September 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:1252-1: important: Security update for nextcloud
by opensuse-security＠opensuse.org 14 Sep '21

14 Sep '21

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1252-1 Rating: important References: #1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-32801 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-32802 (NVD) : 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: Update to 20.0.12 Fixed security issues (boo#1190291): - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-2021-32801 (CWE-532): Insertion of Sensitive Information into Log File - CVE-2021-32802 (CWE-829): Inclusion of Functionality from Untrusted Control Sphere Changes - Bump vue-router from 3.4.3 to 3.4.9 (server#27224) - Bump v-click-outside from 3.1.1 to 3.1.2 (server#27232) - Bump url-search-params-polyfill from 8.1.0 to 8.1.1 (server#27236) - Bump debounce from 1.2.0 to 1.2.1 (server#27646) - Bump vue and vue-template-compiler (server#27701) - Design fixes to app-settings button (server#27745) - Reset checksum when writing files to object store (server#27754) - Run s3 tests again (server#27804) - Fix in locking cache check (server#27829) - Bump dompurify from 2.2.8 to 2.2.9 (server#27836) - Make search popup usable on mobile, too (server#27858) - Cache images on browser (server#27863) - Fix dark theme on public link shares (server#27895) - Make user status usable on mobile (server#27897) - Do not escape display name in dashboard welcome text (server#27913) - Bump moment-timezone from 0.5.31 to 0.5.33 (server#27924) - Fix newfileMenu on public page (server#27941) - Fix svg icons disapearing in app navigation when text overflows (server#27955) - Bump bootstrap from 4.5.2 to 4.5.3 (server#27965) - Show registered breadcrumb detail views in breadcrumb menu (server#27970) - Fix regression in file sidebar (server#27976) - Bump exports-loader from 1.1.0 to 1.1.1 (server#27984) - Bump @nextcloud/capabilities from 1.0.2 to 1.0.4 (server#27985) - Bump @nextcloud/vue-dashboard from 1.0.0 to 1.0.1 (server#27988) - Improve notcreatable permissions hint (server#28006) - Update CRL due to revoked twofactor_nextcloud_notification.crt (server#28018) - Bump sass-loader from 10.0.2 to 10.0.5 (server#28032) - Increase footer height for longer menus (server#28045) - Mask password for Redis and RedisCluster on connection failure (server#28054) - Fix missing theming for login button (server#28065) - Fix overlapping of elements in certain views (server#28072) - Disable HEIC image preview provider for performance concerns (server#28081) - Improve provider check (server#28087) - Sanitize more functions from the encryption app (server#28091) - Hide download button for public preview of audio files (server#28096) - L10n: HTTP in capital letters (server#28107) - Fix dark theme in file exists dialog (server#28111) - Let memory limit set in tests fit the used amount (server#28125) - User management - Add icon to user groups (server#28172) - Bump marked from 1.1.1 to 1.1.2 (server#28187) - Fix variable override in file view (server#28191) - Bump regenerator-runtime from 0.13.7 to 0.13.9 (server#28207) - Bump url-loader from 4.1.0 to 4.1.1 (server#28208) - Fix Files breadcrumbs being hidden even if there is enough space (server#28224) - Dont apply jail search filter is on the root (server#28241) - Check that php was compiled with argon2 support or that the php-sodium extensions is installed (server#28289) - Fix preference name when generating notifications (activity#603) - Fix monochrome icon detection for correct dark mode invert (activity#607) - Fix "Enable notification emails" (activity#613) - Show add, del and restored files within by and self filter (activity#616) - Link from app-navigation-settings to personal settings (activity#625) - Fix pdfviewer design (files_pdfviewer#446) - Include version number in firstrunwizard (firstrunwizard#570) - Use notification main link if no parameter has a link (notifications#1040) - Bump sass-loader from 10.1.0 to 10.1.1 (text#1360) - Bump @babel/plugin-transform-runtime from 7.13.9 to 7.13.15 (text#1548) - Bump @babel/preset-env from 7.13.9 to 7.13.15 (text#1550) - Bump vue-loader from 15.9.6 to 15.9.7 (text#1592) - Unify error responses and add logging where appropriate (text#1719) - Disable header timeout on mobile (viewer#978) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2021-1252=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-20.0.12-31.1 nextcloud-apache-20.0.12-31.1 References: https://www.suse.com/security/cve/CVE-2021-32766.html https://www.suse.com/security/cve/CVE-2021-32800.html https://www.suse.com/security/cve/CVE-2021-32801.html https://www.suse.com/security/cve/CVE-2021-32802.html https://bugzilla.suse.com/1190291

