September 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-FU-2022:3302-1: moderate: Feature update for python310-pip
by maintenance＠opensuse.org 19 Sep '22

19 Sep '22

SUSE Feature Update: Feature update for python310-pip ______________________________________________________________________________ Announcement ID: SUSE-FU-2022:3302-1 Rating: moderate References: #1201041 SLE-24539 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python3 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one feature fix and contains one feature can now be installed. Description: This feature update for python310-pip and python-rpm-macros provides: python310-pip: Upgrade from version 20.2.4 to version 22.0.4 (jsc#SLE-24539) - Adjust SPEC file to generate python310 module only - Avoid cycle: BuildRequire ca-certificates only in tests - This version is not compatible with Python 3.6 and thus not suitable for SUSE Linux Enterprise 15. - Drop the doctype check, that presented a warning for index pages that use non-compliant HTML 5. - Print the exception via rich.traceback, when running with `--debug`. - Only calculate topological installation order, for packages that are going to be installed/upgraded. * This error occurred when determining the installation order for a very specific combination of upgrading of already installed packages, change of dependencies and fetching some packages from a package index. This combination was especially common in Read the Docs' builds. - Use html.parser by default, instead of falling back to html5lib when --use-deprecated=html5lib is not passed. - Clarify that using per-requirement overrides disables the usage of wheels. - Instead of failing on index pages that use non-compliant HTML 5, print a deprecation warning and fall back to html5lib-based parsing for now. This simplifies the migration for non-compliant index pages, by letting such indexes function with a warning. - Accept lowercase <!doctype html> on index pages. - Properly handle links parsed by html5lib, when using --use-deprecated=html5lib. - Changed PackageFinder to parse HTML documents using the stdlib :class:`html.parser.HTMLParser` class instead of the html5lib package. - For now, the deprecated html5lib code remains and can be used with the --use-deprecated=html5lib command line option. However, it will be removed in a future pip release. - Completely replace :pypi:`tox` in our development workflow, with :pypi:`nox`. - Deprecate alternative progress bar styles, leaving only on and off as available choices. - Drop support for Python 3.6. - Disable location mismatch warnings on Python versions prior to 3.10. * These warnings were helping identify potential issues as part of the sysconfig -> distutils transition, and we no longer need to rely on reports from older Python versions for information on the transition. - Utilize rich for presenting pip's default download progress bar. - Present a better error message when an invalid wheel file is encountered, providing more context where the invalid wheel file is. - Documents the --require-virtualenv flag for pip install. - pip install <tab> autocompletes paths. - Allow Python distributors to opt-out from or opt-in to the sysconfig installation scheme backend by setting sysconfig._PIP_USE_SYSCONFIG to True or False. - Make it possible to deselect tests requiring cryptography package on systems where it cannot be installed. - Start using Rich for presenting error messages in a consistent format. - Improve presentation of errors from subprocesses. - Forward pip's verbosity configuration to VCS tools to control their output accordingly. - Optimize installation order calculation to improve performance when installing requirements that form a complex dependency graph with a large amount of edges. - When a package is requested by the user for upgrade, correctly identify that the extra-ed variant of that same package depended by another user-requested package is requesting the same package, and upgrade it accordingly. - Prevent pip from installing yanked releases unless explicitly pinned via the `==` or `===` operators. - Stop backtracking on build failures, by instead surfacing them to the user and aborting immediately. This behaviour provides more immediate feedback when a package cannot be built due to missing build dependencies or platform incompatibility. - Silence Value for <location> does not match warning caused by an erroneous patch in Slackware-distributed Python 3.9. - Fix an issue where pip did not consider dependencies with and without extras to be equal - Always refuse installing or building projects that have no ``pyproject.toml`` nor ``setup.py``. - Tweak running-as-root detection, to check ``os.getuid`` if it exists, on Unix-y and non-Linux/non-MacOS machines. - When installing projects with a ``pyproject.toml`` in editable mode, and the