Pull request for security update for trivy

PR: products/PackageHub!224

.gitea/issue_template/add_package.md

@@ -0,0 +1,19 @@
+---
+
+name: "Add a package to Leap 16.0 and Package Hub"
+about: "If you want to add a new package to Leap 16.0 and Package Hub"
+title: "[ADD] <package name>"
+ref: "leap-16.0"
+assignees: []
+labels: 
+
+- new_package
+
+---
+
+This is where you add a new package to Leap-16.0 and Package Hub Please replace and specify on one line. You can include any relevant Bugzilla links too.
+
+org/package#commit_hash
+
+Where the `commit_hash` could be a branch.
+

.gitea/issue_template/rm_package.md

@@ -0,0 +1,16 @@
+---
+
+name: "Remove package from Leap 16.0 and Package Hub"
+about: "If you want to remove a package from Leap 16.0 and Package Hub"
+title: "[RM] <package name>"
+ref: "leap-16.0"
+assignees: []
+labels: 
+
+- rm_package
+
+---
+
+This is where you rm a package from Leap 16.0 and Package Hub. Please specify package in title and target the correct branch of the project.
+
+

.gitea/workflows/patchinfo_numberator.yaml

@@ -1,37 +1,35 @@
 # Use this as .gitea/workflows/patchinfo_numberator.yaml in all products/* repos
-name: Patchinfo ID numberator
+name: Patchinfo incident numbering
-run-name: ${{ gitea.actor }} is setting patchinfo numbers
+
-on: [push]
+on:
+  push:
+  workflow_dispatch:
+
+env:
+  REPO_PATH: /workspace/${{ gitea.repository }}
+  REPO_URL: https://gitea-actions-autobuild:${{ secrets.REPO_WRITE }}@$RUNNER_GITEA_DOMAIN/${{ gitea.repository }}.git
 
 jobs:
   use-go-action:
-    runs-on: tumbleweed
+    runs-on: tumbleweed_autobuild
     steps:
-      # Install packages if not provided by image
+
-      - run: |
-          rpm -q go && exit 0
-          zypper ref
-          zypper in -y go
-      # Generic action from GitHub to clone the product git repo
       - name: Checkout product
-        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/github-actions-checkout@v4
+        run: |
-        with:
+          test -n "${{ env.REPO_PATH }}" && rm -rfv "${{ env.REPO_PATH }}"/*
-          token: ${{ secrets.REPO_WRITE }}
+          git config --global --add safe.directory ${{ env.REPO_PATH }}
-          repo-sha256: true
+          git clone ${{ env.REPO_URL }} ${{ env.REPO_PATH }}
 
       - name: Update all new _patchinfo files
-        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/patchinfo-numbering-action@v0
+        uses: https://src.opensuse.org/actions/patchinfo-numbering-action@v0
-      - name: Get last commit author
+        with:
-        id: last-commit
+          prefix: packagehub-
-        run: |
+
-          echo "author=$(git log -1 --pretty='%an <%ae>')" >> $GITHUB_OUTPUT
+      - name: Commit changes
-      - name: Commit changes back
+        uses: https://src.opensuse.org/actions/stefanzweifel-git-auto-commit-action@v5
-        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/stefanzweifel-git-auto-commit-action@v5
         with:
           commit_user_name: gitea-actions-autobuild
-          commit_user_email: autobuild+gitea@opensuse.org
+          commit_author: Patchinfo incident numbering <gitea-actions-autobuild@noreply.src.opensuse.org> 
-          commit_author: ${{ steps.last-commit.outputs.author }}
+          commit_message: "Update patchinfo incident numbers [skip actions]"
-          commit_message: "Update incident numbers [skip actions]"
           commit_options: '--no-edit'
           skip_fetch: true
-

.gitmodules

@@ -90,10 +90,6 @@