1 0

openSUSE-SU-2021:1254-1: important: Security update for libaom
by opensuse-security＠opensuse.org 14 Sep '21

14 Sep '21

openSUSE Security Update: Security update for libaom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1254-1 Rating: important References: #1189497 Cross-References: CVE-2021-30475 CVSS scores: CVE-2021-30475 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30475 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libaom fixes the following issues: - CVE-2021-30475: Fixed buffer overflow in aom_dsp/noise_model.c (bsc#1189497). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1254=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): aom-tools-1.0.0-lp152.3.3.1 aom-tools-debuginfo-1.0.0-lp152.3.3.1 libaom-debugsource-1.0.0-lp152.3.3.1 libaom-devel-1.0.0-lp152.3.3.1 libaom0-1.0.0-lp152.3.3.1 libaom0-debuginfo-1.0.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libaom0-32bit-1.0.0-lp152.3.3.1 libaom0-32bit-debuginfo-1.0.0-lp152.3.3.1 - openSUSE Leap 15.2 (noarch): libaom-devel-doc-1.0.0-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-30475.html https://bugzilla.suse.com/1189497

1 0

openSUSE-SU-2021:1255-1: important: Security update for nextcloud
by opensuse-security＠opensuse.org 14 Sep '21

14 Sep '21

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1255-1 Rating: important References: #1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-32801 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-32802 (NVD) : 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291 - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-2021-32801 (CWE-532): Insertion of Sensitive Information into Log File - CVE-2021-32802 (CWE-829): Inclusion of Functionality from Untrusted Control Sphere Changes - Bump vue-router from 3.4.3 to 3.4.9 (server#27224) - Bump v-click-outside from 3.1.1 to 3.1.2 (server#27232) - Bump url-search-params-polyfill from 8.1.0 to 8.1.1 (server#27236) - Bump debounce from 1.2.0 to 1.2.1 (server#27646) - Bump vue and vue-template-compiler (server#27701) - Design fixes to app-settings button (server#27745) - Reset checksum when writing files to object store (server#27754) - Run s3 tests again (server#27804) - Fix in locking cache check (server#27829) - Bump dompurify from 2.2.8 to 2.2.9 (server#27836) - Make search popup usable on mobile, too (server#27858) - Cache images on browser (server#27863) - Fix dark theme on public link shares (server#27895) - Make user status usable on mobile (server#27897) - Do not escape display name in dashboard welcome text (server#27913) - Bump moment-timezone from 0.5.31 to 0.5.33 (server#27924) - Fix newfileMenu on public page (server#27941) - Fix svg icons disapearing in app navigation when text overflows (server#27955) - Bump bootstrap from 4.5.2 to 4.5.3 (server#27965) - Show registered breadcrumb detail views in breadcrumb menu (server#27970) - Fix regression in file sidebar (server#27976) - Bump exports-loader from 1.1.0 to 1.1.1 (server#27984) - Bump @nextcloud/capabilities from 1.0.2 to 1.0.4 (server#27985) - Bump @nextcloud/vue-dashboard from 1.0.0 to 1.0.1 (server#27988) - Improve notcreatable permissions hint (server#28006) - Update CRL due to revoked twofactor_nextcloud_notification.crt (server#28018) - Bump sass-loader from 10.0.2 to 10.0.5 (server#28032) - Increase footer height for longer menus (server#28045) - Mask password for Redis and RedisCluster on connection failure (server#28054) - Fix missing theming for login button (server#28065) - Fix overlapping of elements in certain views (server#28072) - Disable HEIC image preview provider for performance concerns (server#28081) - Improve provider check (server#28087) - Sanitize more functions from the encryption app (server#28091) - Hide download button for public preview of audio files (server#28096) - L10n: HTTP in capital letters (server#28107) - Fix dark theme in file exists dialog (server#28111) - Let memory limit set in tests fit the used amount (server#28125) - User management - Add icon to user groups (server#28172) - Bump marked from 1.1.1 to 1.1.2 (server#28187) - Fix variable override in file view (server#28191) - Bump regenerator-runtime from 0.13.7 to 0.13.9 (server#28207) - Bump url-loader from 4.1.0 to 4.1.1 (server#28208) - Fix Files breadcrumbs being hidden even if there is enough space (server#28224) - Dont apply jail search filter is on the root (server#28241) - Check that php was compiled with argon2 support or that the php-sodium extensions is installed (server#28289) - Fix preference name when generating notifications (activity#603) - Fix monochrome icon detection for correct dark mode invert (activity#607) - Fix "Enable notification emails" (activity#613) - Show add, del and restored files within by and self filter (activity#616) - Link from app-navigation-settings to personal settings (activity#625) - Fix pdfviewer design (files_pdfviewer#446) - Include version number in firstrunwizard (firstrunwizard#570) - Use notification main link if no parameter has a link (notifications#1040) - Bump sass-loader from 10.1.0 to 10.1.1 (text#1360) - Bump @babel/plugin-transform-runtime from 7.13.9 to 7.13.15 (text#1548) - Bump @babel/preset-env from 7.13.9 to 7.13.15 (text#1550) - Bump vue-loader from 15.9.6 to 15.9.7 (text#1592) - Unify error responses and add logging where appropriate (text#1719) - Disable header timeout on mobile (viewer#978) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1255=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): nextcloud-20.0.12-bp153.2.6.1 nextcloud-apache-20.0.12-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-32766.html https://www.suse.com/security/cve/CVE-2021-32800.html https://www.suse.com/security/cve/CVE-2021-32801.html https://www.suse.com/security/cve/CVE-2021-32802.html https://bugzilla.suse.com/1190291

1 0

openSUSE-SU-2021:1253-1: important: Security update for nextcloud
by opensuse-security＠opensuse.org 14 Sep '21