build backend does not support :pep:`660`, prepare metadata using ``prepare_metadata_for_build_wheel`` instead of ``setup.py egg_info``. Also, refuse installing projects that only have a ``setup.cfg`` and no ``setup.py`` nor ``pyproject.toml``. These restore the pre-21.3 behaviour. - Restore compatibility of where configuration files are loaded from on MacOS - Upgrade pep517 to 0.12.0 - Improve deprecation warning regarding the copying of source trees when installing from a local directory. - Suppress location mismatch warnings when pip is invoked from a Python source tree, so ``ensurepip`` does not emit warnings on CPython ``make install``. - On Python 3.10 or later, the installation scheme backend has been changed to use ``sysconfig``. This is to anticipate the deprecation of ``distutils`` in Python 3.10, and its scheduled removal in 3.12. For compatibility considerations, pip installations running on Python 3.9 or lower will continue to use ``distutils``. - Remove the ``--build-dir`` option and aliases, one last time. - In-tree builds are now the default. ``--use-feature=in-tree-build`` is now ignored. ``--use-deprecated=out-of-tree-build`` may be used temporarily to ease the transition. - Un-deprecate source distribution re-installation behaviour. - Replace vendored appdirs with platformdirs. - Support `PEP 610 <https://www.python.org/dev/peps/pep-0610/>`_ to detect editable installs in ``pip freeze`` and ``pip list``. The ``pip list`` column output has a new ``Editable project location`` column, and the JSON output has a new ``editable_project_location`` field. - ``pip freeze`` will now always fallback to reporting the editable project location when it encounters a VCS error while analyzing an editable requirement. Before, it sometimes reported the requirement as non-editable. - ``pip show`` now sorts ``Requires`` and ``Required-By`` alphabetically. - Do not raise error when there are no files to remove with ``pip cache purge/remove``. Instead log a warning and continue (to log that we removed 0 files). - When backtracking during dependency resolution, prefer the dependencies which are involved in the most recent conflict. This can significantly reduce the amount of backtracking required. - Cache requirement objects, to improve performance reducing reparses of requirement strings. - Support editable installs for projects that have a ``pyproject.toml`` and use a build backend that supports :pep:`660`. - When a revision is specified in a Git URL, use git's partial clone feature to speed up source retrieval. - Add a ``--debug`` flag, to enable a mode that doesn't log errors and propagates them to the top level instead. This is primarily to aid with debugging pip's crashes. - If a host is explicitly specified as trusted by the user (via the --trusted-host option), cache HTTP responses from it in addition to HTTPS ones. - Present a better error message, when a ``file:`` URL is not found. - Fix the auth credential cache to allow for the case in which the index url contains the username, but the password comes from an external source, such as keyring. - Fix double unescape of HTML ``data-requires-python`` and ``data-yanked`` attributes. - New resolver: Fixes depth ordering of packages during resolution, e.g. a dependency 2 levels deep will be ordered before a dependency 3 levels deep. python-rpm-macros: Update from version 20220106.80d3756 to version 20220809.cf8a7b8 (bsc#1201041) - Pass `--ignore-installed` to `pip install` in %pyproject_install - restore end-of-line in alternative scriptlets - make python_flavored_alternatives less verbose - Move install of libalts from sciptlets to python_clone -a - hard-code %py_ver - print proper error on missing python interpreter - Update compile-macros.sh - Create python_flavored_alternatives and use for testing - Switch primary_interpreter from python38 to python310 - Avoid bashism in %() - Fix flavor executable substitution - Keep python38 as primary python3 - Add python310 to the buildset - Move python39 to the primary place in %pythons - Disable python36 flavor in Factory buildset - Add python310 flavor macros to compile set Patch Instructions: To install this SUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3302=1 - SUSE Linux Enterprise Module for Python3 15-SP4: zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2022-3302=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3302=1 Package List: - openSUSE Leap 15.4 (noarch): python-rpm-generators-20220809.cf8a7b8-150400.3.3.1 python-rpm-macros-20220809.cf8a7b8-150400.3.3.1 python310-pip-22.0.4-150400.3.3.1 - SUSE Linux Enterprise Module for Python3 15-SP4 (noarch): python310-pip-22.0.4-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python-rpm-generators-20220809.cf8a7b8-150400.3.3.1 python-rpm-macros-20220809.cf8a7b8-150400.3.3.1 References: https://bugzilla.suse.com/1201041

