February 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0236-1: moderate: Recommended update for sparse
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for sparse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0236-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sparse fixes the following issues: sparse was updated to version 0.6.3: * For full list of changes see: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.3.html update to 0.6.2: * changelog of 0.6.2 is available here: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.2.html Update to version 0.6.1+20200606: * pre-process: fix a compiler array subscript type warning * univ-init: set default to -Wno-universal-initializer * univ-init: scalar initializer needs some additional checks * evaluate: mark evaluate_generic_selection() as static * add support for _Generic * testsuite: add testcase for duplicated local definitions * add an option to suppress warning 'no newline at EOF' * univ-init: conditionally accept { 0 } without warnings * bad-label: respect attribute((unused)) * bad-label: mark labels as used when needed * bad-label: check for unused labels * bad-goto: check declaration of label expressions * bad-goto: extract check_label_declaration() * bad-goto: label expression inside a statement expression is UB * bad-goto: jumping inside a statement expression is an error * scope: give a scope for labels & gotos * build: fix LLVM version detection Update to version 0.6.1+20200413: * do not use expr->left for conditionals * add support for GCC's __auto_type * And plenty more Use llvm9 for building as llvm10 is not yet supported - Update to version 0.6.1+20200129: * domtree: domtree_build() creates extraneous bb->doms entries * predefine "i386" if needed * correct sparcv9 defines * pre-define __unix__ and friends * add necessary defined for sunos-derived systems * define __PRAGMA_REDEFINE_EXTNAME * allow to easily test if the OS is UNIX-like * detect OS_UNIX as native OS * add predefine_nostd() * show_parse: avoid null pointer dereference in do_show_type() * ptrlist: fix typos * fix testcase with non-constant initializer * and much more - Update to version 0.6.1+20191101: * .gitignore: alphasort the patterns * Add '__' prefix and suffix to all __attribute__ #defines * options: add support for -mcmodel * options: add support for -fpic, -fPIC, -fpie & -fPIE * Sparse v0.6.1 * doc: fix typo in binops' description * "graph" segfaults on top-level asm * llvm: fix sparsec breakage on recent cygwin version - Update to version 0.6.1rc2+20191007: * expand more builtins like __builtin_ffs() * make 'directive in argument list' clearer * asm: warn on invalid empty constraints * fix sign extension in casting enums * remove useless optimization in cast_enum_list() * add test for enum sign extension * do not linearize invalid expression * asm: arrays & functions in non-memory operand degenerate into pointers * asm: fix missing expansion of asm statements * asm: fix liveness memory operand * asm: linearization of output memory operands is different * asm: missing evaluation of asm statements * asm: use parse_asm_constraint() to verify constraints * asm: parse constraints * asm: keep using struct asm_operand during linearization * asm: use a specific struct for asm operands * asm: check earlier that body & constraints are strings * asm: add test evaluation, expansion & linearization of ASM operands * string: use string_expression() in parse_static_assert() * string: add helper string_expression() * dissect: fix processing of ASM statements * and more... - Update to version 20190404: * fix allowing casts of AS pointers to uintptr_t * man: explain role of uintptr_t & unsigned long in casts from AS pointers * also accept casts of AS pointers to uintptr_t * evaluate: externally_visible functions don't need a declaration * expand: add explanation to 'conservative' * expand: 'conservative' must not bypass valid simplifications * Sparse v0.6.1-rc1 * remove confusing intermediate 'where' in evaluate_assignment() * display extra info for type errors in compare & conditional * cgcc: use strict & warnings * cgcc: add support for x86-x32 * cgcc: favor using 'gcc -dumpmachine' to determine specifics * cgcc: simpler handling of hard-float ARM * cgcc: add pseudo-archs for ppc64be/ppc64le * and a lot more... This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-236=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): sparse-0.6.3-bp152.4.3.1 sparse-inspect-0.6.3-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (x86_64): sparse-llvm-0.6.3-bp152.4.3.1 References:

1 0

openSUSE-RU-2021:0251-1: moderate: Recommended update for strongswan
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0251-1 Rating: moderate References: #1167880 #1180801 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for strongswan fixes the following issues: - Fix trailing quotation mark missing from example in README. (bsc#1167880) - Fixes an error in 'libgcrypt' causing problems by generating CA keys with 'pki create'. (bsc#1180801) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-251=1 Package List: - openSUSE Leap 15.2 (x86_64): strongswan-5.8.2-lp152.2.3.1 strongswan-debuginfo-5.8.2-lp152.2.3.1 strongswan-debugsource-5.8.2-lp152.2.3.1 strongswan-hmac-5.8.2-lp152.2.3.1 strongswan-ipsec-5.8.2-lp152.2.3.1 strongswan-ipsec-debuginfo-5.8.2-lp152.2.3.1 strongswan-libs0-5.8.2-lp152.2.3.1 strongswan-libs0-debuginfo-5.8.2-lp152.2.3.1 strongswan-mysql-5.8.2-lp152.2.3.1 strongswan-mysql-debuginfo-5.8.2-lp152.2.3.1 strongswan-nm-5.8.2-lp152.2.3.1 strongswan-nm-debuginfo-5.8.2-lp152.2.3.1 strongswan-sqlite-5.8.2-lp152.2.3.1 strongswan-sqlite-debuginfo-5.8.2-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): strongswan-doc-5.8.2-lp152.2.3.1 References: https://bugzilla.suse.com/1167880 https://bugzilla.suse.com/1180801

1 0

openSUSE-RU-2021:0235-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0235-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: lxc was updated to 4.0.5: * Support allocating PTS devices from within the container * Harden more path/mount handling logics * Rework LSM logic to limit initializer use * for full list of changes see: https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269 Update to LXC 4.0.2 * https://discuss.linuxcontainers.org/t/lxc-4-0-2-lts-has-been-released/7449 Update to LXC 4.0.1: * Tweak systemd ordering (start after remote-fs.target) * Fix various issues around attach and cgroups * Fix shutdown timeout not working on pidfd systems * Fix cgroup issue on 4.9 kernel * Fix write issues in /dev/stdout This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-235=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): liblxc-devel-4.0.5-bp151.5.18.1 liblxc1-4.0.5-bp151.5.18.1 lxc-4.0.5-bp151.5.18.1 pam_cgfs-4.0.5-bp151.5.18.1 - openSUSE Backports SLE-15-SP1 (noarch): lxc-bash-completion-4.0.5-bp151.5.18.1 References:

1 0

openSUSE-RU-2021:0233-1: moderate: Recommended update for dwarves
by maintenance＠opensuse.org 04 Feb '21

04 Feb '21

openSUSE Recommended Update: Recommended update for dwarves ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0233-1 Rating: moderate References: #1176095 #1177921 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dwarves fixes the following issues: + DW_AT_alignment is defined in 1.19 so dwarves now is compatible with older libdw. Update to release 1.19 * Support for split BTF. * Support cross-compiled ELF binaries with different endianness. * Support for showing typedefs for anonymous types, like structs, unions and enums. Move to 1.18.g19 (863e6f0f) * btf_encoder: Ignore zero-sized ELF symbols update to 1.18_15g040fd7f (boo#1177921): * btf_encoder: Support cross-compiled ELF binaries with different endianness * strings: use BTF's string APIs for strings management * strings: Rename strings.h to avoid clashing with /usr/include/strings.h * dwarf_loader: increase the size of lookup hash map * btf_encoder: revamp how per-CPU variables are encoded * btf_encoder: Discard CUs after BTF encoding * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type * btf_encoder: Use libbpf APIs to encode BTF type info * btf_loader: Use libbpf to load BTF * dwarves: Expose and maintain active debug info loader operations * btf_encoder: detect BTF encoding errors and exit * libbpf: Update to latest libbpf version * dwarf_loader: Conditionally define DW_AT_alignment * pahole: Implement --packed * man-pages: Fix 'coimbine' typo Update to release 1.18 * pahole now should be segfault free when handling gdb test suit DWARF files, including ADA, FORTRAN, rust and dwp compressed files (the latter is refused). * Bail out on partial units for now, avoiding segfaults. - Backport fixes for segfault when processing dwz-ed kernel [boo#1176095,https://github.com/acmel/dwarves/issues/10] Update to release 1.17 * Support raw BTF as available in /sys/kernel/btf/vmlinux. * Make --find_pointers_to consider unions. * Make --contains and --find_pointers_to honour --unions. * Add support for finding pointers to void. * Make --contains and --find_pointers_to to work with base types. Update to release 1.16 * btf_loader: Add support for BTF_KIND_FUNC Update to new upstream release 1.15 * Avoid null dereference with NULL configs * Fixup printing "const" early with "const void" * Fix recursively printing named structs in --expand_types version 1.13 * Use of the recently introduced BTF deduplication algorithm * Introduce a 'btfdiff' utility * Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs and unions in the same fashion as with DWARF info * Better union support * Infer __attribute__((__packed__)) when structs have no alignment holes * Support DWARF5's DW_AT_alignment * Add a '--compile' option to 'pfunct' Update to new upstream release 1.12 * Added a BTF (BPF Type Format) encoder * Initial support for DW_TAG_partial_unit * Print cacheline boundaries in multiple union members * Show offsets at union members This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-233=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): dwarves-1.19-bp152.4.3.1 libdwarves-devel-1.19-bp152.4.3.1 libdwarves1-1.19-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): libdwarves-devel-64bit-1.19-bp152.4.3.1 libdwarves1-64bit-1.19-bp152.4.3.1 References: https://bugzilla.suse.com/1176095 https://bugzilla.suse.com/1177921