14 Sep '21

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1253-1 Rating: important References: #1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-32801 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-32802 (NVD) : 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291 - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-2021-32801 (CWE-532): Insertion of Sensitive Information into Log File - CVE-2021-32802 (CWE-829): Inclusion of Functionality from Untrusted Control Sphere Changes: - Bump vue-router from 3.4.3 to 3.4.9 (server#27224) - Bump v-click-outside from 3.1.1 to 3.1.2 (server#27232) - Bump url-search-params-polyfill from 8.1.0 to 8.1.1 (server#27236) - Bump debounce from 1.2.0 to 1.2.1 (server#27646) - Bump vue and vue-template-compiler (server#27701) - Design fixes to app-settings button (server#27745) - Reset checksum when writing files to object store (server#27754) - Run s3 tests again (server#27804) - Fix in locking cache check (server#27829) - Bump dompurify from 2.2.8 to 2.2.9 (server#27836) - Make search popup usable on mobile, too (server#27858) - Cache images on browser (server#27863) - Fix dark theme on public link shares (server#27895) - Make user status usable on mobile (server#27897) - Do not escape display name in dashboard welcome text (server#27913) - Bump moment-timezone from 0.5.31 to 0.5.33 (server#27924) - Fix newfileMenu on public page (server#27941) - Fix svg icons disapearing in app navigation when text overflows (server#27955) - Bump bootstrap from 4.5.2 to 4.5.3 (server#27965) - Show registered breadcrumb detail views in breadcrumb menu (server#27970) - Fix regression in file sidebar (server#27976) - Bump exports-loader from 1.1.0 to 1.1.1 (server#27984) - Bump @nextcloud/capabilities from 1.0.2 to 1.0.4 (server#27985) - Bump @nextcloud/vue-dashboard from 1.0.0 to 1.0.1 (server#27988) - Improve notcreatable permissions hint (server#28006) - Update CRL due to revoked twofactor_nextcloud_notification.crt (server#28018) - Bump sass-loader from 10.0.2 to 10.0.5 (server#28032) - Increase footer height for longer menus (server#28045) - Mask password for Redis and RedisCluster on connection failure (server#28054) - Fix missing theming for login button (server#28065) - Fix overlapping of elements in certain views (server#28072) - Disable HEIC image preview provider for performance concerns (server#28081) - Improve provider check (server#28087) - Sanitize more functions from the encryption app (server#28091) - Hide download button for public preview of audio files (server#28096) - L10n: HTTP in capital letters (server#28107) - Fix dark theme in file exists dialog (server#28111) - Let memory limit set in tests fit the used amount (server#28125) - User management - Add icon to user groups (server#28172) - Bump marked from 1.1.1 to 1.1.2 (server#28187) - Fix variable override in file view (server#28191) - Bump regenerator-runtime from 0.13.7 to 0.13.9 (server#28207) - Bump url-loader from 4.1.0 to 4.1.1 (server#28208) - Fix Files breadcrumbs being hidden even if there is enough space (server#28224) - Dont apply jail search filter is on the root (server#28241) - Check that php was compiled with argon2 support or that the php-sodium extensions is installed (server#28289) - Fix preference name when generating notifications (activity#603) - Fix monochrome icon detection for correct dark mode invert (activity#607) - Fix "Enable notification emails" (activity#613) - Show add, del and restored files within by and self filter (activity#616) - Link from app-navigation-settings to personal settings (activity#625) - Fix pdfviewer design (files_pdfviewer#446) - Include version number in firstrunwizard (firstrunwizard#570) - Use notification main link if no parameter has a link (notifications#1040) - Bump sass-loader from 10.1.0 to 10.1.1 (text#1360) - Bump @babel/plugin-transform-runtime from 7.13.9 to 7.13.15 (text#1548) - Bump @babel/preset-env from 7.13.9 to 7.13.15 (text#1550) - Bump vue-loader from 15.9.6 to 15.9.7 (text#1592) - Unify error responses and add logging where appropriate (text#1719) - Disable header timeout on mobile (viewer#978) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1253=1 Package List: - openSUSE Leap 15.2 (noarch): nextcloud-20.0.12-lp152.3.12.1 nextcloud-apache-20.0.12-lp152.3.12.1 References: https://www.suse.com/security/cve/CVE-2021-32766.html https://www.suse.com/security/cve/CVE-2021-32800.html https://www.suse.com/security/cve/CVE-2021-32801.html https://www.suse.com/security/cve/CVE-2021-32802.html https://bugzilla.suse.com/1190291

1 0

openSUSE-RU-2021:3029-1: moderate: Recommended update for sapconf
by maintenance＠opensuse.org 14 Sep '21

14 Sep '21

openSUSE Recommended Update: Recommended update for sapconf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3029-1 Rating: moderate References: #1189496 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sapconf fixes the following issues: - Adapt the activity detection of saptune to the upcoming saptune version 3. (bsc#1189496) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3029=1 Package List: - openSUSE Leap 15.3 (noarch): sapconf-5.0.3-7.18.1 References: https://bugzilla.suse.com/1189496

1 0

openSUSE-SU-2021:1250-1: important: Security update for nextcloud
by opensuse-security＠opensuse.org 13 Sep '21

