January 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0009-1: important: Recommended update for ovmf
by maintenance＠opensuse.org 03 Jan '22

03 Jan '22

openSUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0009-1 Rating: important References: #1192126 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ovmf fixes the following issue: - VM enters crash/reset loop inside OVMF on reboots (bsc#1192126) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-9=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): ovmf-202008-10.11.1 ovmf-tools-202008-10.11.1 - openSUSE Leap 15.3 (noarch): qemu-ovmf-ia32-202008-10.11.1 qemu-ovmf-x86_64-202008-10.11.1 qemu-uefi-aarch32-202008-10.11.1 qemu-uefi-aarch64-202008-10.11.1 - openSUSE Leap 15.3 (x86_64): qemu-ovmf-x86_64-debug-202008-10.11.1 References: https://bugzilla.suse.com/1192126

1 0

openSUSE-RU-2022:0008-1: moderate: Recommended update for mailx
by maintenance＠opensuse.org 03 Jan '22

03 Jan '22

openSUSE Recommended Update: Recommended update for mailx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0008-1 Rating: moderate References: #1180355 #1192916 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mailx fixes the following issues: - To add description how to avoid such mailx does not send mails unless run via strace or in verbose mode. (bsc#1192916) - Fix name argument when calling '/usr/sbin/sendmail' (bsc#1180355) - If the openssl RNG is already seeded (on linux it always is) skip snake-oil reeseeding from file. Update man page accordingly. - Update man page with information that ssl2 and ssl3 are not only deprecated but currently unavailable and that tls1 forces TLS 1.0 but not later versions. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-8=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): mailx-12.5-3.3.1 mailx-debuginfo-12.5-3.3.1 mailx-debugsource-12.5-3.3.1 References: https://bugzilla.suse.com/1180355 https://bugzilla.suse.com/1192916

1 0

openSUSE-RU-2022:0002-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 03 Jan '22

03 Jan '22

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0002-1 Rating: moderate References: #1183905 #1193181 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lvm2 fixes the following issues: - Fix lvconvert not taking `--stripes` option (bsc#1183905) - Fix LVM vgimportclone not working on hardware snapshot (bsc#1193181) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): device-mapper-1.02.163-8.39.1 device-mapper-debuginfo-1.02.163-8.39.1 device-mapper-devel-1.02.163-8.39.1 libdevmapper-event1_03-1.02.163-8.39.1 libdevmapper-event1_03-debuginfo-1.02.163-8.39.1 libdevmapper1_03-1.02.163-8.39.1 libdevmapper1_03-debuginfo-1.02.163-8.39.1 liblvm2cmd2_03-2.03.05-8.39.1 liblvm2cmd2_03-debuginfo-2.03.05-8.39.1 lvm2-2.03.05-8.39.1 lvm2-debuginfo-2.03.05-8.39.1 lvm2-debugsource-2.03.05-8.39.1 lvm2-devel-2.03.05-8.39.1 lvm2-device-mapper-debugsource-2.03.05-8.39.1 lvm2-lockd-2.03.05-8.39.1 lvm2-lockd-debuginfo-2.03.05-8.39.1 lvm2-lvmlockd-debugsource-2.03.05-8.39.1 lvm2-testsuite-2.03.05-8.39.1 lvm2-testsuite-debuginfo-2.03.05-8.39.1 - openSUSE Leap 15.3 (x86_64): device-mapper-devel-32bit-1.02.163-8.39.1 libdevmapper-event1_03-32bit-1.02.163-8.39.1 libdevmapper-event1_03-32bit-debuginfo-1.02.163-8.39.1 libdevmapper1_03-32bit-1.02.163-8.39.1 libdevmapper1_03-32bit-debuginfo-1.02.163-8.39.1 References: https://bugzilla.suse.com/1183905 https://bugzilla.suse.com/1193181

1 0

openSUSE-RU-2022:0004-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 03 Jan '22