1 0

SUSE-RU-2022:3298-1: important: Recommended update for python-psutil
by maintenance＠opensuse.org 19 Sep '22

19 Sep '22

SUSE Recommended Update: Recommended update for python-psutil ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3298-1 Rating: important References: #1181475 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-psutil fixes the following issues: - Adopt change of used memory calculation from upstream of procps (bsc#1181475) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3298=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3298=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3298=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-3298=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3298=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3298=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3298=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3298=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python2-psutil-5.8.0-150300.3.3.2 python2-psutil-debuginfo-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python2-psutil-5.8.0-150300.3.3.2 python2-psutil-debuginfo-5.8.0-150300.3.3.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): python-psutil-debuginfo-5.8.0-150300.3.3.2 python-psutil-debugsource-5.8.0-150300.3.3.2 python3-psutil-5.8.0-150300.3.3.2 python3-psutil-debuginfo-5.8.0-150300.3.3.2 References: https://bugzilla.suse.com/1181475

1 0

SUSE-RU-2022:3299-1: important: Recommended update for Yast2
by maintenance＠opensuse.org 19 Sep '22

19 Sep '22

SUSE Recommended Update: Recommended update for Yast2 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3299-1 Rating: important References: #1195059 #1195608 #1195894 #1196674 #1198076 #1198848 #1199451 #1199480 #1199554 #1199621 #1199746 #1200155 #1200274 #1200780 #1200803 #1200964 #1201129 #1201185 #1201532 #1201747 #1201924 #1201966 #1202228 #1202479 #1202892 #1202919 SLE-22069 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Installer 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 26 recommended fixes and contains one feature can now be installed. Description: This update for Yast2 fixes the following issues: autoyast2: - Revert the modification done in version 4.3.97 running the initscripts before systed-user-sessions service again once systemd fixed logind (bsc#1195059, bsc#1200780) - Run the registration step early only on the Online installation medium which does not provide any packages. On the other media run the registration step later.Fixes crash in the SLE Micro when the AutoYaST profile enables the registration step. (bsc#1200803) yast2: - Added a parameter to `NetworkService.EnableDisableNow` method in order to ensure that the selected network service is enabled even when the selection has not been modified (bsc#1202479) - Do not ask for user input while checking file conflicts if the delayed progress popup is not shown (bsc#1201924, bsc#1202892) - Avoid build failures when packager is not available (bsc#1196674) - Show what product is being installed (bsc#1196674) - Show file conflict checking progress in delayed popup (bsc#1195608) yast2-auth-client: - Fix internal error caused by a deprecated function that was still being called (bsc#1202919) - Remove deprecated nss_ldap and pam_ldap support in favour of SSSD (bsc#1201747) - Allow to define the dnsHostName attribute when connecting to an Active Directory (bsc#1200964) yast2-fcoe-client: - Use yast2-network to write the sysconfig files, to be aware of the new connections added during the installation (bsc#1199554) yast2-firstboot: - Do not skip client for root password automatically if the user password has not been set yet (bsc#1202228) yast2-installation: - Do not use "xrdb" for setting the "Xft.dpi" value, use a specific YaST tool from the yast2-x11 package (bsc#1201532) - Install yast2-x11 only when GUI (libyui-qt) is installed, avoid installing the dependent X libraries in minimal (text mode) installation (bsc#1201966) - AutoYaST SecondStage: Revert changes introduced in 4.3.46 running the initscript service before systemd-user-sessions again once systemd patched logind (bsc#1195059, bsc#1200780) - Do not restart services when updating the package (bsc#1199480, bsc#1200274) - AutoYaST Second Stage: Added a missing dependency to the service to prevent getty-autogeneration listen on 5901 port (bsc#1199746) yast2-network: - Added a class to generate the configuration needed for a FCoE device being aware of it during the installation (bsc#1199554) - AY: Added missing route extrapara element to the networking section (bsc#1201129) - CFA NM: replace problematic