1 0

openSUSE-RU-2021:0232-1: moderate: Recommended update for python-openqa_client
by maintenance＠opensuse.org 03 Feb '21

03 Feb '21

openSUSE Recommended Update: Recommended update for python-openqa_client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0232-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-openqa_client fixes the following issues: python-openqa_client was updated to version 4.1.1: * Fix use of 'latest' param when querying jobs * Drop a rogue word from `do_request` docstring, rewrap * Tweak release script to use 'pypi' repo * Handle YAML responses as well as JSON (#12) * Add a 'parse' argument for `do_request` to skip parsing * Add toml to CI requires (for coverage to read TOML config) * tox: run `coverage xml` explicitly * Improve the ugly sed hack fix for the coverage vs. tox venv issue * Update release.sh to use pep517 * Add pyproject.toml to comply with PEP-517 / PEP-518 * black-ify code and add black to CI config * Move source under src/ , fix tox config to run tests on package * Use f-strings for string formatting * Drop Python 2 support, and some Python 2-specific workarounds * Have MANIFEST.in exclude itself * Add a MANIFEST.in to exclude some stuff we don't want * Fix tests to run on ancient pytest (I hope) * Fix more brokenness in setup.py * Fix release.sh for no spaces in setup.py setup() * Drop duplicated description line in setup.py * Update release.sh to use Python 3 * Drop WaitError exception * find_clones: don't edit list while iterating it * _add_auth_headers: don't modify the original request * setup.py: don't import os, we don't use it * setup.py: Remove runtime dependency on setuptools (@jayvdb) (#9) * setup.py: more cleanups based on sample project * setup.py: we don't use find_packages, don't import it * setup.py: no spaces for arg assignments * setup.py: handle long_description as per pypa sample project * Update release script to publish to PyPI * Fix long description for pypi * **API**: update constants to match upstream 4d89041 * Remove waiting state * Add incomplete result "timeout_exceeded" * Update job state constants for recent upstream changes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-232=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-232=1 Package List: - openSUSE Leap 15.2 (noarch): python3-openqa_client-4.1.1-lp152.4.3.1 - openSUSE Backports SLE-15-SP2 (noarch): python3-openqa_client-4.1.1-bp152.4.3.1 References:

1 0

openSUSE-SU-2021:0231-1: moderate: Security update for segv_handler
by opensuse-security＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Security Update: Security update for segv_handler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0231-1 Rating: moderate References: #1180665 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for segv_handler fixes the following issues: - Replace by empty package with README explaining the removal for security reasons (boo#1180665). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-231=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): segv_handler-0.0.1-bp152.4.3.1 References: https://bugzilla.suse.com/1180665

1 0

openSUSE-RU-2021:0230-1: Recommended update for hello
by maintenance＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Recommended Update: Recommended update for hello ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0230-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides a test update for openSUSE Leap 15.3, using Backports repo. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-230=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): hello-2.10-bp153.2.2.1 - openSUSE Backports SLE-15-SP3 (noarch): hello-lang-2.10-bp153.2.2.1 References:

1 0

openSUSE-SU-2021:0229-1: moderate: Security update for segv_handler
by opensuse-security＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Security Update: Security update for segv_handler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0229-1 Rating: moderate References: #1180665 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for segv_handler fixes the following issues: - Replace by empty package with README explaining the removal for security reasons (boo#1180665). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-229=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): segv_handler-0.0.1-bp151.4.3.1 References: https://bugzilla.suse.com/1180665

1 0

openSUSE-SU-2021:0227-1: moderate: Security update for messagelib
by opensuse-security＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Security Update: Security update for messagelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0227-1 Rating: moderate References: #1131885 Cross-References: CVE-2019-10732 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for messagelib fixes the following issues: - CVE-2019-10732: Prevented accidental disclosure of encrypted content when replying (boo#1131885). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-227=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): messagelib-18.12.3-bp151.3.3.1 messagelib-devel-18.12.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): messagelib-lang-18.12.3-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-10732.html https://bugzilla.suse.com/1131885

1 0

openSUSE-RU-2021:0226-1: moderate: Recommended update for sparse
by maintenance＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Recommended Update: Recommended update for sparse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0226-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sparse fixes the following issues: sparse was updated to version 0.6.3: * For full list of changes see: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.3.html update to 0.6.2: * changelog of 0.6.2 is available here: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.2.html Update to version 0.6.1+20200606: * pre-process: fix a compiler array subscript type warning * univ-init: set default to -Wno-universal-initializer * univ-init: scalar initializer needs some additional checks * evaluate: mark evaluate_generic_selection() as static * add support for _Generic * testsuite: add testcase for duplicated local definitions * add an option to suppress warning 'no newline at EOF' * univ-init: conditionally accept { 0 } without warnings * bad-label: respect attribute((unused)) * bad-label: mark labels as used when needed * bad-label: check for unused labels * bad-goto: check declaration of label expressions * bad-goto: extract check_label_declaration() * bad-goto: label expression inside a statement expression is UB * bad-goto: jumping inside a statement expression is an error * scope: give a scope for labels & gotos * build: fix LLVM version detection Update to version 0.6.1+20200413: * do not use expr->left for conditionals * add support for GCC's __auto_type * And plenty more Use llvm9 for building as llvm10 is not yet supported - Update to version 0.6.1+20200129: * domtree: domtree_build() creates extraneous bb->doms entries * predefine "i386" if needed * correct sparcv9 defines * pre-define __unix__ and friends * add necessary defined for sunos-derived systems * define __PRAGMA_REDEFINE_EXTNAME * allow to easily test if the OS is UNIX-like * detect OS_UNIX as native OS * add predefine_nostd() * show_parse: avoid null pointer dereference in do_show_type() * ptrlist: fix typos * fix testcase with non-constant initializer * and much more - Update to version 0.6.1+20191101: * .gitignore: alphasort the patterns * Add '__' prefix and suffix to all __attribute__ #defines * options: add support for -mcmodel * options: add support for -fpic, -fPIC, -fpie & -fPIE * Sparse v0.6.1 * doc: fix typo in binops' description * "graph" segfaults on top-level asm * llvm: fix sparsec breakage on recent cygwin version - Update to version 0.6.1rc2+20191007: * expand more builtins like __builtin_ffs() * make 'directive in argument list' clearer * asm: warn on invalid empty constraints * fix sign extension in casting enums * remove useless optimization in cast_enum_list() * add test for enum sign extension * do not linearize invalid expression * asm: arrays & functions in non-memory operand degenerate into pointers * asm: fix missing expansion of asm statements * asm: fix liveness memory operand * asm: linearization of output memory operands is different * asm: missing evaluation of asm statements * asm: use parse_asm_constraint() to verify constraints * asm: parse constraints * asm: keep using struct asm_operand during linearization * asm: use a specific struct for asm operands * asm: check earlier that body & constraints are strings * asm: add test evaluation, expansion & linearization of ASM operands * string: use string_expression() in parse_static_assert() * string: add helper string_expression() * dissect: fix processing of ASM statements * and more... - Update to version 20190404: * fix allowing casts of AS pointers to uintptr_t * man: explain role of uintptr_t & unsigned long in casts from AS pointers * also accept casts of AS pointers to uintptr_t * evaluate: externally_visible functions don't need a declaration * expand: add explanation to 'conservative' * expand: 'conservative' must not bypass valid simplifications * Sparse v0.6.1-rc1 * remove confusing intermediate 'where' in evaluate_assignment() * display extra info for type errors in compare & conditional * cgcc: use strict & warnings * cgcc: add support for x86-x32 * cgcc: favor using 'gcc -dumpmachine' to determine specifics * cgcc: simpler handling of hard-float ARM * cgcc: add pseudo-archs for ppc64be/ppc64le * and a lot more... This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-226=1 Package List: - openSUSE Leap 15.2 (x86_64): sparse-0.6.3-lp152.4.3.1 sparse-debuginfo-0.6.3-lp152.4.3.1 sparse-debugsource-0.6.3-lp152.4.3.1 sparse-inspect-0.6.3-lp152.4.3.1 sparse-inspect-debuginfo-0.6.3-lp152.4.3.1 sparse-llvm-0.6.3-lp152.4.3.1 sparse-llvm-debuginfo-0.6.3-lp152.4.3.1 References:

1 0

openSUSE-RU-2021:0228-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0228-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: lxc was updated to 4.0.5: * Support allocating PTS devices from within the container * Harden more path/mount handling logics * Rework LSM logic to limit initializer use * for full list of changes see https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269 Update to LXC 4.0.2: * https://discuss.linuxcontainers.org/t/lxc-4-0-2-lts-has-been-released/7449 Update to LXC 4.0.1: * Tweak systemd ordering (start after remote-fs.target) * Fix various issues around attach and cgroups * Fix shutdown timeout not working on pidfd systems * Fix cgroup issue on 4.9 kernel * Fix write issues in /dev/stdout Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-228=1 Package List: - openSUSE Leap 15.2 (noarch): lxc-bash-completion-4.0.5-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): liblxc-devel-4.0.5-lp152.3.3.1 liblxc1-4.0.5-lp152.3.3.1 liblxc1-debuginfo-4.0.5-lp152.3.3.1 lxc-4.0.5-lp152.3.3.1 lxc-debuginfo-4.0.5-lp152.3.3.1 lxc-debugsource-4.0.5-lp152.3.3.1 pam_cgfs-4.0.5-lp152.3.3.1 pam_cgfs-debuginfo-4.0.5-lp152.3.3.1 References:

1 0

openSUSE-RU-2021:0225-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0225-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: lxc was updated to 4.0.5: * Support allocating PTS devices from within the container * Harden more path/mount handling logics * Rework LSM logic to limit initializer use * for full list of changes see: https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269 Update to LXC 4.0.2 * https://discuss.linuxcontainers.org/t/lxc-4-0-2-lts-has-been-released/7449 Update to LXC 4.0.1: * Tweak systemd ordering (start after remote-fs.target) * Fix various issues around attach and cgroups * Fix shutdown timeout not working on pidfd systems * Fix cgroup issue on 4.9 kernel * Fix write issues in /dev/stdout Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-225=1 Package List: - openSUSE Leap 15.1 (x86_64): liblxc-devel-4.0.5-lp151.4.22.2 liblxc1-4.0.5-lp151.4.22.2 liblxc1-debuginfo-4.0.5-lp151.4.22.2 lxc-4.0.5-lp151.4.22.2 lxc-debuginfo-4.0.5-lp151.4.22.2 lxc-debugsource-4.0.5-lp151.4.22.2 pam_cgfs-4.0.5-lp151.4.22.2 pam_cgfs-debuginfo-4.0.5-lp151.4.22.2 - openSUSE Leap 15.1 (noarch): lxc-bash-completion-4.0.5-lp151.4.22.2 References:

1 0

openSUSE-RU-2021:0224-1: moderate: Recommended update for sparse
by maintenance＠opensuse.org 02 Feb '21