 	path = ComputeLibrary
 	url = ../../pool/computelibrary
 	branch = leap-16.0
-[submodule "CoreFreq"]
-	path = CoreFreq
-	url = ../../pool/corefreq
-	branch = leap-16.0
 [submodule "CorsixTH"]
 	path = CorsixTH
 	url = ../../pool/CorsixTH
@@ -174,10 +170,6 @@
 	path = LiE
 	url = ../../pool/LiE
 	branch = leap-16.0
-[submodule "MozillaFirefox-branding-openSUSE"]
-	path = MozillaFirefox-branding-openSUSE
-	url = ../../pool/MozillaFirefox-branding-openSUSE
-	branch = leap-16.0
 [submodule "MozillaThunderbird"]
 	path = MozillaThunderbird
 	url = ../../pool/MozillaThunderbird
@@ -190,10 +182,6 @@
 	path = NetworkManager-applet
 	url = ../../pool/NetworkManager-applet
 	branch = leap-16.0
-[submodule "NetworkManager-branding"]
-	path = NetworkManager-branding
-	url = ../../pool/NetworkManager-branding
-	branch = leap-16.0
 [submodule "NetworkManager-dns-bind"]
 	path = NetworkManager-dns-bind
 	url = ../../pool/NetworkManager-dns-bind
@@ -286,10 +274,6 @@
 	path = PackageKit-Qt
 	url = ../../pool/PackageKit-Qt
 	branch = leap-16.0
-[submodule "PackageKit-branding-openSUSE"]
-	path = PackageKit-branding-openSUSE
-	url = ../../pool/PackageKit-branding-openSUSE
-	branch = leap-16.0
 [submodule "Photini"]
 	path = Photini
 	url = ../../pool/Photini
@@ -614,10 +598,6 @@
 	path = afl
 	url = ../../pool/afl
 	branch = leap-16.0
-[submodule "agama-products"]
-	path = agama-products
-	url = ../../pool/agama-products
-	branch = leap-16.0
 [submodule "age"]
 	path = age
 	url = ../../pool/age
@@ -1714,10 +1694,6 @@
 	path = bpftune
 	url = ../../pool/bpftune
 	branch = leap-16.0
-[submodule "branding-openSUSE"]
-	path = branding-openSUSE
-	url = ../../pool/branding-opensuse
-	branch = leap-16.0
 [submodule "brasero"]
 	path = brasero
 	url = ../../pool/brasero
@@ -2030,10 +2006,6 @@
 	path = cdecl
 	url = ../../pool/cdecl
 	branch = leap-16.0
-[submodule "cdemu-daemon"]
-	path = cdemu-daemon
-	url = ../../pool/cdemu-daemon
-	branch = leap-16.0
 [submodule "cdk"]
 	path = cdk
 	url = ../../pool/cdk
@@ -2142,10 +2114,6 @@
 	path = choose
 	url = ../../pool/choose
 	branch = leap-16.0
-[submodule "cinnamon"]
-	path = cinnamon
-	url = ../../pool/cinnamon
-	branch = leap-16.0
 [submodule "cinnamon-control-center"]
 	path = cinnamon-control-center
 	url = ../../pool/cinnamon-control-center
@@ -2162,18 +2130,10 @@
 	path = cinnamon-screensaver
 	url = ../../pool/cinnamon-screensaver
 	branch = leap-16.0
-[submodule "cinnamon-session"]
-	path = cinnamon-session
-	url = ../../pool/cinnamon-session
-	branch = leap-16.0
 [submodule "cinnamon-settings-daemon"]
 	path = cinnamon-settings-daemon
 	url = ../../pool/cinnamon-settings-daemon
 	branch = leap-16.0
-[submodule "cinnamon-translations"]
-	path = cinnamon-translations
-	url = ../../pool/cinnamon-translations
-	branch = leap-16.0
 [submodule "civetweb"]
 	path = civetweb
 	url = ../../pool/civetweb
@@ -2890,10 +2850,6 @@
 	path = descent3
 	url = ../../pool/descent3
 	branch = leap-16.0
-[submodule "desktop-data-openSUSE"]
-	path = desktop-data-openSUSE
-	url = ../../pool/desktop-data-openSUSE
-	branch = leap-16.0
 [submodule "desktop-translations"]
 	path = desktop-translations
 	url = ../../pool/desktop-translations
@@ -3018,10 +2974,6 @@
 	path = distribution-gpg-keys
 	url = ../../pool/distribution-gpg-keys
 	branch = leap-16.0
-[submodule "distribution-logos-openSUSE"]
-	path = distribution-logos-openSUSE
-	url = ../../pool/distribution-logos-openSUSE
-	branch = leap-16.0
 [submodule "distrobox"]
 	path = distrobox
