SUSE-RU-2021:1414-1: important: Recommended update for boost-legacy

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for boost-legacy
______________________________________________________________________________

Announcement ID:    SUSE-RU-2021:1414-1
Rating:             important
References:         #1006584 #1038083 #1076640 #1082318 #1175886 
                    #401964 #439805 #457699 #461372 #477603 #479659 
                    #544958 #621140 #655747 #714373 #765443 #951902 
                    #958150 #994378 #994381 #994382 #994383 #996917 
                    ECO-3147 SLE-17304 
Affected Products:
                    SUSE Linux Enterprise Module for Legacy Software 15-SP2
______________________________________________________________________________

   An update that solves one vulnerability, contains two
   features and has 22 fixes is now available.

Description:

   This update for boost-legacy fixes the following issues:


   Create a new boost-legacy package with version 1.66.0. (bsc#1175886,
   jsc#SLE-17304, jsc#ECO-3147)

   - Remove duplicate license package that we get from original Boost
   - Add a backport of `Boost.Optional::has_value()` for LibreOffice
   - Use `%license` instead of `%doc` (bsc#1082318)
   - Multibuild requires versioned `Name: tag` . (bsc#1076640)

   Changes in version 1.66.0:

   - `Beast`: new portable HTTP, WebSocket and network operations using
     `Boost.Asio`. Header-only library.
   - `Callable Traits`: new library and successor to `Boost.FunctionTypes`.
     Header-only library.
   - `Mp11:` new metaprogramming library
   - ` Asio`:
      - implemented interface changes to reflect the Networking TS (N4656)
      - functions and classes that have been superseded by Networking TS
        functionality have been deprecated.
      - added support for customized handler tracking
      - removed previously deprecated functions
   - `Atomic`: improved compatibility with GCC 7. 128-bit operations on
     `x86_64` no longer require linking with compiled library.
   - `DateTime`: Fixed an integral overflow that could cause incorrect
     results when adding or subtracting many years from a date.
   - `Format`: New format specifiers added and volatile arguments can not be
     safely used with operator`%`
   - `Fusion`:
      - fix compile error with `std::array`
      - remove circular preprocessor include
   - `PolyCollection`: backported to GCC 4.8 and 4.9 with some limitations
   - `Uuid`: added `RTF-4122` namespaces in `boost::uuids::ns`


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Legacy Software 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Legacy-15-SP2-2021-1414=1



Package List:

   - SUSE Linux Enterprise Module for Legacy Software 15-SP2 (aarch64 ppc64le s390x x86_64):

      libboost_locale_legacy-1.66.0-1.4.1
      libboost_locale_legacy-debuginfo-1.66.0-1.4.1
      libboost_regex_legacy-1.66.0-1.4.1
      libboost_regex_legacy-debuginfo-1.66.0-1.4.1


References:

   https://www.suse.com/security/cve/CVE-2008-0171.html
   https://bugzilla.suse.com/1006584
   https://bugzilla.suse.com/1038083
   https://bugzilla.suse.com/1076640
   https://bugzilla.suse.com/1082318
   https://bugzilla.suse.com/1175886
   https://bugzilla.suse.com/401964
   https://bugzilla.suse.com/439805
   https://bugzilla.suse.com/457699
   https://bugzilla.suse.com/461372
   https://bugzilla.suse.com/477603
   https://bugzilla.suse.com/479659
   https://bugzilla.suse.com/544958
   https://bugzilla.suse.com/621140
   https://bugzilla.suse.com/655747
   https://bugzilla.suse.com/714373
   https://bugzilla.suse.com/765443
   https://bugzilla.suse.com/951902
   https://bugzilla.suse.com/958150
   https://bugzilla.suse.com/994378
   https://bugzilla.suse.com/994381
   https://bugzilla.suse.com/994382
   https://bugzilla.suse.com/994383
   https://bugzilla.suse.com/996917