openSUSE Updates April 2023

updates@lists.opensuse.org

4 participants
20 discussions

openSUSE-RU-2023:0100-1: moderate: Recommended update for libcpuid
by maintenance＠opensuse.org 30 Apr '23

30 Apr '23

openSUSE Recommended Update: Recommended update for libcpuid ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0100-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: libcpuid was updated to fix the following issues: Update to version 0.6.3: * Support for Intel Pentium and Celeron for Alder Lake-S * Support for Intel Alder Lake-HX * Support for Intel Alder Lake-X * Fix detection of Intel Alder Lake-P * Fix infinite loop in set_cpu_affinity() on macOS * Fix a misprint of extended CPUID in cpuid_basic_identify() * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184) * Query CPU info at least once even if set_cpu_affinity() fails * Support for AMD 19h family MSRs * Fix detection of Intel Core i5 Lynnfield * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188) * Support for Intel Alder Lake-N * Support for AMD Rembrandt with Radeon Graphics * Support for Intel Raptor Lake-S with "Golden Cove" cores * Support for Intel Raptor Lake-P * Support for Intel Raptor Lake-U * Support for Intel Rocket Lake-E update to 0.6.2: * Support for AMD Raphael * Support for AMD Dali * Support for AMD Van Gogh * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172) * Remove AMD Warhol from DB (Zen3+ cancelled) * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175) * Fix shared library symlinks with CMake (#174) * Support for Intel Raptor Lake-S * Fix segmentation fault in cpu_identify_all() for single-core CPUs * Support for Intel Penryn L * Support for Intel Tremont * Support for AMD Mendocino * Support for Intel Ice Lake (Xeon-D) * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S) * Support for AMD Athlon 64 Sherman update to 0.6.0: * Support for AMD Rembrandt * Support for AMD Warhol * Remove Debian package from source tree (#165) * Fix build under Clang 15 (#167) * Support for AMD Athlon Godavari * Support for hybrid CPU like Intel Alder Lake (#166) * Detect presence of hypervisor (#169) * Decode deterministic cache info for AMD CPUs (#168) * Add cache instances field in cpu_id_t and system_id_t (#168) * Support AMD Bald Eagle * Support for more AMD Godavari (Athlon) * Rename AMD Bulldozer to Zambezi * Support for AMD Interlagos * Support for AMD Abu Dhabi * Support for AMD Beema * Support for AMD Steppe Eagle * Support for more AMD Kabini (Sempron + Athlon) * Improve msr_serialize_raw_data() * Support for AMD Zen 2 custom APU for Steam Deck Update to version 0.5.1+git.1644144775: * Tests: add more Zen2 tests from InstLatx64 * DB: add Lucienne * Report memory allocation failures without segfaulting. (#160) * Don't link with msrdriver.c on non-Windows platform. (#159) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-100=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le x86_64): libcpuid-devel-0.6.3-bp154.2.3.1 libcpuid-tools-0.6.3-bp154.2.3.1 libcpuid16-0.6.3-bp154.2.3.1 References:

1 0

openSUSE-RU-2023:0099-1: moderate: Recommended update for spotify-easyrpm
by maintenance＠opensuse.org 27 Apr '23

27 Apr '23

openSUSE Recommended Update: Recommended update for spotify-easyrpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0099-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for spotify-easyrpm fixes the following issues: - Snap package no longer includes share/doc directory. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-99=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): spotify-easyrpm-3.0.4-bp154.2.3.1 References:

1 0

openSUSE-RU-2023:0098-1: moderate: Recommended update for gn, re2
by maintenance＠opensuse.org 27 Apr '23

27 Apr '23

openSUSE Recommended Update: Recommended update for gn, re2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0098-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gn, re2 fixes the following issues: Changes in gn: - Bump Leap's GCC version to 12 to align with the other Chromium tools - Exclude ppc - it doesn't build Changes in re2: - Require GCC 12 on Leap due to code containing speed ups which require newer standards - Allow tests to fail - they fail too often - update to 2023-03-01: * changes for other platforms - update to 2023-02-01: * improved support for ICU - build with ICU - update to 2022-12-01: * Update to Unicode 15.0.0 data * cmake install now installs the pkg-config file - update to 2022-06-01: * switch to cxx_std_11 and other developer visible fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-98=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): gn-0.20210811-bp154.3.3.1 libre2-10-20230301-bp154.9.3.1 libre2-10-debuginfo-20230301-bp154.9.3.1 re2-debugsource-20230301-bp154.9.3.1 re2-devel-20230301-bp154.9.3.1 - openSUSE Backports SLE-15-SP4 (aarch64_ilp32): libre2-10-64bit-20230301-bp154.9.3.1 libre2-10-64bit-debuginfo-20230301-bp154.9.3.1 - openSUSE Backports SLE-15-SP4 (x86_64): libre2-10-32bit-20230301-bp154.9.3.1 libre2-10-32bit-debuginfo-20230301-bp154.9.3.1 References:

1 0

openSUSE-SU-2023:0097-1: important: Security update for stellarium
by opensuse-security＠opensuse.org 27 Apr '23

27 Apr '23

openSUSE Security Update: Security update for stellarium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0097-1 Rating: important References: #1209285 Cross-References: CVE-2023-28371 CVSS scores: CVE-2023-28371 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for stellarium fixes the following issues: - CVE-2023-28371: Fixed arbitrary file write issue. (boo#1209285) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-97=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): stellarium-0.21.2-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-28371.html https://bugzilla.suse.com/1209285

1 0

openSUSE-SU-2023:0096-1: important: Security update for liferea
by opensuse-security＠opensuse.org 27 Apr '23

27 Apr '23

openSUSE Security Update: Security update for liferea ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0096-1 Rating: important References: #1193579 #1209190 Cross-References: CVE-2023-1350 CVSS scores: CVE-2023-1350 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-1350 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: liferea was updated to version 1.14.1: + Fix CVE-2023-1350 - Remote code execution on feed enrichment (boo#1209190). Update to version 1.14.0: + New 'Reader mode' preference that allows stripping all web content + Implement support for Webkits Intelligent Tracking Protection + New progress bar when loading websites + Youtube videos from media:video can be embedded now with a click on the video preview picture. + Changes to UserAgent handling: same UA is now used for both feed fetching and internal browsing. + New view mode 'Automatic' which switches between 'Normal' and 'Wide' mode based on the window proportions. + Liferea now supports the new GTK dark theme logic, where in the GTK/GNOME preferences you define wether you "prefer" dark mode or light mode + Favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons + Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. + Make several plugins support gettext + Allow mutiple feed in same libnotify notification + Redesign of the update message in the status bar. It now shows a update counter of the feeds being in update. + You can now export a feed to XML file + Added an option to show news bins in reduced feed list + Added menu option to send item per mail + Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed + Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings + Implement support for subscribing to HTML5 websites + Support for media:description field of Youtube feeds + Improve HTML5 extraction: extract main tag if it exists and no article was found. + Execute feed pipe/filter commands asynchronously + Better explanation of feed update errors. + Added generic Google Reader API support (allows using FeedHQ, FreshRSS, Miniflux...) + Now allow converting TinyTinyRSS subscriptions to local subscriptions + New search folder rule to match podcasts + New search folder rule to match headline authors + New search folder rule to match subscription source + New search folder rule to match parent folder name + New search folder property that allows hiding read items + Now search folders are automatically rebuild when rules are changed + Added new plugin 'add-bookmark-site' that allows to configure a custom bookmarking site. + Added new plugin 'getfocus' that adds transparency on the feed list when it is not focussed. + Trayicon plugin has now a configuration option to change the behaviour when closing Liferea. + Trayicon plugin has now an option to disable minimizing to tray + New hot key Ctrl-D for 'Open in External Browser' + New hot key F10 for headerbar plugin to allow triggering the hamburger menu + New hot key Ctrl-0 to reset zoom + New hot key Ctrl-O to open enclosures + Fix hidden panes, Liferea will never allow the panes to be smaller than 5% in height or width + Wait for network to be fully available before updating + 2-pane mode was removed + Dropped CDF channel support + Dropped Atom 0.2/0.3 (aka Pie) support + Dropped blogChannel namespace support + Dropped photo namespace support - Require python3-cairo; needed for tray icon (boo#1193579). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-96=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): liferea-1.14.1-bp154.2.3.1 liferea-debuginfo-1.14.1-bp154.2.3.1 liferea-debugsource-1.14.1-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): liferea-lang-1.14.1-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-1350.html https://bugzilla.suse.com/1193579 https://bugzilla.suse.com/1209190

1 0

openSUSE-RU-2023:0095-1: moderate: Recommended update for openSUSE-build-key
by maintenance＠opensuse.org 27 Apr '23

27 Apr '23

openSUSE Recommended Update: Recommended update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0095-1 Rating: moderate References: Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - Added 2023 opensuse container key 4096bit RSA key. - Added 2023 opensuse container key in PEM format to /usr/share/pki/containers/ for use by podman or sigstore - Remove the SLE11 1024bit RSA key and obsolete it to remove it from systems. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-95=1 Package List: - openSUSE Leap 15.4 (noarch): openSUSE-build-key-1.0-lp154.3.6.1 References:

1 0

openSUSE-RU-2023:0094-1: moderate: Recommended update for webcamoid
by maintenance＠opensuse.org 25 Apr '23

25 Apr '23

openSUSE Recommended Update: Recommended update for webcamoid ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0094-1 Rating: moderate References: #1210739 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: webcamoid was rebuilt against current ffmpeg. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-94=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le x86_64): webcamoid-9.0.0-bp154.2.2.1 References: https://bugzilla.suse.com/1210739