 	url = ../../pool/distrobox
@@ -3130,10 +3082,6 @@
 	path = draco
 	url = ../../pool/draco
 	branch = leap-16.0
-[submodule "dracula-gtk-theme"]
-	path = dracula-gtk-theme
-	url = ../../pool/dracula-gtk-theme
-	branch = leap-16.0
 [submodule "dracut-sshd"]
 	path = dracut-sshd
 	url = ../../pool/dracut-sshd
@@ -3154,10 +3102,6 @@
 	path = drm_info
 	url = ../../pool/drm_info
 	branch = leap-16.0
-[submodule "droidcam"]
-	path = droidcam
-	url = ../../pool/droidcam
-	branch = leap-16.0
 [submodule "drpm"]
 	path = drpm
 	url = ../../pool/drpm
@@ -3454,22 +3398,10 @@
 	path = enlightenment
 	url = ../../pool/enlightenment
 	branch = leap-16.0
-[submodule "enlightenment-branding-openSUSE"]
-	path = enlightenment-branding-openSUSE
-	url = ../../pool/enlightenment-branding-openSUSE
-	branch = leap-16.0
-[submodule "enlightenment-profiles-openSUSE"]
-	path = enlightenment-profiles-openSUSE
-	url = ../../pool/enlightenment-profiles-openSUSE
-	branch = leap-16.0
 [submodule "enlightenment-theme-dark"]
 	path = enlightenment-theme-dark
 	url = ../../pool/enlightenment-theme-dark
 	branch = leap-16.0
-[submodule "enlightenment-theme-openSUSE"]
-	path = enlightenment-theme-openSUSE
-	url = ../../pool/enlightenment-theme-openSUSE
-	branch = leap-16.0
 [submodule "enlightenment-theme-openSUSE-ice"]
 	path = enlightenment-theme-openSUSE-ice
 	url = ../../pool/enlightenment-theme-openSUSE-ice
@@ -3510,10 +3442,6 @@
 	path = epiphany
 	url = ../../pool/epiphany
 	branch = leap-16.0
-[submodule "epiphany-branding-openSUSE"]
-	path = epiphany-branding-openSUSE
-	url = ../../pool/epiphany-branding-openSUSE
-	branch = leap-16.0
 [submodule "eppic"]
 	path = eppic
 	url = ../../pool/eppic
@@ -3694,10 +3622,6 @@
 	path = facedetect
 	url = ../../pool/facedetect
 	branch = leap-16.0
-[submodule "facetimehd"]
-	path = facetimehd
-	url = ../../pool/facetimehd
-	branch = leap-16.0
 [submodule "facetimehd-firmware"]
 	path = facetimehd-firmware
 	url = ../../pool/facetimehd-firmware
@@ -4958,10 +4882,6 @@
 	path = garlic
 	url = ../../pool/garlic
 	branch = leap-16.0
-[submodule "gasket-driver"]
-	path = gasket-driver
-	url = ../../pool/gasket-driver
-	branch = leap-16.0
 [submodule "gaupol"]
 	path = gaupol
 	url = ../../pool/gaupol
@@ -4982,10 +4902,6 @@
 	path = gcalcli
 	url = ../../pool/gcalcli
 	branch = leap-16.0
-[submodule "gcdemu"]
-	path = gcdemu
-	url = ../../pool/gcdemu
-	branch = leap-16.0
 [submodule "gcin"]
 	path = gcin
 	url = ../../pool/gcin
@@ -5022,10 +4938,6 @@
 	path = gdcm
 	url = ../../pool/gdcm
 	branch = leap-16.0
-[submodule "gdm-branding-openSUSE"]
-	path = gdm-branding-openSUSE
-	url = ../../pool/gdm-branding-opensuse
-	branch = leap-16.0
 [submodule "gdmd"]
 	path = gdmd
 	url = ../../pool/gdmd
@@ -6982,10 +6894,6 @@
 	path = gli
 	url = ../../pool/gli
 	branch = leap-16.0
-[submodule "glib2-branding"]
-	path = glib2-branding
-	url = ../../pool/glib2-branding
-	branch = leap-16.0
 [submodule "glmark2"]
 	path = glmark2
 	url = ../../pool/glmark2
@@ -7706,10 +7614,6 @@
 	path = gtk-session-lock
 	url = ../../pool/gtk-session-lock
 	branch = leap-16.0
-[submodule "gtk2-branding"]
-	path = gtk2-branding
-	url = ../../pool/gtk2-branding
-	branch = leap-16.0
 [submodule "gtk2-engine-aurora"]
 	path = gtk2-engine-aurora
 	url = ../../pool/gtk2-engine-aurora
@@ -7730,14 +7634,6 @@
 	path = gtk2hs-buildtools
 	url = ../../pool/gtk2hs-buildtools
 	branch = leap-16.0
-[submodule "gtk3-branding"]
-	path = gtk3-branding
-	url = ../../pool/gtk3-branding
