<div class="container">
<h1>Recommended update for libsass</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2023:2101-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1201074">#1201074</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1210890">#1210890</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">openSUSE Leap 15.4</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.3</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.4</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Manager Proxy 4.3</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.3</li>
<li class="list-group-item">SUSE Manager Server 4.3</li>
<li class="list-group-item">SUSE Package Hub 15 15-SP4</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that has two recommended fixes can now be installed.</p>
<h2>Description:</h2>
<p>libsass has received update for:</p>
<ul>
<li>Update libsass to fix Greybird Geeko theme build failures (bsc#1201074)</li>
</ul>
<p>Update version to 3.6.5 (bsc#1201074):</p>
<ul>
<li>Fix extend edge case going endlessly</li>
<li>Fix source-maps and how we count unicode characters</li>
<li>Fix seed generator if std::random_device fails</li>
<li>Fix url() containing exclamation mark causing an error</li>
<li>Fix Offset initialization when end was not given</li>
<li>Fix obvious backporting error in pseudo extend</li>
<li>Fix obvious identical subexpressions in op_color_number</li>
<li>Fix edge case regarding unit-less number equality as object keys</li>
<li>Revert compound re-ordering for non extended selectors</li>
<li>Prevent compiler warning about unnecessary copy</li>
</ul>
<p>Update to v3.6.4:</p>
<ul>
<li>Fix parenthesization for selector schema and real parents</li>
<li>Add deprecation warning for global variable creation</li>
<li>Ensure correct output order of compound selectors</li>
<li>Handle loaded source code as shared objects</li>
<li>New custom memory allocator - disabled for now</li>
<li>Add back C-API getters for plugin paths</li>
<li>Fix abspath handling on windows without directory</li>
<li>Fix various edge case crashes</li>
<li>Fix segfault on directive ruleset</li>
<li>Fix heap-buffer-overflow in lexer</li>
<li>Fix stack-overflow in parser</li>
<li>Fix memory leak in parser</li>
<li>Fix memory leak in evaluation</li>
<li>Fix memory handling edge case</li>
<li>Fix some null pointer access crashes</li>
<li>Preparations for ongoing refactoring</li>
</ul>
<p>Update to v3.6.3:</p>
<ul>
<li>Fix compound extend warning</li>
<li>Fix extend being stuck in endless loop</li>
<li>Fix various edge-case segfault crashes</li>
<li>Extend error_src lifetime on c-api context</li>
<li>Fix memory leak in permutation function</li>
<li>Preserve indentation in nested mode</li>
</ul>
<p>Update to v3.6.2:</p>
<ul>
<li>Improve pseudo selector handling</li>
<li>Code improvements</li>
<li>Fix various functions arguments</li>
<li>Fix "call" for $function</li>
<li>Check weight argument on invert call</li>
<li>Improve makefile to use dylib extension on MacOS</li>
<li>Fix bug in scale-color with positive saturation</li>
<li>Minor API documentation improvements</li>
<li>Fix selector isInvisible logic</li>
<li>Fix evaluation of unary expressions in loops</li>
<li>Fix attribute selector equality with modifiers </li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE Moderate update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.4
<br/>
<code>zypper in -t patch openSUSE-SLE-15.4-2023-2101=1</code>
</li>
<li class="list-group-item">
SUSE Package Hub 15 15-SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2101=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libsass-3_6_5-1-debuginfo-3.6.5-150200.4.5.1</li>
<li>libsass-3_6_5-1-3.6.5-150200.4.5.1</li>
<li>libsass-debugsource-3.6.5-150200.4.5.1</li>
<li>libsass-devel-3.6.5-150200.4.5.1</li>
</ul>
</li>
<li>
SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libsass-3_6_5-1-debuginfo-3.6.5-150200.4.5.1</li>
<li>libsass-3_6_5-1-3.6.5-150200.4.5.1</li>
<li>libsass-debugsource-3.6.5-150200.4.5.1</li>
<li>libsass-devel-3.6.5-150200.4.5.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1201074">https://bugzilla.suse.com/show_bug.cgi?id=1201074</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1210890">https://bugzilla.suse.com/show_bug.cgi?id=1210890</a>
</li>
</ul>
</div>