February 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0246-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0246-1 Rating: moderate References: #1174363 #1174766 #1180702 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Fix prefix length assignation when the alias netmask uses dot notation. (bsc#1174766) - Suggest to modify the 'VLAN' interface name when the VLAN ID is modified. (bsc#1174363) - Fix network configuration progress bar steps. (bsc#1180702) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-246=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-network-4.2.90-lp152.2.24.1 References: https://bugzilla.suse.com/1174363 https://bugzilla.suse.com/1174766 https://bugzilla.suse.com/1180702

1 0

openSUSE-RU-2021:0244-1: moderate: Recommended update for hplip
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for hplip ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0244-1 Rating: moderate References: #1180724 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hplip fixes the following issue: - Fix crash in `hp-doctor` if `python3-qt4` is not installed (bsc#1180724) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-244=1 Package List: - openSUSE Leap 15.2 (x86_64): hplip-3.19.12-lp152.2.3.1 hplip-debuginfo-3.19.12-lp152.2.3.1 hplip-debugsource-3.19.12-lp152.2.3.1 hplip-devel-3.19.12-lp152.2.3.1 hplip-hpijs-3.19.12-lp152.2.3.1 hplip-hpijs-debuginfo-3.19.12-lp152.2.3.1 hplip-sane-3.19.12-lp152.2.3.1 hplip-sane-debuginfo-3.19.12-lp152.2.3.1 hplip-scan-utils-3.19.12-lp152.2.3.1 hplip-scan-utils-debuginfo-3.19.12-lp152.2.3.1 References: https://bugzilla.suse.com/1180724

1 0

openSUSE-SU-2021:0237-1: important: Security update for rubygem-nokogiri
by opensuse-security＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Security Update: Security update for rubygem-nokogiri ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0237-1 Rating: important References: #1146578 #1156722 #1180507 Cross-References: CVE-2019-5477 CVE-2020-26247 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for rubygem-nokogiri fixes the following issues: rubygem-nokogiri was updated to 1.8.5 (bsc#1156722). Security issues fixed: - CVE-2019-5477: Fixed a command injection vulnerability (bsc#1146578). - CVE-2020-26247: Fixed an XXE vulnerability in Nokogiri::XML::Schema (bsc#1180507). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-237=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ruby2.5-rubygem-nokogiri-1.8.5-lp152.4.3.1 ruby2.5-rubygem-nokogiri-debuginfo-1.8.5-lp152.4.3.1 ruby2.5-rubygem-nokogiri-doc-1.8.5-lp152.4.3.1 ruby2.5-rubygem-nokogiri-testsuite-1.8.5-lp152.4.3.1 rubygem-nokogiri-debugsource-1.8.5-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-5477.html https://www.suse.com/security/cve/CVE-2020-26247.html https://bugzilla.suse.com/1146578 https://bugzilla.suse.com/1156722 https://bugzilla.suse.com/1180507

1 0

openSUSE-SU-2021:0242-1: moderate: Security update for RT kernel
by opensuse-security＠opensuse.org 05 Feb '21

05 Feb '21

1 0

openSUSE-RU-2021:0245-1: moderate: Recommended update for gnome-packagekit
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for gnome-packagekit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0245-1 Rating: moderate References: #1134544 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-packagekit fixes the following issues: - Fixes an issue when 'gnome-packagekit' is unable to trigger a reboot with systemd by updating. (glgo#GNOME/gnome-packagekit!3, bsc#1134544) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-245=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-packagekit-lang-3.32.0-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): gnome-packagekit-3.32.0-lp152.2.6.1 gnome-packagekit-debuginfo-3.32.0-lp152.2.6.1 gnome-packagekit-debugsource-3.32.0-lp152.2.6.1 gnome-packagekit-extras-3.32.0-lp152.2.6.1 gnome-packagekit-extras-debuginfo-3.32.0-lp152.2.6.1 References: https://bugzilla.suse.com/1134544