-	branch = leap-16.0
-[submodule "gtk4-branding"]
-	path = gtk4-branding
-	url = ../../pool/gtk4-branding
-	branch = leap-16.0
 [submodule "gtkd"]
 	path = gtkd
 	url = ../../pool/gtkd
@@ -7866,10 +7762,6 @@
 	path = hardening-check
 	url = ../../pool/hardening-check
 	branch = leap-16.0
-[submodule "hardinfo2"]
-	path = hardinfo2
-	url = ../../pool/hardinfo2
-	branch = leap-16.0
 [submodule "harec"]
 	path = harec
 	url = ../../pool/harec
@@ -7910,10 +7802,6 @@
 	path = hdf5
 	url = ../../pool/hdf5
 	branch = leap-16.0
-[submodule "hdjmod"]
-	path = hdjmod
-	url = ../../pool/hdjmod
-	branch = leap-16.0
 [submodule "heaptrack"]
 	path = heaptrack
 	url = ../../pool/heaptrack
@@ -9374,10 +9262,6 @@
 	path = lightdm-gtk-greeter
 	url = ../../pool/lightdm-gtk-greeter
 	branch = leap-16.0
-[submodule "lightdm-gtk-greeter-branding-openSUSE"]
-	path = lightdm-gtk-greeter-branding-openSUSE
-	url = ../../pool/lightdm-gtk-greeter-branding-openSUSE
-	branch = leap-16.0
 [submodule "lightmediascanner"]
 	path = lightmediascanner
 	url = ../../pool/lightmediascanner
@@ -9450,10 +9334,6 @@
 	path = litetran
 	url = ../../pool/litetran
 	branch = leap-16.0
-[submodule "live-net-installer"]
-	path = live-net-installer
-	url = ../../pool/live-net-installer
-	branch = leap-16.0
 [submodule "live555"]
 	path = live555
 	url = ../../pool/live555
@@ -10014,10 +9894,6 @@
 	path = mate-backgrounds
 	url = ../../pool/mate-backgrounds
 	branch = leap-16.0
-[submodule "mate-branding-openSUSE"]
-	path = mate-branding-openSUSE
-	url = ../../pool/mate-branding-openSUSE
-	branch = leap-16.0
 [submodule "mate-calc"]
 	path = mate-calc
 	url = ../../pool/mate-calc
@@ -10254,10 +10130,6 @@
 	path = mcjoin
 	url = ../../pool/mcjoin
 	branch = leap-16.0
-[submodule "mcomix"]
-	path = mcomix
-	url = ../../pool/mcomix
-	branch = leap-16.0
 [submodule "mcpp"]
 	path = mcpp
 	url = ../../pool/mcpp
@@ -10318,10 +10190,6 @@
 	path = memleax
 	url = ../../pool/memleax
 	branch = leap-16.0
-[submodule "memtest86+"]
-	path = memtest86+
-	url = ../../pool/memtest86_
-	branch = leap-16.0
 [submodule "menu-cache"]
 	path = menu-cache
 	url = ../../pool/menu-cache
@@ -10378,10 +10246,6 @@
 	path = mgetty
 	url = ../../pool/mgetty
 	branch = leap-16.0
-[submodule "mhvtl"]
-	path = mhvtl
-	url = ../../pool/mhvtl
-	branch = leap-16.0
 [submodule "micro-editor"]
 	path = micro-editor
 	url = ../../pool/micro-editor
@@ -10846,10 +10710,6 @@
 	path = msoak
 	url = ../../pool/msoak
 	branch = leap-16.0
-[submodule "msr-safe"]
-	path = msr-safe
-	url = ../../pool/msr-safe
-	branch = leap-16.0
 [submodule "mt-st"]
 	path = mt-st
 	url = ../../pool/mt-st
@@ -10878,10 +10738,6 @@
 	path = mtxclient
 	url = ../../pool/mtxclient
 	branch = leap-16.0
-[submodule "muffin"]
-	path = muffin
-	url = ../../pool/muffin
-	branch = leap-16.0
 [submodule "multimon-ng"]
 	path = multimon-ng
 	url = ../../pool/multimon-ng
@@ -11902,34 +11758,10 @@
 	path = openQA
 	url = ../../pool/openqa
 	branch = leap-16.0
-[submodule "openQA-devel-container"]
-	path = openQA-devel-container
-	url = ../../pool/openqa-devel-container
-	branch = leap-16.0
-[submodule "openSUSE-EULAs"]
-	path = openSUSE-EULAs
-	url = ../../pool/openSUSE-EULAs
-	branch = leap-16.0
-[submodule "openSUSE-build-key"]
-	path = openSUSE-build-key
-	url = ../../pool/openSUSE-build-key
-	branch = leap-16.0
-[submodule "openSUSE-repos"]
-	path = openSUSE-repos
-	url = ../../pool/openSUSE-repos
-	branch = leap-16.0
 [submodule "openSUSE-signkey-cert"]
