 docker-debuginfo-19.03.15_ce-lp152.2.9.1 docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-lp152.2.6.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2908_55e924b8a842-lp152.2.6.1 docker-test-19.03.15_ce-lp152.2.9.1 docker-test-debuginfo-19.03.15_ce-lp152.2.9.1 golang-github-docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): docker-bash-completion-19.03.15_ce-lp152.2.9.1 docker-fish-completion-19.03.15_ce-lp152.2.9.1 docker-zsh-completion-19.03.15_ce-lp152.2.9.1 References: https://bugzilla.suse.com/1178801 https://bugzilla.suse.com/1180401 https://bugzilla.suse.com/1182168

1 0

openSUSE-RU-2021:0320-1: Recommended update for rpmlint-mini
by maintenance＠opensuse.org 21 Feb '21

21 Feb '21

openSUSE Recommended Update: Recommended update for rpmlint-mini ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0320-1 Rating: low References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides an update to rpmlint-mini, including the last permission release. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-320=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): rpmlint-mini-1.10-lp152.7.8.1 rpmlint-mini-debuginfo-1.10-lp152.7.8.1 rpmlint-mini-debugsource-1.10-lp152.7.8.1 References:

1 0

openSUSE-RU-2021:0319-1: moderate: Recommended update for python-pycryptodomex
by maintenance＠opensuse.org 21 Feb '21

21 Feb '21

openSUSE Recommended Update: Recommended update for python-pycryptodomex ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0319-1 Rating: moderate References: #1181611 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pycryptodomex fixes the following issues: - Fixed a compatibility problem with salt 3002 (bsc#1181611) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-319=1 Package List: - openSUSE Leap 15.2 (x86_64): python-pycryptodomex-debuginfo-3.9.9-lp152.2.3.1 python-pycryptodomex-debugsource-3.9.9-lp152.2.3.1 python2-pycryptodomex-3.9.9-lp152.2.3.1 python2-pycryptodomex-debuginfo-3.9.9-lp152.2.3.1 python3-pycryptodomex-3.9.9-lp152.2.3.1 python3-pycryptodomex-debuginfo-3.9.9-lp152.2.3.1 References: https://bugzilla.suse.com/1181611

1 0

openSUSE-OU-2021:0318-1: Optional update for ocr, openmpi4
by maintenance＠opensuse.org 21 Feb '21