1 0

openSUSE-RU-2021:0236-1: moderate: Recommended update for sparse
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for sparse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0236-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sparse fixes the following issues: sparse was updated to version 0.6.3: * For full list of changes see: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.3.html update to 0.6.2: * changelog of 0.6.2 is available here: https://sparse.docs.kernel.org/en/latest/release-notes/v0.6.2.html Update to version 0.6.1+20200606: * pre-process: fix a compiler array subscript type warning * univ-init: set default to -Wno-universal-initializer * univ-init: scalar initializer needs some additional checks * evaluate: mark evaluate_generic_selection() as static * add support for _Generic * testsuite: add testcase for duplicated local definitions * add an option to suppress warning 'no newline at EOF' * univ-init: conditionally accept { 0 } without warnings * bad-label: respect attribute((unused)) * bad-label: mark labels as used when needed * bad-label: check for unused labels * bad-goto: check declaration of label expressions * bad-goto: extract check_label_declaration() * bad-goto: label expression inside a statement expression is UB * bad-goto: jumping inside a statement expression is an error * scope: give a scope for labels & gotos * build: fix LLVM version detection Update to version 0.6.1+20200413: * do not use expr->left for conditionals * add support for GCC's __auto_type * And plenty more Use llvm9 for building as llvm10 is not yet supported - Update to version 0.6.1+20200129: * domtree: domtree_build() creates extraneous bb->doms entries * predefine "i386" if needed * correct sparcv9 defines * pre-define __unix__ and friends * add necessary defined for sunos-derived systems * define __PRAGMA_REDEFINE_EXTNAME * allow to easily test if the OS is UNIX-like * detect OS_UNIX as native OS * add predefine_nostd() * show_parse: avoid null pointer dereference in do_show_type() * ptrlist: fix typos * fix testcase with non-constant initializer * and much more - Update to version 0.6.1+20191101: * .gitignore: alphasort the patterns * Add '__' prefix and suffix to all __attribute__ #defines * options: add support for -mcmodel * options: add support for -fpic, -fPIC, -fpie & -fPIE * Sparse v0.6.1 * doc: fix typo in binops' description * "graph" segfaults on top-level asm * llvm: fix sparsec breakage on recent cygwin version - Update to version 0.6.1rc2+20191007: * expand more builtins like __builtin_ffs() * make 'directive in argument list' clearer * asm: warn on invalid empty constraints * fix sign extension in casting enums * remove useless optimization in cast_enum_list() * add test for enum sign extension * do not linearize invalid expression * asm: arrays & functions in non-memory operand degenerate into pointers * asm: fix missing expansion of asm statements * asm: fix liveness memory operand * asm: linearization of output memory operands is different * asm: missing evaluation of asm statements * asm: use parse_asm_constraint() to verify constraints * asm: parse constraints * asm: keep using struct asm_operand during linearization * asm: use a specific struct for asm operands * asm: check earlier that body & constraints are strings * asm: add test evaluation, expansion & linearization of ASM operands * string: use string_expression() in parse_static_assert() * string: add helper string_expression() * dissect: fix processing of ASM statements * and more... - Update to version 20190404: * fix allowing casts of AS pointers to uintptr_t * man: explain role of uintptr_t & unsigned long in casts from AS pointers * also accept casts of AS pointers to uintptr_t * evaluate: externally_visible functions don't need a declaration * expand: add explanation to 'conservative' * expand: 'conservative' must not bypass valid simplifications * Sparse v0.6.1-rc1 * remove confusing intermediate 'where' in evaluate_assignment() * display extra info for type errors in compare & conditional * cgcc: use strict & warnings * cgcc: add support for x86-x32 * cgcc: favor using 'gcc -dumpmachine' to determine specifics * cgcc: simpler handling of hard-float ARM * cgcc: add pseudo-archs for ppc64be/ppc64le * and a lot more... This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-236=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): sparse-0.6.3-bp152.4.3.1 sparse-inspect-0.6.3-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (x86_64): sparse-llvm-0.6.3-bp152.4.3.1 References:

1 0

openSUSE-RU-2021:0251-1: moderate: Recommended update for strongswan
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0251-1 Rating: moderate References: #1167880 #1180801 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for strongswan fixes the following issues: - Fix trailing quotation mark missing from example in README. (bsc#1167880) - Fixes an error in 'libgcrypt' causing problems by generating CA keys with 'pki create'. (bsc#1180801) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-251=1 Package List: - openSUSE Leap 15.2 (x86_64): strongswan-5.8.2-lp152.2.3.1 strongswan-debuginfo-5.8.2-lp152.2.3.1 strongswan-debugsource-5.8.2-lp152.2.3.1 strongswan-hmac-5.8.2-lp152.2.3.1 strongswan-ipsec-5.8.2-lp152.2.3.1 strongswan-ipsec-debuginfo-5.8.2-lp152.2.3.1 strongswan-libs0-5.8.2-lp152.2.3.1 strongswan-libs0-debuginfo-5.8.2-lp152.2.3.1 strongswan-mysql-5.8.2-lp152.2.3.1 strongswan-mysql-debuginfo-5.8.2-lp152.2.3.1 strongswan-nm-5.8.2-lp152.2.3.1 strongswan-nm-debuginfo-5.8.2-lp152.2.3.1 strongswan-sqlite-5.8.2-lp152.2.3.1 strongswan-sqlite-debuginfo-5.8.2-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): strongswan-doc-5.8.2-lp152.2.3.1 References: https://bugzilla.suse.com/1167880 https://bugzilla.suse.com/1180801

1 0

openSUSE-RU-2021:0235-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 05 Feb '21

05 Feb '21

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0235-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: lxc was updated to 4.0.5: * Support allocating PTS devices from within the container * Harden more path/mount handling logics * Rework LSM logic to limit initializer use * for full list of changes see: https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269 Update to LXC 4.0.2 * https://discuss.linuxcontainers.org/t/lxc-4-0-2-lts-has-been-released/7449 Update to LXC 4.0.1: * Tweak systemd ordering (start after remote-fs.target) * Fix various issues around attach and cgroups * Fix shutdown timeout not working on pidfd systems * Fix cgroup issue on 4.9 kernel * Fix write issues in /dev/stdout This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-235=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): liblxc-devel-4.0.5-bp151.5.18.1 liblxc1-4.0.5-bp151.5.18.1 lxc-4.0.5-bp151.5.18.1 pam_cgfs-4.0.5-bp151.5.18.1 - openSUSE Backports SLE-15-SP1 (noarch): lxc-bash-completion-4.0.5-bp151.5.18.1 References:

1 0

openSUSE-RU-2021:0233-1: moderate: Recommended update for dwarves
by maintenance＠opensuse.org 04 Feb '21