 	path = openSUSE-signkey-cert
 	url = ../../pool/openSUSE-signkey-cert
 	branch = leap-16.0
-[submodule "openSUSEway"]
-	path = openSUSEway
-	url = ../../pool/openSUSEway
-	branch = leap-16.0
-[submodule "openafs"]
-	path = openafs
-	url = ../../pool/openafs
-	branch = leap-16.0
 [submodule "openamp"]
 	path = openamp
 	url = ../../pool/openamp
@@ -12046,18 +11878,6 @@
 	path = openssl_tpm2_engine
 	url = ../../pool/openssl_tpm2_engine
 	branch = leap-16.0
-[submodule "opensuse-migration-tool"]
-	path = opensuse-migration-tool
-	url = ../../pool/opensuse-migration-tool
-	branch = leap-16.0
-[submodule "opensuse-welcome"]
-	path = opensuse-welcome
-	url = ../../pool/opensuse-welcome
-	branch = leap-16.0
-[submodule "opensuse-welcome-launcher"]
-	path = opensuse-welcome-launcher
-	url = ../../pool/opensuse-welcome-launcher
-	branch = leap-16.0
 [submodule "opentimelineio"]
 	path = opentimelineio
 	url = ../../pool/opentimelineio
@@ -12298,10 +12118,6 @@
 	path = ouch
 	url = ../../pool/ouch
 	branch = leap-16.0
-[submodule "ovpn-dco"]
-	path = ovpn-dco
-	url = ../../pool/ovpn-dco
-	branch = leap-16.0
 [submodule "owasp-modsecurity-crs"]
 	path = owasp-modsecurity-crs
 	url = ../../pool/owasp-modsecurity-crs
@@ -12526,18 +12342,10 @@
 	path = patterns-base
 	url = ../../pool/patterns-base
 	branch = leap-16.0
-[submodule "patterns-cinnamon"]
-	path = patterns-cinnamon
-	url = ../../pool/patterns-cinnamon
-	branch = leap-16.0
 [submodule "patterns-desktop"]
 	path = patterns-desktop
 	url = ../../pool/patterns-desktop
 	branch = leap-16.0
-[submodule "patterns-devel-base"]
-	path = patterns-devel-base
-	url = ../../pool/patterns-devel-base
-	branch = leap-16.0
 [submodule "patterns-devel-vulkan"]
 	path = patterns-devel-vulkan
 	url = ../../pool/patterns-devel-vulkan
@@ -12558,10 +12366,6 @@
 	path = patterns-glibc-hwcaps
 	url = ../../pool/patterns-glibc-hwcaps
 	branch = leap-16.0
-[submodule "patterns-gnome"]
-	path = patterns-gnome
-	url = ../../pool/patterns-gnome
-	branch = leap-16.0
 [submodule "patterns-kde"]
 	path = patterns-kde
 	url = ../../pool/patterns-kde
@@ -12578,10 +12382,6 @@
 	path = patterns-office
 	url = ../../pool/patterns-office
 	branch = leap-16.0
-[submodule "patterns-server"]
-	path = patterns-server
-	url = ../../pool/patterns-server
-	branch = leap-16.0
 [submodule "patterns-sway"]
 	path = patterns-sway
 	url = ../../pool/patterns-sway
@@ -15090,10 +14890,6 @@
 	path = plasma6-nm
 	url = ../../pool/plasma6-nm
 	branch = leap-16.0
-[submodule "plasma6-openSUSE"]
-	path = plasma6-openSUSE
-	url = ../../pool/plasma6-openSUSE
-	branch = leap-16.0
 [submodule "plasma6-pa"]
 	path = plasma6-pa
 	url = ../../pool/plasma6-pa
@@ -15634,10 +15430,6 @@
 	path = python-PyKCS11
 	url = ../../pool/python-PyKCS11
 	branch = leap-16.0
-[submodule "python-PyMuPDF"]
-	path = python-PyMuPDF
-	url = ../../pool/python-pymupdf
-	branch = leap-16.0
 [submodule "python-PyPDF2"]
 	path = python-PyPDF2
 	url = ../../pool/python-PyPDF2
@@ -17510,10 +17302,6 @@
 	path = raft
 	url = ../../pool/raft
 	branch = leap-16.0
-[submodule "rage"]
-	path = rage
-	url = ../../pool/rage
-	branch = leap-16.0
 [submodule "ragel"]
 	path = ragel
 	url = ../../pool/ragel
@@ -17678,10 +17466,6 @@
 	path = regexploit
 	url = ../../pool/regexploit
 	branch = leap-16.0
-[submodule "release-notes-openSUSE"]
-	path = release-notes-openSUSE
-	url = ../../pool/release-notes-openSUSE
-	branch = leap-16.0
 [submodule "rem"]
 	path = rem
 	url = ../../pool/rem