13 Sep '21

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1250-1 Rating: important References: #1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-32801 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-32802 (NVD) : 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291: - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-2021-32801 (CWE-532): Insertion of Sensitive Information into Log File - CVE-2021-32802 (CWE-829): Inclusion of Functionality from Untrusted Control Sphere Changes - Bump vue-router from 3.4.3 to 3.4.9 (server#27224) - Bump v-click-outside from 3.1.1 to 3.1.2 (server#27232) - Bump url-search-params-polyfill from 8.1.0 to 8.1.1 (server#27236) - Bump debounce from 1.2.0 to 1.2.1 (server#27646) - Bump vue and vue-template-compiler (server#27701) - Design fixes to app-settings button (server#27745) - Reset checksum when writing files to object store (server#27754) - Run s3 tests again (server#27804) - Fix in locking cache check (server#27829) - Bump dompurify from 2.2.8 to 2.2.9 (server#27836) - Make search popup usable on mobile, too (server#27858) - Cache images on browser (server#27863) - Fix dark theme on public link shares (server#27895) - Make user status usable on mobile (server#27897) - Do not escape display name in dashboard welcome text (server#27913) - Bump moment-timezone from 0.5.31 to 0.5.33 (server#27924) - Fix newfileMenu on public page (server#27941) - Fix svg icons disapearing in app navigation when text overflows (server#27955) - Bump bootstrap from 4.5.2 to 4.5.3 (server#27965) - Show registered breadcrumb detail views in breadcrumb menu (server#27970) - Fix regression in file sidebar (server#27976) - Bump exports-loader from 1.1.0 to 1.1.1 (server#27984) - Bump @nextcloud/capabilities from 1.0.2 to 1.0.4 (server#27985) - Bump @nextcloud/vue-dashboard from 1.0.0 to 1.0.1 (server#27988) - Improve notcreatable permissions hint (server#28006) - Update CRL due to revoked twofactor_nextcloud_notification.crt (server#28018) - Bump sass-loader from 10.0.2 to 10.0.5 (server#28032) - Increase footer height for longer menus (server#28045) - Mask password for Redis and RedisCluster on connection failure (server#28054) - Fix missing theming for login button (server#28065) - Fix overlapping of elements in certain views (server#28072) - Disable HEIC image preview provider for performance concerns (server#28081) - Improve provider check (server#28087) - Sanitize more functions from the encryption app (server#28091) - Hide download button for public preview of audio files (server#28096) - L10n: HTTP in capital letters (server#28107) - Fix dark theme in file exists dialog (server#28111) - Let memory limit set in tests fit the used amount (server#28125) - User management - Add icon to user groups (server#28172) - Bump marked from 1.1.1 to 1.1.2 (server#28187) - Fix variable override in file view (server#28191) - Bump regenerator-runtime from 0.13.7 to 0.13.9 (server#28207) - Bump url-loader from 4.1.0 to 4.1.1 (server#28208) - Fix Files breadcrumbs being hidden even if there is enough space (server#28224) - Dont apply jail search filter is on the root (server#28241) - Check that php was compiled with argon2 support or that the php-sodium extensions is installed (server#28289) - Fix preference name when generating notifications (activity#603) - Fix monochrome icon detection for correct dark mode invert (activity#607) - Fix "Enable notification emails" (activity#613) - Show add, del and restored files within by and self filter (activity#616) - Link from app-navigation-settings to personal settings (activity#625) - Fix pdfviewer design (files_pdfviewer#446) - Include version number in firstrunwizard (firstrunwizard#570) - Use notification main link if no parameter has a link (notifications#1040) - Bump sass-loader from 10.1.0 to 10.1.1 (text#1360) - Bump @babel/plugin-transform-runtime from 7.13.9 to 7.13.15 (text#1548) - Bump @babel/preset-env from 7.13.9 to 7.13.15 (text#1550) - Bump vue-loader from 15.9.6 to 15.9.7 (text#1592) - Unify error responses and add logging where appropriate (text#1719) - Disable header timeout on mobile (viewer#978) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-1250=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): nextcloud-20.0.12-bp151.3.18.1 nextcloud-apache-20.0.12-bp151.3.18.1 References: https://www.suse.com/security/cve/CVE-2021-32766.html https://www.suse.com/security/cve/CVE-2021-32800.html https://www.suse.com/security/cve/CVE-2021-32801.html https://www.suse.com/security/cve/CVE-2021-32802.html https://bugzilla.suse.com/1190291