02 Feb '21

openSUSE Recommended Update: Recommended update for sparse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0224-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sparse fixes the following issues: sparse was updated to version 0.6.3: * For full list of changes see: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.3.html update to 0.6.2: * changelog of 0.6.2 is available here: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.2.html Update to version 0.6.1+20200606: * pre-process: fix a compiler array subscript type warning * univ-init: set default to -Wno-universal-initializer * univ-init: scalar initializer needs some additional checks * evaluate: mark evaluate_generic_selection() as static * add support for _Generic * testsuite: add testcase for duplicated local definitions * add an option to suppress warning 'no newline at EOF' * univ-init: conditionally accept { 0 } without warnings * bad-label: respect attribute((unused)) * bad-label: mark labels as used when needed * bad-label: check for unused labels * bad-goto: check declaration of label expressions * bad-goto: extract check_label_declaration() * bad-goto: label expression inside a statement expression is UB * bad-goto: jumping inside a statement expression is an error * scope: give a scope for labels & gotos * build: fix LLVM version detection Update to version 0.6.1+20200413: * do not use expr->left for conditionals * add support for GCC's __auto_type * And plenty more Use llvm9 for building as llvm10 is not yet supported - Update to version 0.6.1+20200129: * domtree: domtree_build() creates extraneous bb->doms entries * predefine "i386" if needed * correct sparcv9 defines * pre-define __unix__ and friends * add necessary defined for sunos-derived systems * define __PRAGMA_REDEFINE_EXTNAME * allow to easily test if the OS is UNIX-like * detect OS_UNIX as native OS * add predefine_nostd() * show_parse: avoid null pointer dereference in do_show_type() * ptrlist: fix typos * fix testcase with non-constant initializer * and much more - Update to version 0.6.1+20191101: * .gitignore: alphasort the patterns * Add '__' prefix and suffix to all __attribute__ #defines * options: add support for -mcmodel * options: add support for -fpic, -fPIC, -fpie & -fPIE * Sparse v0.6.1 * doc: fix typo in binops' description * "graph" segfaults on top-level asm * llvm: fix sparsec breakage on recent cygwin version - Update to version 0.6.1rc2+20191007: * expand more builtins like __builtin_ffs() * make 'directive in argument list' clearer * asm: warn on invalid empty constraints * fix sign extension in casting enums * remove useless optimization in cast_enum_list() * add test for enum sign extension * do not linearize invalid expression * asm: arrays & functions in non-memory operand degenerate into pointers * asm: fix missing expansion of asm statements * asm: fix liveness memory operand * asm: linearization of output memory operands is different * asm: missing evaluation of asm statements * asm: use parse_asm_constraint() to verify constraints * asm: parse constraints * asm: keep using struct asm_operand during linearization * asm: use a specific struct for asm operands * asm: check earlier that body & constraints are strings * asm: add test evaluation, expansion & linearization of ASM operands * string: use string_expression() in parse_static_assert() * string: add helper string_expression() * dissect: fix processing of ASM statements * and more... - Update to version 20190404: * fix allowing casts of AS pointers to uintptr_t * man: explain role of uintptr_t & unsigned long in casts from AS pointers * also accept casts of AS pointers to uintptr_t * evaluate: externally_visible functions don't need a declaration * expand: add explanation to 'conservative' * expand: 'conservative' must not bypass valid simplifications * Sparse v0.6.1-rc1 * remove confusing intermediate 'where' in evaluate_assignment() * display extra info for type errors in compare & conditional * cgcc: use strict & warnings * cgcc: add support for x86-x32 * cgcc: favor using 'gcc -dumpmachine' to determine specifics * cgcc: simpler handling of hard-float ARM * cgcc: add pseudo-archs for ppc64be/ppc64le * and a lot more... This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-224=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sparse-0.6.3-bp151.4.3.1 sparse-inspect-0.6.3-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (x86_64): sparse-llvm-0.6.3-bp151.4.3.1 References:

1 0

openSUSE-SU-2021:0223-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 01 Feb '21