21 Feb '21

openSUSE Optional Update: Optional update for ocr, openmpi4 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2021:0318-1 Rating: low References: #1155120 #1174439 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two optional fixes can now be installed. Description: This update for ocr, openmpi4 fixes the following issues: This update is a codestream only needed for providing packages that are inherited by SLE15-SP3. openmpi4: Update to version 4.0.5 - Fixes compilation with UCX 1.8 - Fix 64bit portability issues - Link against libnuma (bsc#1155120) - Make reproducible builds. ocr: - Add build support for gcc10 to HPC build (bsc#1174439). - Add openmpi4 flavors (jsc#SLE-16462). - Fix `mpi_ver` -> `mpi_vers?`. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-318=1 Package List: - openSUSE Leap 15.2 (noarch): ocr-gnu-hpc-1.0.1-lp152.5.3.1 ocr-gnu-hpc-devel-1.0.1-lp152.5.3.1 ocr-gnu-hpc-doc-1.0.1-lp152.5.3.1 ocr-gnu-hpc-examples-1.0.1-lp152.5.3.1 ocr-gnu-mpich-hpc-1.0.1-lp152.5.3.1 ocr-gnu-mpich-hpc-devel-1.0.1-lp152.5.3.1 ocr-gnu-mpich-hpc-doc-1.0.1-lp152.5.3.1 ocr-gnu-mpich-hpc-examples-1.0.1-lp152.5.3.1 ocr-gnu-mvapich2-hpc-1.0.1-lp152.5.3.1 ocr-gnu-mvapich2-hpc-devel-1.0.1-lp152.5.3.1 ocr-gnu-mvapich2-hpc-doc-1.0.1-lp152.5.3.1 ocr-gnu-mvapich2-hpc-examples-1.0.1-lp152.5.3.1 ocr-gnu-openmpi2-hpc-1.0.1-lp152.5.3.1 ocr-gnu-openmpi2-hpc-devel-1.0.1-lp152.5.3.1 ocr-gnu-openmpi2-hpc-doc-1.0.1-lp152.5.3.1 ocr-gnu-openmpi2-hpc-examples-1.0.1-lp152.5.3.1 ocr-gnu-openmpi3-hpc-1.0.1-lp152.5.3.1 ocr-gnu-openmpi3-hpc-devel-1.0.1-lp152.5.3.1 ocr-gnu-openmpi3-hpc-doc-1.0.1-lp152.5.3.1 ocr-gnu-openmpi3-hpc-examples-1.0.1-lp152.5.3.1 ocr-gnu-openmpi4-hpc-1.0.1-lp152.5.3.1 ocr-gnu-openmpi4-hpc-devel-1.0.1-lp152.5.3.1 ocr-gnu-openmpi4-hpc-doc-1.0.1-lp152.5.3.1 ocr-gnu-openmpi4-hpc-examples-1.0.1-lp152.5.3.1 openmpi4-gnu-hpc-devel-4.0.5-lp152.5.1 openmpi4-gnu-hpc-docs-4.0.5-lp152.5.1 openmpi4-gnu-hpc-macros-devel-4.0.5-lp152.5.1 openmpi4-testsuite-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-testsuite-4.0.5-lp152.5.1 - openSUSE Leap 15.2 (x86_64): libopenmpi4-gnu-hpc-4.0.5-lp152.5.1 libopenmpi_4_0_5-gnu-hpc-4.0.5-lp152.5.1 libopenmpi_4_0_5-gnu-hpc-debuginfo-4.0.5-lp152.5.1 ocr_1_0_1-gnu-hpc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-hpc-debuginfo-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-hpc-debugsource-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-hpc-devel-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-hpc-doc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-hpc-examples-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mpich-hpc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mpich-hpc-debuginfo-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mpich-hpc-debugsource-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mpich-hpc-devel-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mpich-hpc-doc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mpich-hpc-examples-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mvapich2-hpc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mvapich2-hpc-debuginfo-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mvapich2-hpc-debugsource-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mvapich2-hpc-devel-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mvapich2-hpc-doc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-mvapich2-hpc-examples-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi2-hpc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi2-hpc-debuginfo-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi2-hpc-debugsource-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi2-hpc-devel-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi2-hpc-doc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi2-hpc-examples-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi3-hpc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi3-hpc-debuginfo-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi3-hpc-debugsource-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi3-hpc-devel-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi3-hpc-doc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi3-hpc-examples-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi4-hpc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi4-hpc-debuginfo-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi4-hpc-debugsource-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi4-hpc-devel-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi4-hpc-doc-1.0.1-lp152.5.3.1 ocr_1_0_1-gnu-openmpi4-hpc-examples-1.0.1-lp152.5.3.1 openmpi4-4.0.5-lp152.5.1 openmpi4-config-4.0.5-lp152.5.1 openmpi4-debuginfo-4.0.5-lp152.5.1 openmpi4-debugsource-4.0.5-lp152.5.1 openmpi4-devel-4.0.5-lp152.5.1 openmpi4-devel-debuginfo-4.0.5-lp152.5.1 openmpi4-docs-4.0.5-lp152.5.1 openmpi4-gnu-hpc-4.0.5-lp152.5.1 openmpi4-gnu-hpc-devel-static-4.0.5-lp152.5.1 openmpi4-libs-4.0.5-lp152.5.1 openmpi4-libs-debuginfo-4.0.5-lp152.5.1 openmpi4-macros-devel-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-debuginfo-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-debugsource-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-devel-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-devel-debuginfo-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-devel-static-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-docs-4.0.5-lp152.5.1 openmpi_4_0_5-gnu-hpc-macros-devel-4.0.5-lp152.5.1 References: https://bugzilla.suse.com/1155120 https://bugzilla.suse.com/1174439