04 Feb '21

openSUSE Recommended Update: Recommended update for dwarves ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0233-1 Rating: moderate References: #1176095 #1177921 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dwarves fixes the following issues: + DW_AT_alignment is defined in 1.19 so dwarves now is compatible with older libdw. Update to release 1.19 * Support for split BTF. * Support cross-compiled ELF binaries with different endianness. * Support for showing typedefs for anonymous types, like structs, unions and enums. Move to 1.18.g19 (863e6f0f) * btf_encoder: Ignore zero-sized ELF symbols update to 1.18_15g040fd7f (boo#1177921): * btf_encoder: Support cross-compiled ELF binaries with different endianness * strings: use BTF's string APIs for strings management * strings: Rename strings.h to avoid clashing with /usr/include/strings.h * dwarf_loader: increase the size of lookup hash map * btf_encoder: revamp how per-CPU variables are encoded * btf_encoder: Discard CUs after BTF encoding * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type * btf_encoder: Use libbpf APIs to encode BTF type info * btf_loader: Use libbpf to load BTF * dwarves: Expose and maintain active debug info loader operations * btf_encoder: detect BTF encoding errors and exit * libbpf: Update to latest libbpf version * dwarf_loader: Conditionally define DW_AT_alignment * pahole: Implement --packed * man-pages: Fix 'coimbine' typo Update to release 1.18 * pahole now should be segfault free when handling gdb test suit DWARF files, including ADA, FORTRAN, rust and dwp compressed files (the latter is refused). * Bail out on partial units for now, avoiding segfaults. - Backport fixes for segfault when processing dwz-ed kernel [boo#1176095,https://github.com/acmel/dwarves/issues/10]. Update to release 1.17 * Support raw BTF as available in /sys/kernel/btf/vmlinux. * Make --find_pointers_to consider unions. * Make --contains and --find_pointers_to honour --unions. * Add support for finding pointers to void. * Make --contains and --find_pointers_to to work with base types. Update to release 1.16 * btf_loader: Add support for BTF_KIND_FUNC Update to new upstream release 1.15 * Avoid null dereference with NULL configs * Fixup printing "const" early with "const void" * Fix recursively printing named structs in --expand_types version 1.13 * Use of the recently introduced BTF deduplication algorithm * Introduce a 'btfdiff' utility * Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs and unions in the same fashion as with DWARF info * Better union support * Infer __attribute__((__packed__)) when structs have no alignment holes * Support DWARF5's DW_AT_alignment * Add a '--compile' option to 'pfunct' Update to new upstream release 1.12 * Added a BTF (BPF Type Format) encoder * Initial support for DW_TAG_partial_unit * Print cacheline boundaries in multiple union members * Show offsets at union members This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-233=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): dwarves-1.19-bp152.4.3.1 libdwarves-devel-1.19-bp152.4.3.1 libdwarves1-1.19-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): libdwarves-devel-64bit-1.19-bp152.4.3.1 libdwarves1-64bit-1.19-bp152.4.3.1 References: https://bugzilla.suse.com/1176095 https://bugzilla.suse.com/1177921

1 0

openSUSE-RU-2021:0232-1: moderate: Recommended update for python-openqa_client
by maintenance＠opensuse.org 03 Feb '21

03 Feb '21

openSUSE Recommended Update: Recommended update for python-openqa_client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0232-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-openqa_client fixes the following issues: python-openqa_client was updated to version 4.1.1: * Fix use of 'latest' param when querying jobs * Drop a rogue word from `do_request` docstring, rewrap * Tweak release script to use 'pypi' repo * Handle YAML responses as well as JSON (#12) * Add a 'parse' argument for `do_request` to skip parsing * Add toml to CI requires (for coverage to read TOML config) * tox: run `coverage xml` explicitly * Improve the ugly sed hack fix for the coverage vs. tox venv issue * Update release.sh to use pep517 * Add pyproject.toml to comply with PEP-517 / PEP-518 * black-ify code and add black to CI config * Move source under src/ , fix tox config to run tests on package * Use f-strings for string formatting * Drop Python 2 support, and some Python 2-specific workarounds * Have MANIFEST.in exclude itself * Add a MANIFEST.in to exclude some stuff we don't want * Fix tests to run on ancient pytest (I hope) * Fix more brokenness in setup.py * Fix release.sh for no spaces in setup.py setup() * Drop duplicated description line in setup.py * Update release.sh to use Python 3 * Drop WaitError exception * find_clones: don't edit list while iterating it * _add_auth_headers: don't modify the original request * setup.py: don't import os, we don't use it * setup.py: Remove runtime dependency on setuptools (@jayvdb) (#9) * setup.py: more cleanups based on sample project * setup.py: we don't use find_packages, don't import it * setup.py: no spaces for arg assignments * setup.py: handle long_description as per pypa sample project * Update release script to publish to PyPI * Fix long description for pypi * **API**: update constants to match upstream 4d89041 * Remove waiting state * Add incomplete result "timeout_exceeded" * Update job state constants for recent upstream changes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-232=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-232=1 Package List: - openSUSE Leap 15.2 (noarch): python3-openqa_client-4.1.1-lp152.4.3.1 - openSUSE Backports SLE-15-SP2 (noarch): python3-openqa_client-4.1.1-bp152.4.3.1 References:

1 0