1 0

openSUSE-RU-2021:1251-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 13 Sep '21

13 Sep '21

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1251-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3:NonFree openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for steam fixes the following issues: Update to version 1.0.0.72: Update steam-devices subproject up to 2021-08-25 - Brooks Universal Fighting Board - PowerA Wired Controller for Nintendo Switch - Razer Panthera EVO Arcade Stick - Razer Raiju PS4 Tournament Edition over Bluetooth - Thrustmaster eSwap Pro Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2021-1251=1 - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2021-1251=1 Package List: - openSUSE Leap 15.3:NonFree (i586 x86_64): steam-1.0.0.72-lp153.2.9.1 steam-devices-1.0.0.72-lp153.2.9.1 - openSUSE Leap 15.2:NonFree (x86_64): steam-1.0.0.72-lp152.2.30.1 steam-devices-1.0.0.72-lp152.2.30.1 References:

1 0

openSUSE-RU-2021:3028-1: moderate: Recommended update for wxWidgets-3_0
by maintenance＠opensuse.org 13 Sep '21

13 Sep '21

openSUSE Recommended Update: Recommended update for wxWidgets-3_0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3028-1 Rating: moderate References: #1162418 #1180492 ECO-3376 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for wxWidgets-3_0 fixes the following issues: Update from version 3.0.3 to 3.0.5.1 (bsc#1180492, jsc#ECO-3376) - Workaround for the problem with overflowing the maximum command line length in MinGW builds not using configure. - Fix for a problem with 'wxSpinCtrl' in 'wxGTK' - Update the 'SOVERSION' - Relax the ABI changes avoiding to check for the exact match of '__GXX_ABI_VERSION'. - Build 'wxWidgets-3_0-nostl' variant with LTO disabled. (bsc#1162418) - Don't crash on trailing '%' in 'wxDateTime::Format()'. - Fix various problems when parsing invalid ZIP files. - Fix generic 'wxTimePickerCtrl' to accept max values from keyboard. - Multiple surrogate-related fixes in UTF-16 support. - Fix reading wide character data in 'wxFile::ReadAll()'. - Make parsing 'WAV' data more robust. - Fix copy 'ctor' in numeric validators classes. - Fix a memory error when 'wxDataViewCtrl' is deleted. - Avoid some GTK+ run-time errors when using 'wx{File,Dir}PickerCtrl'. - Prevent breaking binaries, if C++11 is enabled. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3028=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libwx_baseu-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_baseu-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_baseu-suse3_0_5-3.0.5.1-11.3.2 libwx_baseu-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_baseu_net-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_baseu_net-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_baseu_net-suse3_0_5-3.0.5.1-11.3.2 libwx_baseu_net-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_baseu_xml-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_baseu_xml-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_baseu_xml-suse3_0_5-3.0.5.1-11.3.2 libwx_baseu_xml-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_core-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_core-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_core-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_core-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_html-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_html-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_html-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_html-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_media-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_media-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_media-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_media-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse-nostl3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse-nostl3_0_5-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse3_0_5-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse3_0_5-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-debugsource-3.0.5.1-11.3.2 wxWidgets-3_0-devel-3.0.5.1-11.3.2 wxWidgets-3_0-devel-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-nostl-debugsource-3.0.5.1-11.3.2 wxWidgets-3_0-nostl-devel-3.0.5.1-11.3.2 wxWidgets-3_0-nostl-devel-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-plugin-sound_sdlu-3_0-3.0.5.1-11.3.2 wxWidgets-3_0-plugin-sound_sdlu-3_0-debuginfo-3.0.5.1-11.3.2 - openSUSE Leap 15.3 (aarch64_ilp32): libwx_baseu-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_baseu-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_baseu_net-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_baseu_net-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_baseu_xml-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_baseu_xml-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_core-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_core-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_html-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_html-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_media-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_media-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse3_0_5-64bit-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse3_0_5-64bit-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-devel-64bit-3.0.5.1-11.3.2 wxWidgets-3_0-devel-64bit-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-plugin-sound_sdlu-3_0-64bit-3.0.5.1-11.3.2 wxWidgets-3_0-plugin-sound_sdlu-3_0-64bit-debuginfo-3.0.5.1-11.3.2 - openSUSE Leap 15.3 (x86_64): libwx_baseu-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_baseu-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_baseu_net-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_baseu_net-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_baseu_xml-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_baseu_xml-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_adv-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_aui-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_core-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_core-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_gl-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_html-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_html-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_media-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_media-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_propgrid-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_qa-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_ribbon-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_richtext-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_stc-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse3_0_5-32bit-3.0.5.1-11.3.2 libwx_gtk2u_xrc-suse3_0_5-32bit-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-devel-32bit-3.0.5.1-11.3.2 wxWidgets-3_0-devel-32bit-debuginfo-3.0.5.1-11.3.2 wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-3.0.5.1-11.3.2 wxWidgets-3_0-plugin-sound_sdlu-3_0-32bit-debuginfo-3.0.5.1-11.3.2 - openSUSE Leap 15.3 (noarch): wxWidgets-lang-3.0.5.1-11.3.2 References: https://bugzilla.suse.com/1162418 https://bugzilla.suse.com/1180492

