June 2023 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2023:0134-1: moderate: Recommended update for perl-SemVer
by maintenance＠opensuse.org 27 Jun '23

27 Jun '23

openSUSE Recommended Update: Recommended update for perl-SemVer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0134-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for perl-SemVer fixes the following issues: - Initial shipment. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-134=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): perl-SemVer-0.10.0-bp154.2.1 References:

1 0

openSUSE-RU-2023:0133-1: moderate: Recommended update for git-subrepo
by maintenance＠opensuse.org 26 Jun '23

26 Jun '23

openSUSE Recommended Update: Recommended update for git-subrepo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0133-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for git-subrepo fixes the following issues: Update to 0.4.6: * Removes stale worktrees after using the push command Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-133=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): git-subrepo-0.4.6-bp155.2.3.1 git-subrepo-bash-completion-0.4.6-bp155.2.3.1 git-subrepo-zsh-completion-0.4.6-bp155.2.3.1 References:

1 0

openSUSE-SU-2023:0126-1: moderate: Security update for syncthing
by opensuse-security＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Security Update: Security update for syncthing ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0126-1 Rating: moderate References: #1212085 Cross-References: CVE-2022-46165 CVSS scores: CVE-2022-46165 (NVD) : 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVE-2022-46165 (SUSE): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for syncthing fixes the following issues: - Update to 1.13.5 * This release fixes CVE-2022-46165 ��Cross-site Scripting (XSS) in Web GUI�� * Bugfixes: #8503: "syncthing cli config devices add" reflect error when using --addresses flag #8764: Ignore patterns creating during folder addition are not loaded #8778: Tests fail on Windows with Go 1.20 #8779: Test cleanup fails all model tests on Windows on Go 1.20 #8859: Incorrect handling of path for auto accepted folder * Other issues: #8799: "fatal error: checkptr: converted pointer straddles multiple allocations" in crypto tests - Update to 1.23.4 - Bugfixes: #8851: "Running global migration to fix encryption file sizes" on every start - Update to 1.23.3 * Bugfixes: #5408: Selection of time in versions GUI not possible without editing the string inside the textfield #8277: Mutual encrypted sharing doesn't work (both sides with password) #8556: Increased file size when sharing between encrypted devices #8599: Key generation at connect time is slow for encrypted connections * Enhancements: #7859: Allow sub-second watcher delay (use case: remote development) * Other issues: #8828: cmd/stdiscosrv: TestDatabaseGetSet flake - Adding a desktop file for the Web UI - Update to 1.23.2 * Bugfixes: #8749: Relay listener does not restart sometimes * Enhancements: #8660: GUI editor for xattr filter patterns #8781: gui: Remove duplicate Spanish translation * Other issues: #8768: Update quic-go for Go 1.20 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-126=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): syncthing-1.23.5-bp155.2.3.1 syncthing-relaysrv-1.23.5-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-46165.html https://bugzilla.suse.com/1212085

1 0

openSUSE-SU-2023:0131-1: critical: Security update for chromium
by opensuse-security＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0131-1 Rating: critical References: #1212302 Cross-References: CVE-2023-3214 CVE-2023-3215 CVE-2023-3216 CVE-2023-3217 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 114.0.5735.133 (boo#1212302): - CVE-2023-3214: Use after free in Autofill payments - CVE-2023-3215: Use after free in WebRTC - CVE-2023-3216: Type Confusion in V8 - CVE-2023-3217: Use after free in WebXR - Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-131=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-114.0.5735.133-bp155.2.7.1 chromium-114.0.5735.133-bp155.2.7.1 References: https://www.suse.com/security/cve/CVE-2023-3214.html https://www.suse.com/security/cve/CVE-2023-3215.html https://www.suse.com/security/cve/CVE-2023-3216.html https://www.suse.com/security/cve/CVE-2023-3217.html https://bugzilla.suse.com/1212302