1 0

openSUSE-SU-2023:0093-1: important: Security update for chromium
by opensuse-security＠opensuse.org 24 Apr '23

24 Apr '23

1 0

openSUSE-SU-2023:0092-1: important: Security update for chromium
by opensuse-security＠opensuse.org 19 Apr '23

19 Apr '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0092-1 Rating: important References: #1210126 #1210478 Cross-References: CVE-2023-1810 CVE-2023-1811 CVE-2023-1812 CVE-2023-1813 CVE-2023-1814 CVE-2023-1815 CVE-2023-1816 CVE-2023-1817 CVE-2023-1818 CVE-2023-1819 CVE-2023-1820 CVE-2023-1821 CVE-2023-1822 CVE-2023-1823 CVE-2023-2033 CVSS scores: CVE-2023-1810 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-1811 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-1812 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-1813 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-1814 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-1815 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-1816 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-1817 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-1818 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-1819 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2023-1820 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-1821 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-1822 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-1823 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-2033 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 112.0.5615.121: * CVE-2023-2033: Type Confusion in V8 (boo#1210478) - Chromium 112.0.5615.49 * CSS now supports nesting rules. * The algorithm to set the initial focus on <dialog> elements was updated. * No-op fetch() handlers on service workers are skipped from now on to make navigations faster * The setter for document.domain is now deprecated. * The recorder in devtools can now record with pierce selectors. * Security fixes (boo#1210126): * CVE-2023-1810: Heap buffer overflow in Visuals * CVE-2023-1811: Use after free in Frames * CVE-2023-1812: Out of bounds memory access in DOM Bindings * CVE-2023-1813: Inappropriate implementation in Extensions * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing * CVE-2023-1815: Use after free in Networking APIs * CVE-2023-1816: Incorrect security UI in Picture In Picture * CVE-2023-1817: Insufficient policy enforcement in Intents * CVE-2023-1818: Use after free in Vulkan * CVE-2023-1819: Out of bounds read in Accessibility * CVE-2023-1820: Heap buffer overflow in Browser History * CVE-2023-1821: Inappropriate implementation in WebShare * CVE-2023-1822: Incorrect security UI in Navigation * CVE-2023-1823: Inappropriate implementation in FedCM - Chromium 111.0.5563.147: * nth-child() validation performance regression for SAP apps Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-92=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-112.0.5615.121-bp154.2.79.1 chromium-112.0.5615.121-bp154.2.79.1 References: https://www.suse.com/security/cve/CVE-2023-1810.html https://www.suse.com/security/cve/CVE-2023-1811.html https://www.suse.com/security/cve/CVE-2023-1812.html https://www.suse.com/security/cve/CVE-2023-1813.html https://www.suse.com/security/cve/CVE-2023-1814.html https://www.suse.com/security/cve/CVE-2023-1815.html https://www.suse.com/security/cve/CVE-2023-1816.html https://www.suse.com/security/cve/CVE-2023-1817.html https://www.suse.com/security/cve/CVE-2023-1818.html https://www.suse.com/security/cve/CVE-2023-1819.html https://www.suse.com/security/cve/CVE-2023-1820.html https://www.suse.com/security/cve/CVE-2023-1821.html https://www.suse.com/security/cve/CVE-2023-1822.html https://www.suse.com/security/cve/CVE-2023-1823.html https://www.suse.com/security/cve/CVE-2023-2033.html https://bugzilla.suse.com/1210126 https://bugzilla.suse.com/1210478

1 0

openSUSE-RU-2023:0091-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 15 Apr '23

15 Apr '23

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0091-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts fixes the following issues: fwts was updated to version 23.03.00: * auto-packager: mkpackage: add build depend dh-dkms for lunar * dmicheck: fix the print format * dmicheck: update for supporting DMI version to 3.6 * dmicheck: update the device type field for type 41 * dmicheck: update the interface field for type 21 * dmicheck: add some bit 0 reserved checks for type 17 * dmicheck: modify the memory type range check for type 17 * dmicheck: add bit 0 reserved check of the processor characteristics for type 4 * dmicheck: add status check for type 4 * dmicheck: add processor family check for type 4 * dmicheck: fix the extended bios ROM size bit check of type 0 * dmicheck: fix the wrong slot height value range * dmicheck: fix the length check error for type 9 * debian: update copyright * acpi: method: NIH method output buffer should be 4 bytes * ebbr: add some tests to ebbr option * sbbr: add esrt and uefibootpath tests to sbbr option * Add support for 64 bit LoongArch compilation * libfwtsiasl: fix undefined symbols in shared library Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-91=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 x86_64): fwts-23.03.00-bp154.2.15.1 References:

3 2

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

openSUSE Updates April 2023