1 0

openSUSE-SU-2021:1249-1: moderate: Security update for gifsicle
by opensuse-security＠opensuse.org 13 Sep '21

13 Sep '21

openSUSE Security Update: Security update for gifsicle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1249-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for gifsicle fixes the following issues: Update to version 1.93: * Fix security bug on certain resize operations with `--resize-method=box` * Fix problems with colormapless GIFs. Update to version 1.92 * Add `--lossy` option from Kornel Lipi��ski. * Remove an assertion failure possible with `--conserve-memory` + `--colors` + `--careful`. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1249=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1249=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1249=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-1249=1 Package List: - openSUSE Leap 15.2 (x86_64): gifsicle-1.93-lp152.5.3.1 gifsicle-debuginfo-1.93-lp152.5.3.1 gifsicle-debugsource-1.93-lp152.5.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): gifsicle-1.93-bp153.2.3.1 gifsicle-debuginfo-1.93-bp153.2.3.1 gifsicle-debugsource-1.93-bp153.2.3.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): gifsicle-1.93-bp152.4.3.1 gifsicle-debuginfo-1.93-bp152.4.3.1 gifsicle-debugsource-1.93-bp152.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): gifsicle-1.93-bp151.4.3.1 References:

1 0

openSUSE-RU-2021:3023-1: moderate: Recommended update for pidgin
by maintenance＠opensuse.org 13 Sep '21

13 Sep '21

openSUSE Recommended Update: Recommended update for pidgin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3023-1 Rating: moderate References: SLE-17111 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for pidgin fixes the following issue: - Add support for the 'no_proxy' environment variable. (jsc#SLE-17111) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3023=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): finch-2.13.0-12.3.1 finch-debuginfo-2.13.0-12.3.1 finch-devel-2.13.0-12.3.1 libpurple-2.13.0-12.3.1 libpurple-debuginfo-2.13.0-12.3.1 libpurple-devel-2.13.0-12.3.1 libpurple-plugin-sametime-2.13.0-12.3.1 libpurple-plugin-sametime-debuginfo-2.13.0-12.3.1 libpurple-tcl-2.13.0-12.3.1 libpurple-tcl-debuginfo-2.13.0-12.3.1 pidgin-2.13.0-12.3.1 pidgin-debuginfo-2.13.0-12.3.1 pidgin-debugsource-2.13.0-12.3.1 pidgin-devel-2.13.0-12.3.1 - openSUSE Leap 15.3 (noarch): libpurple-branding-upstream-2.13.0-12.3.1 libpurple-lang-2.13.0-12.3.1 References:

1 0