characters when getting the filename for the given wireless configuration (bsc#1199451) - Allow more than 6 domains in resolver search list (bsc#1200155) yast2-nfs-client: - Fix localization of NFS Version widget values (bsc#1198076) yast2-online-update-configuration: - Reduce nesting in the "category_filter" section of the AutoYaST profile. The old (nested) format is still accepted (bsc#1198848) yast2-packager: - Fix package counters in the installation slideshow (bsc#1199621) yast2-schema-default: - Add 'extrapara' to routes in the networking section (bsc#1201129) - Support for flatten and nested "category_filter" element in the "online_update_configuration" section (bsc#1198848) yast2-schema-micro: - Add 'extrapara' to routes in the networking section (bsc#1201129) - Support for flatten and nested "category_filter" element in the "online_update_configuration" section (bsc#1198848) yast2-security: - Do not crash when reading active LSM modules returns nil (jsc#SLE-22069) yast2-update: - Use the "norecovery" mount option when searching the root partitions (bsc#1195894) yast2-users: - Fix writing ssh keys for user without specified home (bsc#1201185) yast2-x11: - Added "xftdpi" tool to not depend on xrdb (which requires the C pre-processor), this decreases the installed size (bsc#1201966, bsc#1201532) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3299=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3299=1 - SUSE Linux Enterprise Installer 15-SP4: zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2022-3299=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): yast2-4.4.52-150400.3.8.1 yast2-logs-4.4.52-150400.3.8.1 yast2-packager-4.4.32-150400.3.4.1 yast2-schema-default-4.4.14-150400.3.6.2 yast2-schema-micro-4.4.14-150400.3.6.2 yast2-update-4.4.7-150400.3.3.1 yast2-update-FACTORY-4.4.7-150400.3.3.1 yast2-users-4.4.11-150400.3.3.1 yast2-users-debuginfo-4.4.11-150400.3.3.1 yast2-users-debugsource-4.4.11-150400.3.3.1 yast2-x11-4.4.2-150400.3.3.1 yast2-x11-debuginfo-4.4.2-150400.3.3.1 yast2-x11-debugsource-4.4.2-150400.3.3.1 - openSUSE Leap 15.4 (noarch): autoyast2-4.4.39-150400.3.8.1 autoyast2-installation-4.4.39-150400.3.8.1 yast2-auth-client-4.4.4-150400.3.7.1 yast2-fcoe-client-4.4.3-150400.3.3.1 yast2-firstboot-4.4.9-150400.3.3.1 yast2-firstboot-wsl-4.4.9-150400.3.3.1 yast2-installation-4.4.56-150400.3.9.1 yast2-network-4.4.49-150400.3.6.1 yast2-nfs-client-4.4.5-150400.3.4.1 yast2-online-update-configuration-4.4.1-150400.3.10.1 yast2-security-4.4.14-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): yast2-4.4.52-150400.3.8.1 yast2-logs-4.4.52-150400.3.8.1 yast2-packager-4.4.32-150400.3.4.1 yast2-schema-default-4.4.14-150400.3.6.2 yast2-update-4.4.7-150400.3.3.1 yast2-users-4.4.11-150400.3.3.1 yast2-users-debuginfo-4.4.11-150400.3.3.1 yast2-users-debugsource-4.4.11-150400.3.3.1 yast2-x11-4.4.2-150400.3.3.1 yast2-x11-debuginfo-4.4.2-150400.3.3.1 yast2-x11-debugsource-4.4.2-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): autoyast2-4.4.39-150400.3.8.1 autoyast2-installation-4.4.39-150400.3.8.1 yast2-auth-client-4.4.4-150400.3.7.1 yast2-fcoe-client-4.4.3-150400.3.3.1 yast2-firstboot-4.4.9-150400.3.3.1 yast2-firstboot-wsl-4.4.9-150400.3.3.1 yast2-installation-4.4.56-150400.3.9.1 yast2-network-4.4.49-150400.3.6.1 yast2-nfs-client-4.4.5-150400.3.4.1 yast2-online-update-configuration-4.4.1-150400.3.10.1 yast2-security-4.4.14-150400.3.3.1 - SUSE Linux Enterprise Installer 15-SP4 (aarch64 ppc64le s390x x86_64): yast2-4.4.52-150400.3.8.1 yast2-packager-4.4.32-150400.3.4.1 yast2-users-4.4.11-150400.3.3.1 - SUSE Linux Enterprise Installer 15-SP4 (noarch): autoyast2-4.4.39-150400.3.8.1 autoyast2-installation-4.4.39-150400.3.8.1 yast2-installation-4.4.56-150400.3.9.1 References: https://bugzilla.suse.com/1195059 https://bugzilla.suse.com/1195608 https://bugzilla.suse.com/1195894 https://bugzilla.suse.com/1196674 https://bugzilla.suse.com/1198076 https://bugzilla.suse.com/1198848 https://bugzilla.suse.com/1199451 https://bugzilla.suse.com/1199480 https://bugzilla.suse.com/1199554 https://bugzilla.suse.com/1199621 https://bugzilla.suse.com/1199746 https://bugzilla.suse.com/1200155 https://bugzilla.suse.com/1200274 https://bugzilla.suse.com/1200780 https://bugzilla.suse.com/1200803 https://bugzilla.suse.com/1200964 https://bugzilla.suse.com/1201129 https://bugzilla.suse.com/1201185 https://bugzilla.suse.com/1201532 https://bugzilla.suse.com/1201747 https://bugzilla.suse.com/1201924 https://bugzilla.suse.com/1201966 https://bugzilla.suse.com/1202228 https://bugzilla.suse.com/1202479 https://bugzilla.suse.com/1202892 https://bugzilla.suse.com/1202919