01 Feb '21

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0223-1 Rating: important References: #1181414 Cross-References: CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.7.0 ESR (MFSA 2021-04, bsc#1181414) * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC * CVE-2021-23964: Fixed Memory safety bugs This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-223=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.7.0-lp152.2.43.1 MozillaFirefox-branding-upstream-78.7.0-lp152.2.43.1 MozillaFirefox-buildsymbols-78.7.0-lp152.2.43.1 MozillaFirefox-debuginfo-78.7.0-lp152.2.43.1 MozillaFirefox-debugsource-78.7.0-lp152.2.43.1 MozillaFirefox-devel-78.7.0-lp152.2.43.1 MozillaFirefox-translations-common-78.7.0-lp152.2.43.1 MozillaFirefox-translations-other-78.7.0-lp152.2.43.1 References: https://www.suse.com/security/cve/CVE-2020-26976.html https://www.suse.com/security/cve/CVE-2021-23953.html https://www.suse.com/security/cve/CVE-2021-23954.html https://www.suse.com/security/cve/CVE-2021-23960.html https://www.suse.com/security/cve/CVE-2021-23964.html https://bugzilla.suse.com/1181414

1 0

openSUSE-SU-2021:0222-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 01 Feb '21

01 Feb '21

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0222-1 Rating: important References: #1181414 Cross-References: CVE-2020-26976 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2021-23964 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.7.0 ESR (MFSA 2021-04, bsc#1181414) * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC * CVE-2021-23964: Fixed Memory safety bugs This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-222=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.7.0-lp151.2.88.2 MozillaFirefox-branding-upstream-78.7.0-lp151.2.88.2 MozillaFirefox-buildsymbols-78.7.0-lp151.2.88.2 MozillaFirefox-debuginfo-78.7.0-lp151.2.88.2 MozillaFirefox-debugsource-78.7.0-lp151.2.88.2 MozillaFirefox-devel-78.7.0-lp151.2.88.2 MozillaFirefox-translations-common-78.7.0-lp151.2.88.2 MozillaFirefox-translations-other-78.7.0-lp151.2.88.2 References: https://www.suse.com/security/cve/CVE-2020-26976.html https://www.suse.com/security/cve/CVE-2021-23953.html https://www.suse.com/security/cve/CVE-2021-23954.html https://www.suse.com/security/cve/CVE-2021-23960.html https://www.suse.com/security/cve/CVE-2021-23964.html https://bugzilla.suse.com/1181414

1 0

openSUSE-RU-2021:0218-1: moderate: Recommended update for habootstrap-formula
by maintenance＠opensuse.org 01 Feb '21

01 Feb '21

openSUSE Recommended Update: Recommended update for habootstrap-formula ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0218-1 Rating: moderate References: #1177860 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-formula, habootstrap-formula, iscsi-formula, saphanabootstrap-formula, sapnwbootstrap-formula fixes the following issues: drbd-formula: - Version 0.4.0 - Change `salt-formulas-configuration` requirement in SLE12 codestream to a recommendation (bsc#1177860) habootstrap-formula: - Version 0.4.0 - Change `salt-formulas-configuration` requirement in SLE12 codestream to a recommendation (bsc#1177860) - Remove lock states as this is done in `crmsh` now - Fix ssh keys management to run them once the first node is initialized - Remove `--no-overwrite-sshkey` option from the formula - `qdevice` support: it can be created when initializing a cluster when multiple nodes are joining in parallel iscsi-formula: - Change `salt-formulas-configuration` requirement in SLE12 codestream to a recommendation (bsc#1177860) saphanabootstrap-formula: - Version 0.7.0 - Change `salt-formulas-configuration` requirement in SLE12 codestream to a recommendation (bsc#1177860) - Start the `saptune` daemon service - Add requisite of HANA installation to subsequent salt states - Add support to extract and install HANA Client `sar` packages - Set the native fence mechanism usage for `CSP` as optional (jsc#SLE-4047) - Fix the HANA media extraction and installation logics when using `exe` archives - Update the SUSE Manager HANA form metadata, to show HANA form under SAP deployment group - Update SUSe Manager `form.yml` file and prevalidation state with latest changes in formula sapnwbootstrap-formula: - Version 0.6.0 - Change `salt-formulas-configuration` requirement in SLE12 codestream to a recommendation (bsc#1177860) - Add requisites of `netweaver` installation to subsequent salt states - Start the `saptune` systemd service - Fix `additional_dvds` variable usage when salt uses python 2. - The variable is filtered by `tojson` option to avoid `u` prefix in lists - Set the native fence mechanism usage for `CSP` as optional - Add instance name suffix to `socat` resources - Remove meta `resource-stickness` to the `ERS` resources group - Update the db installation template to use correctly the schema names for S/4HANA - Update the default `nw_extract_dir` `SWPM` media extraction location This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-218=1 Package List: - openSUSE Leap 15.2 (noarch): drbd-formula-0.4.0+git.1611073587.55c0dfd-lp152.2.3.1 habootstrap-formula-0.4.0+git.1611213679.df6b3fb-lp152.2.9.1 iscsi-formula-1.1.1-lp152.2.1 saphanabootstrap-formula-0.7.0+git.1611071677.5443549-lp152.2.9.1 sapnwbootstrap-formula-0.6.0+git.1611071663.f186586-lp152.2.9.1 References: https://bugzilla.suse.com/1177860