03 Jan '22

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0004-1 Rating: moderate References: #1193480 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issues: - Fix function gcry_mpi_sub_ui subtracting from negative value (bsc#1193480) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libgcrypt-cavs-1.8.2-8.42.1 libgcrypt-cavs-debuginfo-1.8.2-8.42.1 libgcrypt-debugsource-1.8.2-8.42.1 libgcrypt-devel-1.8.2-8.42.1 libgcrypt-devel-debuginfo-1.8.2-8.42.1 libgcrypt20-1.8.2-8.42.1 libgcrypt20-debuginfo-1.8.2-8.42.1 libgcrypt20-hmac-1.8.2-8.42.1 - openSUSE Leap 15.3 (x86_64): libgcrypt-devel-32bit-1.8.2-8.42.1 libgcrypt-devel-32bit-debuginfo-1.8.2-8.42.1 libgcrypt20-32bit-1.8.2-8.42.1 libgcrypt20-32bit-debuginfo-1.8.2-8.42.1 libgcrypt20-hmac-32bit-1.8.2-8.42.1 References: https://bugzilla.suse.com/1193480

1 0

openSUSE-RU-2022:0001-1: important: Recommended update for konqueror
by maintenance＠opensuse.org 03 Jan '22

03 Jan '22

openSUSE Recommended Update: Recommended update for konqueror ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0001-1 Rating: important References: #1173711 #1193437 Affected Products: openSUSE Leap 15.3 openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for konqueror fixes the following issues: - Always display the introduction page using webenginepart, as that's the only html rendering part that supports it (boo#1173711) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-1=1 Package List: - openSUSE Leap 15.3 (noarch): ha-cluster-bootstrap-0.5-13.3.1 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): konqueror-20.04.2-bp152.2.4.1 konqueror-devel-20.04.2-bp152.2.4.1 konqueror-plugins-20.04.2-bp152.2.4.1 webenginepart-20.04.2-bp152.2.4.1 - openSUSE Backports SLE-15-SP2 (noarch): konqueror-lang-20.04.2-bp152.2.4.1 References: https://bugzilla.suse.com/1173711 https://bugzilla.suse.com/1193437

1 0

openSUSE-FU-2022:0006-1: moderate: Feature update for numatop
by maintenance＠opensuse.org 03 Jan '22

03 Jan '22

openSUSE Feature Update: Feature update for numatop ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0006-1 Rating: moderate References: SLE-19499 SLE-23044 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 feature fixes and contains two features can now be installed. Description: This feature update for numatop fixes the following issues: - Add support for ICX processors (jsc#SLE-19499, jsc#SLE-23044) Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-6=1 Package List: - openSUSE Leap 15.3 (ppc64le x86_64): numatop-2.2-3.3.1 numatop-debuginfo-2.2-3.3.1 numatop-debugsource-2.2-3.3.1 References:

1 0

openSUSE-RU-2022:0003-1: moderate: Recommended update for youtube-dl
by maintenance＠opensuse.org 02 Jan '22