1 0

SUSE-RU-2022:3300-1: important: Recommended update for gnome-shell-extension-desktop-icons
by maintenance＠opensuse.org 19 Sep '22

19 Sep '22

SUSE Recommended Update: Recommended update for gnome-shell-extension-desktop-icons ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3300-1 Rating: important References: #1199377 #1203262 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gnome-shell-extension-desktop-icons fixes the following issues: - Fix desktop icons to be Compatible with GNOME 41 (bsc#1199377, bsc#1203262) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3300=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3300=1 Package List: - openSUSE Leap 15.4 (noarch): gnome-shell-extension-desktop-icons-20.10.0-150400.4.5.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (noarch): gnome-shell-extension-desktop-icons-20.10.0-150400.4.5.1 References: https://bugzilla.suse.com/1199377 https://bugzilla.suse.com/1203262

1 0

openSUSE-SU-2022:10126-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 17 Sep '22

17 Sep '22

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10126-1 Rating: moderate References: #1202858 Cross-References: CVE-2018-25032 CVE-2021-4216 CVSS scores: CVE-2018-25032 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-25032 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-4216 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for mupdf fixes the following issues: mupdf was updated to 1.20.3: * return error, not success when unable to lock native device resource. * Bug 705620: Start journal operation instead of pushing local xref. * Ensure AndroidDrawDevice is destroyed, even upon exception. * source/pdf/pdf-clean.c: fix segv from incorrect call to fz_drop_pixmap(). * Bug 705681: Enclose code in begin/end operation. * Guard against SEGVs when calling archive functions with NULL archive. mupdf was updated to 1.20.0 (boo#1202858, CVE-2021-4216): * Experimental C# bindings * Cross compilation should no longer need a host compiler * Major additions to JNI bindings * New API to edit outline * New API to resolve and create links * New API to toggle individual layers in PDF * Layer panel in mupdf-gl * Layer option in mutool draw * New API to add a Javascript console * Console panel in mupdf-gl * Text search API extended to be able to distinguish between separate search hits * Command line tool improvements: * all: Negative page numbers to index from the last page * mutool draw: Add option to render document without text * mutool draw and convert: Support DPI option in text and HTML output * New hybrid HTML output format using "scripts/pdftohtml" script: * Graphics in a background image * Text on top * Improved WASM viewer demo * Support high DPI screens * Progressive loading * Update to zlib 1.2.12 for security fix mupdf was updated to 1.19.1: * Updated zlib to 1.2.12 due to CVE-2018-25032 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10126=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): mupdf-1.20.3-bp154.2.3.1 mupdf-devel-static-1.20.3-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-25032.html https://www.suse.com/security/cve/CVE-2021-4216.html https://bugzilla.suse.com/1202858

1 0

openSUSE-SU-2022:10125-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 17 Sep '22

17 Sep '22

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10125-1 Rating: moderate References: #1202858 Cross-References: CVE-2021-4216 CVSS scores: CVE-2021-4216 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mupdf fixes the following issues: - CVE-2021-4216: Fixed division by zero for zero width pages in muraster (boo#1202858) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10125=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): mupdf-1.12.0-bp153.2.6.1 mupdf-devel-static-1.12.0-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-4216.html https://bugzilla.suse.com/1202858

1 0

SUSE-RU-2022:3295-1: moderate: Recommended update for go
by maintenance＠opensuse.org 17 Sep '22

17 Sep '22

SUSE Recommended Update: Recommended update for go ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3295-1 Rating: moderate References: #1200441 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go fixes the following issues: - Update to current stable go1.19 (bsc#1200441) - Add define tsan_arch for s390x ppc64le new in go1.19 Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3295=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3295=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3295=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3295=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go-1.19-150000.3.26.1 go-doc-1.19-150000.3.26.1 - openSUSE Leap 15.4 (aarch64 x86_64): go-race-1.19-150000.3.26.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go-1.19-150000.3.26.1 go-doc-1.19-150000.3.26.1 - openSUSE Leap 15.3 (aarch64 x86_64): go-race-1.19-150000.3.26.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): go-1.19-150000.3.26.1 go-doc-1.19-150000.3.26.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 x86_64): go-race-1.19-150000.3.26.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): go-1.19-150000.3.26.1 go-doc-1.19-150000.3.26.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 x86_64): go-race-1.19-150000.3.26.1 References: https://bugzilla.suse.com/1200441