1 0

openSUSE-RU-2021:0317-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 20 Feb '21

20 Feb '21

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0317-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gnuhealth fixes the following issues: - contact.patch added (Backport of https://savannah.gnu.org/bugs/?59883 ) - Documentation added to package description Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-317=1 Package List: - openSUSE Leap 15.2 (noarch): gnuhealth-3.6.5-lp152.4.6.1 gnuhealth-orthanc-3.6.5-lp152.4.6.1 References:

1 0

openSUSE-RU-2021:0314-1: moderate: Recommended update for nextcloud-desktop
by maintenance＠opensuse.org 20 Feb '21

20 Feb '21

openSUSE Recommended Update: Recommended update for nextcloud-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0314-1 Rating: moderate References: #1178209 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nextcloud-desktop fixes the following issues: - Update to 3.1.2 - desktop#2846 [stable-3.1] Handle SVG branded clients - desktop#2849 [stable-3.1] Default to colored systray on linux - desktop#2866 [stable-3.1] Add push notifications for file changes - desktop#2871 [stable-3.1] Start file conflict resolve dialog asynchronous - desktop#2878 [stable-3.1] Use push notifications for Tray activities/notifications fetch trigger. - desktop#2709 [stable-3.1] Have the new account wizard open again - desktop#2715 [stable-3.1] UserModel: check indices are inside the user list - desktop#2716 [stable-3.1] Use the icon color property to color the icons in the tray window header. - desktop#2717 [stable-3.1] Ensure a sync happens after a conflict resolution - desktop#2730 [stable-3.1] Make monochrome icons the default on Linux and Mac OS. - desktop#2753 [stable-3.1] Fixed the autostart for AppImages. See #2504. - desktop#2221 Make QML code more declarative by using properties - desktop#2497 MacOS: Fix memory leak in FolderWatcherPrivate::startWatching - desktop#2500 Windows MSI: Update Docs & add SKIPAUTOUPDATE property - desktop#2512 Handle redirects when downloading updates - desktop#2514 Make it easier for user to provide debug information - desktop#2520 Handle ask for optional password capability - desktop#2521 Use friendly user agent during authentication - desktop#2527 Improve conflict handling gui - desktop#2530 Repair the Windows build - desktop#2531 Bring back the "Pause sync" action in the systray context menu - desktop#2534 Connection wizard improvements - desktop#2540 Add last / to exclude list file path. - desktop#2541 Don't use nullptr for QFlags - desktop#2542 Avoid string translation puzzle - desktop#2543 Update bookmarks location - desktop#2551 Fix share dialog animation for enforced password policy - desktop#2568 Fix crash when clicking on folder with status 403 in the main dialog. - desktop#2572 Avoid depth infinity propfind for e2ee - desktop#2575 Expose branding values to qtquick - desktop#2580 Delay initialization of SettingsDialog - desktop#2581 Ensure we quickly show/hide the systray window on startup - desktop#2582 Also output the event flags in the debug logs - desktop#2586 L10n: Add a space in generalsettings.ui - desktop#2587 Triple dot to ellipsis - desktop#2589 Misc fixes for Windows 7 - desktop#2591 Remove last left over of the "remote" wording - desktop#2603 Get rid of FindQt5Keychain.cmake - desktop#2615 Fetch apps when we get connected only - desktop#2616 Move journaldb files back to sync folders - desktop#2620 Make sure the settings dialog exist before hiding it - desktop#2621 [documentation] upload chunks config - desktop#2630 Master is now 3.0.81 - desktop#2647 Cherry pick updater fixes and improvements - desktop#2648 Issue a warning for Debian pipeline failures but don't fail the CI - desktop#2652 Handle the case when the release version differs from that in VERSION.cmake - desktop#2655 Use dynamic path for account online/offline state icon. - desktop#2658 Enable the QML debugger on debug builds - desktop#2660 FolderWatcher: fixes and improvements - desktop#2662 Fix QML debugging by removing incorrect dependency - desktop#2663 Fix Windows compilation broken after QML debugging fix. - desktop#2665 Sparkle build fixes - desktop#2666 Notification action buttons and context menu - desktop#2667 Master is now 3.0.82. - desktop#2675 Fix AppImage build - desktop#2677 Fix macOS bug where tray window causes spaces to switch - desktop#2682 Add debug log to check which folders are being skipped during syncing. - desktop#2685 Fixed slow sharee search in the share dialog - desktop#2686 Added sharing via email. - desktop#2690 Update documentation on how to generate debug logs. - desktop#2696 Bump master version to 3.1.0 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-314=1 Package List: - openSUSE Leap 15.2 (noarch): caja-extension-nextcloud-3.1.2-lp152.2.3.1 nautilus-extension-nextcloud-3.1.2-lp152.2.3.1 nemo-extension-nextcloud-3.1.2-lp152.2.3.1 nextcloud-desktop-doc-3.1.2-lp152.2.3.1 nextcloud-desktop-lang-3.1.2-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libnextcloudsync-devel-3.1.2-lp152.2.3.1 libnextcloudsync0-3.1.2-lp152.2.3.1 libnextcloudsync0-debuginfo-3.1.2-lp152.2.3.1 nextcloud-desktop-3.1.2-lp152.2.3.1 nextcloud-desktop-debuginfo-3.1.2-lp152.2.3.1 nextcloud-desktop-debugsource-3.1.2-lp152.2.3.1 nextcloud-desktop-dolphin-3.1.2-lp152.2.3.1 nextcloud-desktop-dolphin-debuginfo-3.1.2-lp152.2.3.1 References: https://bugzilla.suse.com/1178209