1 0

openSUSE-RU-2023:0130-1: moderate: Recommended update for tesseract-ocr
by maintenance＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Recommended Update: Recommended update for tesseract-ocr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0130-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for tesseract-ocr fixes the following issues: update to 5.3.1 - Build AVX2 enabled hwcaps library for x86_64-v3 - Define TESSDATA_PREFIX during build to point at /usr/share (since it's the prefix) rather than package name, tessdata suffix is automatically added. - Move unversioned libraries to main package - Update to version 5.3.0: * Fix memory issues in ScrollView::MessageReceiver * autotools: Add rule for svpaint executable * Replace call of exit function by return statement in main function * Fix the build on CodeQL/Analyze by @arseniy-sonar in #3888 * CI: Remove Ubuntu 18.04 * configure.ac: fix build on aarch64_be * SW CI: Add paths filter * Create .mailmap * Fix tesseract.pc from cmake to match autotools * Update README.md * Fixed 2 errors * fix issue #3940 - remove colormap before thresholding * Update upload-artifact action * Update checkout action to version 3 * Fix Markdownlint * Fix broken links in CONTRIBUTING.md * pdfrenderer.cpp: Ignore non-text blocks * lstm.train: allow .box from .raw.png too * Fix a number of performance issues (reported by Coverity Scan) * Fix training tools for legacy engine (issue #3925) * Fix function tesseract::WriteFeature (issue #3925) * Modernize function ObjectCache::DeleteUnusedObjects (fix issue with s�� * More fixes for issue #3925 - Fixed packaging to include missing shared libs: * libcommon_training.so * libunicharset_training.so - Update to version 5.2.0: * Improvements and fixes for continuous integration, autoconf and cmake builds * Set /Os for some 32 bit MS compilers * Improve comments and other documentation * Add initial support for Intel AVX512F * Fix for very large PDF files on 32 bit hosts * Fix NEON detection on FreeBSD * Fix regression with UZN files * Fix calling delete[] for memory allocated by malloc in C API * Add an API function to init tesseract with traineddata from memory * Replace direct access to Leptonica internal data structures by function calls and support latest releases of Leptonica. * Replace std::regex by std::string functions. * Use compiled-in TESSDATA_PREFIX also on Windows * Add new parameter 'invert_threshold', change the default threshold from 0.5 to 0.7 and mark parameter 'tessedit_do_invert' as deprecated - Update to version 5.1.0: * Handle image and line regions in output formats ALTO, hOCR and text. * New parameter curl_timeout for curl_easy_setop. * Build fixes and improvements. * Catch nullptr in PageIterator::Orientation to improve robustness. * Remove unused code. - Update to version 5.0.1: * Add SPDX-License-Identifier to public include files. * Support redirections when running OCR on a URL. * Lots of fixes and improvements for cmake builds. * Distributions should use the autoconf build. * Fix broken msys2 build with gcc 11. * Fix parameter certainty_scale (was duplicated). * Fix some compiler warnings and clean code. * Correctly detect amd64 and i386 on FreeBSD. * Add libarchive and libcurl in continuous integration actions. * Update submodule googletest to release v1.11.0. - Update to version 5.0.0: * Enable fast float32 LSTM by default * Switch to NFC normalisation everywhere * Remove banner message * Disable music staff detection and removal * Add new command line option --loglevel * Fix regression for OCR with more than one model file * Optimizations * Improve training messages * Add RowAttributes getter to PageIterator * Limit BCER to interval [0,1] * Improved build process * Cleaned code - Update to version 4.1.3: * Fix broken autoconf build - Update to version 4.1.2: * Allow line images with larger width for training * Bugfixes * Build updates and fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-130=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): libtesseract5-5.3.1-bp155.3.3.1 tesseract-ocr-5.3.1-bp155.3.3.1 tesseract-ocr-devel-5.3.1-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libtesseract5-64bit-5.3.1-bp155.3.3.1 References:

1 0

openSUSE-RU-2023:0106-1: moderate: Recommended update for rpmlint-mini
by maintenance＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Recommended Update: Recommended update for rpmlint-mini ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0106-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rpmlint-mini is a test update for Leap 15.5. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-106=1 Package List: - openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64): rpmlint-mini-1.10-lp155.4.4.1 rpmlint-mini-debuginfo-1.10-lp155.4.4.1 rpmlint-mini-debugsource-1.10-lp155.4.4.1 References:

1 0

openSUSE-RU-2023:0104-1: moderate: Recommended update for python-usbsdmux
by maintenance＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Recommended Update: Recommended update for python-usbsdmux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0104-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-usbsdmux fixes the following issues: - Update to 0.2.1. Main changes: * cli: Handle well-known Exceptions * usb2642i2c: Do not create if device node does not exist * commandline: 'get' must respect hardware signal priority - Main changes in 0.2.0: * Remove the service/client split and access /dev/sg* directly * usb2642i2c: Fix sg device open arguments * Simplify the read-only to read-write mode transition * usbsdmux: honor wait argument in mode_disconnect() * main/service: add get action * usdbsdmux: set/enable default output values only for writes - Move udev to a separate package - Use update-alternatives - Add udev rule to have /dev/usb-sd-mux/id-<SERIAL> links - Version 0.1.8 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-104=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): python3-usbsdmux-0.2.1-bp155.2.1 usbsdmux-udev-0.2.1-bp155.2.1 References:

1 0

openSUSE-RU-2023:0113-1: moderate: Recommended update for vectorscan
by maintenance＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Recommended Update: Recommended update for vectorscan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0113-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for vectorscan fixes the following issues: Update to 5.4.9: * Major change: Enable SVE & SVE2 builds and make it a supported architecture! (thanks to @abondarev84) * Fix various clang-related bugs * Fix Aarch64 bug in Parser.rl because of char signedness. Make unsigned char the default in the Parser for all architectures. * Fix Power bug, multiple tests were failing. * C++20 related change, use prefixed assume_aligned to avoid conflict with C++20 std::assume_aligned. - devel package must require libhs%{sover}%{so_suffix}%{sover} Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-113=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): libhs5-vectorscan5-5.4.9-bp155.4.3.8 vectorscan-devel-5.4.9-bp155.4.3.8 vectorscan-examples-5.4.9-bp155.4.3.8 References:

1 0

openSUSE-RU-2022:10111-1: moderate: Recommended update for rpmlint-mini
by maintenance＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Recommended Update: Recommended update for rpmlint-mini ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10111-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rpmlint-mini is a test update for 15.5. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2022-10111=1 Package List: - openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64): rpmlint-mini-1.10-lp155.4.2.1 rpmlint-mini-debuginfo-1.10-lp155.4.2.1 rpmlint-mini-debugsource-1.10-lp155.4.2.1 References:

1 0

openSUSE-RU-2023:0120-1: moderate: Recommended update for openSUSE-build-key
by maintenance＠opensuse.org 16 Jun '23

16 Jun '23

openSUSE Recommended Update: Recommended update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0120-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - gpg-pubkey-3fa1d6ce-63c9481c.asc: new SLES 15 4k RSA key. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-2023-120=1 Package List: - openSUSE Leap 15.5 (noarch): openSUSE-build-key-1.0-lp155.7.3.1 References:

1 0