1 0

openSUSE-RU-2022:10124-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 17 Sep '22

17 Sep '22

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10124-1 Rating: moderate References: #1194126 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: - Remove package virtualbox-guest-x11, which is no longer needed. - Fix screen resizing under Wayland (boo#1194126 and boo#1194126) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-10124=1 Package List: - openSUSE Leap 15.4 (noarch): virtualbox-guest-desktop-icons-6.1.36-lp154.2.10.1 virtualbox-guest-source-6.1.36-lp154.2.10.1 virtualbox-host-source-6.1.36-lp154.2.10.1 - openSUSE Leap 15.4 (x86_64): python3-virtualbox-6.1.36-lp154.2.10.1 python3-virtualbox-debuginfo-6.1.36-lp154.2.10.1 virtualbox-6.1.36-lp154.2.10.1 virtualbox-debuginfo-6.1.36-lp154.2.10.1 virtualbox-debugsource-6.1.36-lp154.2.10.1 virtualbox-devel-6.1.36-lp154.2.10.1 virtualbox-guest-tools-6.1.36-lp154.2.10.1 virtualbox-guest-tools-debuginfo-6.1.36-lp154.2.10.1 virtualbox-kmp-debugsource-6.1.36-lp154.2.10.1 virtualbox-kmp-default-6.1.36_k5.14.21_150400.24.18-lp154.2.10.1 virtualbox-kmp-default-debuginfo-6.1.36_k5.14.21_150400.24.18-lp154.2.10.1 virtualbox-qt-6.1.36-lp154.2.10.1 virtualbox-qt-debuginfo-6.1.36-lp154.2.10.1 virtualbox-vnc-6.1.36-lp154.2.10.1 virtualbox-websrv-6.1.36-lp154.2.10.1 virtualbox-websrv-debuginfo-6.1.36-lp154.2.10.1 References: https://bugzilla.suse.com/1194126

1 0

SUSE-RU-2022:3296-1: moderate: Recommended update for nss_synth
by maintenance＠opensuse.org 17 Sep '22

17 Sep '22

SUSE Recommended Update: Recommended update for nss_synth ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3296-1 Rating: moderate References: SLE-22585 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for nss_synth fixes the following issues: - Support running 389-ds with bare uid/gid (non-root) in containers. (jsc#SLE-22585) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3296=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3296=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nss_synth-0.1.0~git0.7c23049-150400.9.5.1 nss_synth-debuginfo-0.1.0~git0.7c23049-150400.9.5.1 nss_synth-debugsource-0.1.0~git0.7c23049-150400.9.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): nss_synth-0.1.0~git0.7c23049-150400.9.5.1 nss_synth-debuginfo-0.1.0~git0.7c23049-150400.9.5.1 nss_synth-debugsource-0.1.0~git0.7c23049-150400.9.5.1 References:

1 0

openSUSE-SU-2022:10123-1: important: Security update for chromium
by opensuse-security＠opensuse.org 17 Sep '22

17 Sep '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10123-1 Rating: important References: #1203419 Cross-References: CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 105.0.5195.127 (boo#1203419): * CVE-2022-3195: Out of bounds write in Storage * CVE-2022-3196: Use after free in PDF * CVE-2022-3197: Use after free in PDF * CVE-2022-3198: Use after free in PDF * CVE-2022-3199: Use after free in Frames * CVE-2022-3200: Heap buffer overflow in Internals * CVE-2022-3201: Insufficient validation of untrusted input in DevTools * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10123=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10123=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-105.0.5195.127-bp154.2.29.1 chromedriver-debuginfo-105.0.5195.127-bp154.2.29.1 chromium-105.0.5195.127-bp154.2.29.1 chromium-debuginfo-105.0.5195.127-bp154.2.29.1 - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-105.0.5195.127-bp153.2.122.1 chromium-105.0.5195.127-bp153.2.122.1 References: https://www.suse.com/security/cve/CVE-2022-3195.html https://www.suse.com/security/cve/CVE-2022-3196.html https://www.suse.com/security/cve/CVE-2022-3197.html https://www.suse.com/security/cve/CVE-2022-3198.html https://www.suse.com/security/cve/CVE-2022-3199.html https://www.suse.com/security/cve/CVE-2022-3200.html https://www.suse.com/security/cve/CVE-2022-3201.html https://bugzilla.suse.com/1203419

1 0