@@ -17846,10 +17630,6 @@
 	path = rpi-imager
 	url = ../../pool/rpi-imager
 	branch = leap-16.0
-[submodule "rpm-repos-openSUSE"]
-	path = rpm-repos-openSUSE
-	url = ../../pool/rpm-repos-opensuse
-	branch = leap-16.0
 [submodule "rpmconf"]
 	path = rpmconf
 	url = ../../pool/rpmconf
@@ -18470,10 +18250,6 @@
 	path = skanpage
 	url = ../../pool/skanpage
 	branch = leap-16.0
-[submodule "skelcd-openSUSE"]
-	path = skelcd-openSUSE
-	url = ../../pool/skelcd-openSUSE
-	branch = leap-16.0
 [submodule "skladnik"]
 	path = skladnik
 	url = ../../pool/skladnik
@@ -19170,10 +18946,6 @@
 	path = systemd-generator-cron2timer
 	url = ../../pool/systemd-generator-cron2timer
 	branch = leap-16.0
-[submodule "systemd-presets-branding-openSUSE"]
-	path = systemd-presets-branding-openSUSE
-	url = ../../pool/systemd-presets-branding-opensuse
-	branch = leap-16.0
 [submodule "systemsettings6"]
 	path = systemsettings6
 	url = ../../pool/systemsettings6
@@ -19330,22 +19102,6 @@
 	path = terminator
 	url = ../../pool/terminator
 	branch = leap-16.0
-[submodule "terminology"]
-	path = terminology
-	url = ../../pool/terminology
-	branch = leap-16.0
-[submodule "terminology-theme-dark"]
-	path = terminology-theme-dark
-	url = ../../pool/terminology-theme-dark
-	branch = leap-16.0
-[submodule "terminology-theme-openSUSE"]
-	path = terminology-theme-openSUSE
-	url = ../../pool/terminology-theme-openSUSE
-	branch = leap-16.0
-[submodule "terminology-theme-openSUSE-oliveleaf"]
-	path = terminology-theme-openSUSE-oliveleaf
-	url = ../../pool/terminology-theme-openSUSE-oliveleaf
-	branch = leap-16.0
 [submodule "terminus-bitmap-fonts"]
 	path = terminus-bitmap-fonts
 	url = ../../pool/terminus-bitmap-fonts
@@ -19638,10 +19394,6 @@
 	path = touchegg
 	url = ../../pool/touchegg
 	branch = leap-16.0
-[submodule "tp_smapi"]
-	path = tp_smapi
-	url = ../../pool/tp_smapi
-	branch = leap-16.0
 [submodule "tpm-fido"]
 	path = tpm-fido
 	url = ../../pool/tpm-fido
@@ -20218,10 +19970,6 @@
 	path = v2ray-core
 	url = ../../pool/v2ray-core
 	branch = leap-16.0
-[submodule "v4l2loopback"]
-	path = v4l2loopback
-	url = ../../pool/v4l2loopback
-	branch = leap-16.0
 [submodule "vala-panel"]
 	path = vala-panel
 	url = ../../pool/vala-panel
@@ -20262,10 +20010,6 @@
 	path = vectorscan
 	url = ../../pool/vectorscan
 	branch = leap-16.0
-[submodule "vendor-reset"]
-	path = vendor-reset
-	url = ../../pool/vendor-reset
-	branch = leap-16.0
 [submodule "verdict"]
 	path = verdict
 	url = ../../pool/verdict
@@ -20278,10 +20022,6 @@
 	path = vgrep
 	url = ../../pool/vgrep
 	branch = leap-16.0
-[submodule "vhba-kmp"]
-	path = vhba-kmp
-	url = ../../pool/vhba-kmp
-	branch = leap-16.0
 [submodule "vhs"]
 	path = vhs
 	url = ../../pool/vhs
@@ -20506,10 +20246,6 @@
 	path = waffle
 	url = ../../pool/waffle
 	branch = leap-16.0
-[submodule "wallpapers-openSUSE-extra"]
-	path = wallpapers-openSUSE-extra
-	url = ../../pool/wallpapers-openSUSE-extra
-	branch = leap-16.0
 [submodule "wannier90"]
 	path = wannier90
 	url = ../../pool/wannier90
@@ -21158,10 +20894,6 @@
 	path = xfce4-battery-plugin
 	url = ../../pool/xfce4-battery-plugin
 	branch = leap-16.0
-[submodule "xfce4-branding-openSUSE"]
-	path = xfce4-branding-openSUSE
-	url = ../../pool/xfce4-branding-openSUSE
-	branch = leap-16.0
 [submodule "xfce4-calculator-plugin"]
 	path = xfce4-calculator-plugin
 	url = ../../pool/xfce4-calculator-plugin
@@ -21658,10 +21390,6 @@
 	path = xsynth-dssi
 	url = ../../pool/xsynth-dssi
 	branch = leap-16.0