1 0

openSUSE-SU-2021:0316-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 20 Feb '21

20 Feb '21

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0316-1 Rating: moderate References: #1178741 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues: tor was updated to 0.4.5.6: * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.ht ml * Introduce a new MetricsPort HTTP interface * Support IPv6 in the torrc Address option * Add event-tracing library support for USDT and LTTng-UST * Try to read N of N bytes on a TLS connection tor was updated to 0.4.4.7: * https://blog.torproject.org/node/1990 * Stop requiring a live consensus for v3 clients and services * Re-entry into the network is now denied at the Exit level * Fix undefined behavior on our Keccak library * Strip '\r' characters when reading text files on Unix platforms * Handle partial SOCKS5 messages correctly * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-316=1 Package List: - openSUSE Leap 15.2 (x86_64): tor-0.4.5.6-lp152.2.6.1 tor-debuginfo-0.4.5.6-lp152.2.6.1 tor-debugsource-0.4.5.6-lp152.2.6.1 References: https://bugzilla.suse.com/1178741

1 0

openSUSE-RU-2021:0315-1: moderate: Recommended update for nextcloud-desktop
by maintenance＠opensuse.org 20 Feb '21

20 Feb '21

openSUSE Recommended Update: Recommended update for nextcloud-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0315-1 Rating: moderate References: #1178209 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nextcloud-desktop fixes the following issues: Update to 3.1.2 - desktop#2846 [stable-3.1] Handle SVG branded clients - desktop#2849 [stable-3.1] Default to colored systray on linux - desktop#2866 [stable-3.1] Add push notifications for file changes - desktop#2871 [stable-3.1] Start file conflict resolve dialog asynchronous - desktop#2878 [stable-3.1] Use push notifications for Tray activities/notifications fetch trigger. - desktop#2709 [stable-3.1] Have the new account wizard open again - desktop#2715 [stable-3.1] UserModel: check indices are inside the user list - desktop#2716 [stable-3.1] Use the icon color property to color the icons in the tray window header. - desktop#2717 [stable-3.1] Ensure a sync happens after a conflict resolution - desktop#2730 [stable-3.1] Make monochrome icons the default on Linux and Mac OS. - desktop#2753 [stable-3.1] Fixed the autostart for AppImages. See #2504. - desktop#2221 Make QML code more declarative by using properties - desktop#2497 MacOS: Fix memory leak in FolderWatcherPrivate::startWatching - desktop#2500 Windows MSI: Update Docs & add SKIPAUTOUPDATE property - desktop#2512 Handle redirects when downloading updates - desktop#2514 Make it easier for user to provide debug information - desktop#2520 Handle ask for optional password capability - desktop#2521 Use friendly user agent during authentication - desktop#2527 Improve conflict handling gui - desktop#2530 Repair the Windows build - desktop#2531 Bring back the "Pause sync" action in the systray context menu - desktop#2534 Connection wizard improvements - desktop#2540 Add last / to exclude list file path. - desktop#2541 Don't use nullptr for QFlags - desktop#2542 Avoid string translation puzzle - desktop#2543 Update bookmarks location - desktop#2551 Fix share dialog animation for enforced password policy - desktop#2568 Fix crash when clicking on folder with status 403 in the main dialog. - desktop#2572 Avoid depth infinity propfind for e2ee - desktop#2575 Expose branding values to qtquick - desktop#2580 Delay initialization of SettingsDialog - desktop#2581 Ensure we quickly show/hide the systray window on startup - desktop#2582 Also output the event flags in the debug logs - desktop#2586 L10n: Add a space in generalsettings.ui - desktop#2587 Triple dot to ellipsis - desktop#2589 Misc fixes for Windows 7 - desktop#2591 Remove last left over of the "remote" wording - desktop#2603 Get rid of FindQt5Keychain.cmake - desktop#2615 Fetch apps when we get connected only - desktop#2616 Move journaldb files back to sync folders - desktop#2620 Make sure the settings dialog exist before hiding it - desktop#2621 [documentation] upload chunks config - desktop#2630 Master is now 3.0.81 - desktop#2647 Cherry pick updater fixes and improvements - desktop#2648 Issue a warning for Debian pipeline failures but don't fail the CI - desktop#2652 Handle the case when the release version differs from that in VERSION.cmake - desktop#2655 Use dynamic path for account online/offline state icon. - desktop#2658 Enable the QML debugger on debug builds - desktop#2660 FolderWatcher: fixes and improvements - desktop#2662 Fix QML debugging by removing incorrect dependency - desktop#2663 Fix Windows compilation broken after QML debugging fix. - desktop#2665 Sparkle build fixes - desktop#2666 Notification action buttons and context menu - desktop#2667 Master is now 3.0.82. - desktop#2675 Fix AppImage build - desktop#2677 Fix macOS bug where tray window causes spaces to switch - desktop#2682 Add debug log to check which folders are being skipped during syncing. - desktop#2685 Fixed slow sharee search in the share dialog - desktop#2686 Added sharing via email. - desktop#2690 Update documentation on how to generate debug logs. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-315=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): libnextcloudsync-devel-3.1.2-bp152.2.3.1 libnextcloudsync0-3.1.2-bp152.2.3.1 nextcloud-desktop-3.1.2-bp152.2.3.1 nextcloud-desktop-dolphin-3.1.2-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): caja-extension-nextcloud-3.1.2-bp152.2.3.1 nautilus-extension-nextcloud-3.1.2-bp152.2.3.1 nemo-extension-nextcloud-3.1.2-bp152.2.3.1 nextcloud-desktop-doc-3.1.2-bp152.2.3.1 nextcloud-desktop-lang-3.1.2-bp152.2.3.1 References: https://bugzilla.suse.com/1178209

1 0

openSUSE-RU-2021:0313-1: moderate: Recommended update for trytond
by maintenance＠opensuse.org 19 Feb '21

19 Feb '21

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0313-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond fixes the following issues: Update to version 5.0.33 - Security fix for https://bugs.tryton.org/issue10068 - Bug fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-313=1 Package List: - openSUSE Leap 15.2 (noarch): trytond-5.0.33-lp152.2.22.1 References:

1 0