02 Jan '22

openSUSE Recommended Update: Recommended update for youtube-dl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0003-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for youtube-dl fixes the following issues: - The youtube-dl SRPM (producing: yt-dlp BRPM) switches back from the yt-dlp source to the to youtube-dl source and produces the youtube-dl BRPM again. (Project has seen activity). yt-dlp is now its own SRPM. - Switch to youtube-dl 2021.12.17 * youtube: Update signature function patterns * liveleak: Remove extractor * orf:tvthek: Add support for MPD formats - Update to 2021.06.06 * [facebook] Improve login required detection * [youporn] Fix formats and view count extraction * [orf:tvthek] Fix thumbnails extraction * [formula1] Fix extraction * [ard] Relax URL regular expression and fix video ids * [ustream] Detect https embeds * [ted] Prefer own formats over external sources * [twitch:clips] Improve extraction * [twitch:clips] Add access token query to download URLs * [youtube] Fix get_video_info request * [vimeo] Fix vimeo pro embed extraction * [redbulltv] Fix embed data extraction * [shahid] Relax URL regular expression - Update to release 2021.05.16 * Add support for sibnet embeds - Update to release 2021.04.17 * [curiositystream] fix format extraction * [cbssports] fix extraction * [mtv] Fix Viacom A/B Testing Video Player extraction * [youtube:tab] Pass innertube context and x-goog-visitor-id header along with continuation requests * [youtube] Improve URL to extractor routing * [youtube] Add more invidious instances * [youtube:tab] Detect series playlist on playlists page * [youtube:tab] Improve grid extraction * [youtube] Improve stretch extraction and fix stretched ratio calculation * [utils] Add support for support for experimental HTTP response status code 308 Permanent Redirect - Update to release 2021.04.07 * youtube: Add support for hashtag videos extraction - The youtube-dl SRPM (producing: yt-dlp BRPM) switches back from the yt-dlp source to the to youtube-dl source and produces the youtube-dl BRPM again. (Project has seen activity). yt-dlp is now its own SRPM. - Switch to youtube-dl 2021.12.17 * youtube: Update signature function patterns * liveleak: Remove extractor * orf:tvthek: Add support for MPD formats - Update to 2021.06.06 * [facebook] Improve login required detection * [youporn] Fix formats and view count extraction * [orf:tvthek] Fix thumbnails extraction * [formula1] Fix extraction * [ard] Relax URL regular expression and fix video ids * [ustream] Detect https embeds * [ted] Prefer own formats over external sources * [twitch:clips] Improve extraction * [twitch:clips] Add access token query to download URLs * [youtube] Fix get_video_info request * [vimeo] Fix vimeo pro embed extraction * [redbulltv] Fix embed data extraction * [shahid] Relax URL regular expression - Update to release 2021.05.16 * Add support for sibnet embeds - Update to release 2021.04.17 * [curiositystream] fix format extraction * [cbssports] fix extraction * [mtv] Fix Viacom A/B Testing Video Player extraction * [youtube:tab] Pass innertube context and x-goog-visitor-id header along with continuation requests * [youtube] Improve URL to extractor routing * [youtube] Add more invidious instances * [youtube:tab] Detect series playlist on playlists page * [youtube:tab] Improve grid extraction * [youtube] Improve stretch extraction and fix stretched ratio calculation * [utils] Add support for support for experimental HTTP response status code 308 Permanent Redirect - Update to release 2021.04.07 * youtube: Add support for hashtag videos extraction Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2022-3=1 Package List: - openSUSE Leap 15.2 (noarch): python2-youtube-dl-2021.12.17-lp152.2.9.1 python3-youtube-dl-2021.12.17-lp152.2.9.1 youtube-dl-2021.12.17-lp152.2.9.1 youtube-dl-bash-completion-2021.12.17-lp152.2.9.1 youtube-dl-fish-completion-2021.12.17-lp152.2.9.1 youtube-dl-zsh-completion-2021.12.17-lp152.2.9.1 References:

1 0

openSUSE-SU-2022:0002-1: moderate: Security update for log4j
by opensuse-security＠opensuse.org 02 Jan '22

02 Jan '22

openSUSE Security Update: Security update for log4j ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0002-1 Rating: moderate References: #1194127 Cross-References: CVE-2021-44832 CVSS scores: CVE-2021-44832 (NVD) : 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-44832 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for log4j fixes the following issues: - CVE-2021-44832: Fixes a remote code execution via JDBC Appender (bsc#1194127) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2022-2=1 Package List: - openSUSE Leap 15.2 (noarch): log4j-2.17.0-lp152.3.15.1 log4j-javadoc-2.17.0-lp152.3.15.1 log4j-jcl-2.17.0-lp152.3.15.1 log4j-slf4j-2.17.0-lp152.3.15.1 References: https://www.suse.com/security/cve/CVE-2021-44832.html https://bugzilla.suse.com/1194127

1 0

openSUSE-RU-2022:0001-1: moderate: Recommended update for konqueror
by maintenance＠opensuse.org 01 Jan '22

01 Jan '22

openSUSE Recommended Update: Recommended update for konqueror ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0001-1 Rating: moderate References: #1173711 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for konqueror fixes the following issues: - Always display the introduction page using webenginepart, as that's the only html rendering part that supports it (boo#1173711) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-1=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): konqueror-20.04.2-bp152.2.4.1 konqueror-devel-20.04.2-bp152.2.4.1 konqueror-plugins-20.04.2-bp152.2.4.1 webenginepart-20.04.2-bp152.2.4.1 - openSUSE Backports SLE-15-SP2 (noarch): konqueror-lang-20.04.2-bp152.2.4.1 References: https://bugzilla.suse.com/1173711

1 0