-[submodule "xtables-addons"]
-	path = xtables-addons
-	url = ../../pool/xtables-addons
-	branch = leap-16.0
 [submodule "xteddy"]
 	path = xteddy
 	url = ../../pool/xteddy
@@ -22018,10 +21746,6 @@
 	path = hibiscus
 	url = ../../pool/hibiscus
 	branch = leap-16.0
-[submodule "hicolor-icon-theme-branding-openSUSE"]
-	path = hicolor-icon-theme-branding-openSUSE
-	url = ../../pool/hicolor-icon-theme-branding-openSUSE
-	branch = leap-16.0
 [submodule "hidviz"]
 	path = hidviz
 	url = ../../pool/hidviz
@@ -25146,10 +24870,6 @@
 	path = forgejo-cli
 	url = ../../pool/forgejo-cli
 	branch = leap-16.0
-[submodule "framework-laptop"]
-	path = framework-laptop
-	url = ../../pool/framework-laptop
-	branch = leap-16.0
 [submodule "framework_tool"]
 	path = framework_tool
 	url = ../../pool/framework_tool
@@ -25598,10 +25318,6 @@
 	path = woodpecker
 	url = ../../pool/woodpecker
 	branch = leap-16.0
-[submodule "xpadneo"]
-	path = xpadneo
-	url = ../../pool/xpadneo
-	branch = leap-16.0
 [submodule "zenith"]
 	path = zenith
 	url = ../../pool/zenith
@@ -25898,10 +25614,6 @@
 	path = slick-greeter
 	url = ../../pool/slick-greeter
 	branch = leap-16.0
-[submodule "slick-greeter-branding-openSUSE"]
-	path = slick-greeter-branding-openSUSE
-	url = ../../pool/slick-greeter-branding-opensuse
-	branch = leap-16.0
 [submodule "ubuntu-fonts"]
 	path = ubuntu-fonts
 	url = ../../pool/ubuntu-fonts
@@ -26210,10 +25922,6 @@
 	path = ghc-crypton-x509-system
 	url = ../../pool/ghc-crypton-x509-system
 	branch = leap-16.0
-[submodule "gnome-branding-Leap"]
-	path = gnome-branding-Leap
-	url = ../../pool/gnome-branding-leap
-	branch = leap-16.0
 [submodule "libvshadow"]
 	path = libvshadow
 	url = ../../pool/libvshadow
@@ -26314,3 +26022,115 @@
 	path = python-pygraphviz
 	url = ../../pool/python-pygraphviz
 	branch = leap-16.0
+[submodule "obs-service-cargo"]
+	path = obs-service-cargo
+	url = ../../pool/obs-service-cargo
+	branch = leap-16.0
+[submodule "obs-service-extract_file"]
+	path = obs-service-extract_file
+	url = ../../pool/obs-service-extract_file
+	branch = leap-16.0
+[submodule "obs-service-update_changelog"]
+	path = obs-service-update_changelog
+	url = ../../pool/obs-service-update_changelog
+	branch = leap-16.0
+[submodule "obs-service-refresh_patches"]
+	path = obs-service-refresh_patches
+	url = ../../pool/obs-service-refresh_patches
+	branch = leap-16.0
+[submodule "cargo-vendor-filterer"]
+	path = cargo-vendor-filterer
+	url = ../../pool/cargo-vendor-filterer
+	branch = leap-16.0
+[submodule "ghc-file-io"]
+	path = ghc-file-io
+	url = ../../pool/ghc-file-io
+	branch = leap-16.0
+[submodule "perl-Perl-Critic-TooMuchCode"]
+	path = perl-Perl-Critic-TooMuchCode
+	url = ../../pool/perl-Perl-Critic-TooMuchCode
+	branch = leap-16.0
+[submodule "nemo-extensions"]
+	path = nemo-extensions
+	url = ../../pool/nemo-extensions
+	branch = leap-16.0
+[submodule "nextcloud-desktop"]
+	path = nextcloud-desktop
+	url = ../../pool/nextcloud-desktop
+	branch = leap-16.0
+[submodule "hplip"]
+	path = hplip
+	url = ../../pool/hplip
+	branch = leap-16.0
+[submodule "libsigrok"]
+	path = libsigrok
+	url = ../../pool/libsigrok
+	branch = leap-16.0
+[submodule "collectd"]
+	path = collectd
+	url = ../../pool/collectd
+	branch = leap-16.0
+[submodule "obs-git-init"]
+	path = obs-git-init
+	url = ../../pool/obs-git-init
+	branch = leap-16.0
+[submodule "python-WTForms"]
+	path = python-WTForms
+	url = ../../pool/python-WTForms
+	branch = leap-16.0
+[submodule "python-Flask-WTF"]