1 0

openSUSE-RU-2021:0220-1: moderate: Recommended update for btrfsprogs
by maintenance＠opensuse.org 01 Feb '21

01 Feb '21

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0220-1 Rating: moderate References: #1174206 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for btrfsprogs fixes the following issues: - Add patches to fix the logical-resolve lookup process and to accept the 'ignore offsets' kernel feature. (bsc#1174206) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-220=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): btrfsprogs-4.19.1-lp152.6.3.1 btrfsprogs-debuginfo-4.19.1-lp152.6.3.1 btrfsprogs-debugsource-4.19.1-lp152.6.3.1 libbtrfs-devel-4.19.1-lp152.6.3.1 libbtrfs0-4.19.1-lp152.6.3.1 libbtrfs0-debuginfo-4.19.1-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): btrfsprogs-udev-rules-4.19.1-lp152.6.3.1 References: https://bugzilla.suse.com/1174206

1 0

openSUSE-RU-2021:0219-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 01 Feb '21

01 Feb '21

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0219-1 Rating: moderate References: #1180719 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent contains the following fix: + Recognise SLE_HPC as SLES and use the proper RDMA handler and distro specific initialization code. (bsc#1180719) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-219=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.49.2-lp152.3.15.1 python-azure-agent-test-2.2.49.2-lp152.3.15.1 References: https://bugzilla.suse.com/1180719

1 0

openSUSE-RU-2021:0217-1: moderate: Recommended update for yast2-installation-control, yast2-update, and yast2-pkg-bindings
by maintenance＠opensuse.org 01 Feb '21

01 Feb '21

openSUSE Recommended Update: Recommended update for yast2-installation-control, yast2-update, and yast2-pkg-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0217-1 Rating: moderate References: #1173509 #1176275 #1176276 #1178688 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2, yast2-installation-control, yast2-update, and yast2-pkg-bindings fixes the following issues: yast2: - Fixed `Resolvables class` to uniquely identify the libzypp objects to avoid random failures (bsc#1178688) yast2-installation-control: - Allowing the change of vendor without user interaction. (jsc#SLE-14807, jsc#SLE-15184) yast2-pkg-bindings: - Allow filtering resolvables by RPM path, return RPM path for the product packages (bsc#1178688, bsc#1176276) - Set the previous `distro_target` option when restarting the package manager (bsc#1176275) - Expand the URL when libzypp expects it and avoid wrong repository name generated during installation. (bsc#1173509) - Allowing the change of vendor without user interaction. (jsc#SLE-14807, jsc#SLE-15184) yast2-update: - Extended the list of compatible vendors. (jsc#SLE-14807) - Fixed selecting the base product (e.g. SLES) during upgrade. (bsc#1176276, bsc#1176275) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-217=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-4.2.91-lp152.2.19.1 yast2-logs-4.2.91-lp152.2.19.1 yast2-pkg-bindings-4.2.15-lp152.2.10.1 yast2-pkg-bindings-debuginfo-4.2.15-lp152.2.10.1 yast2-pkg-bindings-debugsource-4.2.15-lp152.2.10.1 yast2-update-4.2.20-lp152.2.4.1 yast2-update-FACTORY-4.2.20-lp152.2.4.1 - openSUSE Leap 15.2 (noarch): yast2-installation-control-4.2.10-lp152.2.4.1 yast2-pkg-bindings-devel-doc-4.2.15-lp152.2.10.1 References: https://bugzilla.suse.com/1173509 https://bugzilla.suse.com/1176275 https://bugzilla.suse.com/1176276 https://bugzilla.suse.com/1178688

1 0