+	path = python-Flask-WTF
+	url = ../../pool/python-Flask-WTF
+	branch = leap-16.0
+[submodule "python-Flask-RESTful"]
+	path = python-Flask-RESTful
+	url = ../../pool/python-Flask-RESTful
+	branch = leap-16.0
+[submodule "python-Flask-HTTPAuth"]
+	path = python-Flask-HTTPAuth
+	url = ../../pool/python-Flask-HTTPAuth
+	branch = leap-16.0
+[submodule "python-Flask-Babel"]
+	path = python-Flask-Babel
+	url = ../../pool/python-Flask-Babel
+	branch = leap-16.0
+[submodule "python-aniso8601"]
+	path = python-aniso8601
+	url = ../../pool/python-aniso8601
+	branch = leap-16.0
+[submodule "gnuhealth-thalamus"]
+	path = gnuhealth-thalamus
+	url = ../../pool/gnuhealth-thalamus
+	branch = leap-16.0
+[submodule "perl-MCP"]
+	path = perl-MCP
+	url = ../../pool/perl-MCP
+	branch = leap-16.0
+[submodule "fprintd"]
+	path = fprintd
+	url = ../../pool/fprintd
+	branch = leap-16.0
+[submodule "python-acme"]
+	path = python-acme
+	url = ../../pool/python-acme
+	branch = leap-16.0
+[submodule "python-certbot"]
+	path = python-certbot
+	url = ../../pool/python-certbot
+	branch = leap-16.0
+[submodule "python-certbot-nginx"]
+	path = python-certbot-nginx
+	url = ../../pool/python-certbot-nginx
+	branch = leap-16.0
+[submodule "python-ConfigArgParse"]
+	path = python-ConfigArgParse
+	url = ../../pool/python-ConfigArgParse
+	branch = leap-16.0
+[submodule "python-josepy"]
+	path = python-josepy
+	url = ../../pool/python-josepy
+	branch = leap-16.0
+[submodule "python-pyRFC3339"]
+	path = python-pyRFC3339
+	url = ../../pool/python-pyRFC3339
+	branch = leap-16.0

0Backports/Backports.changes

@@ -1,3 +1,186 @@
+-------------------------------------------------------------------
+Fri Oct 10 07:19:41 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded, not needed 
+    micro patterns that are coming from SLES
+      patterns-micro-alt_onlyDVD                               
+      patterns-micro-cloud                                     
+      patterns-micro-defaults                                  
+      patterns-micro-fips                                      
+      patterns-micro-hardware                                  
+      patterns-micro-ima-evm                                   
+      patterns-micro-kvm_host                                  
+      patterns-micro-onlyDVD                                   
+      patterns-micro-ra-agent                                  
+      patterns-micro-ra-verifier                               
+      patterns-micro-salt_minion                               
+      patterns-micro-sssd-ldap            
+
+-------------------------------------------------------------------
+Mon Oct  6 14:49:27 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded, remove more uninstallables
+      aws-cli
+      NetworkManager-branding-upstream
+      sdbootutil-tukit
+      toolbox-branding-SLE-16.0 
+
+-------------------------------------------------------------------
+Mon Oct  6 13:24:32 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded, cleanup more unneeded 32bit packages
+      at-spi2-core-devel-32bit
+      libcups2-32bit
+      libcurl-devel-32bit
+      libdns_sd-32bit
+      libpcap-devel-32bit
+      libraptor2-0-32bit
+      libtss2-fapi1-32bit
+
+-------------------------------------------------------------------
+Thu Oct  2 15:07:44 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded since not needed patterns
+      patterns-base-transactional_base
+      patterns-micro-elemental_client
+      patterns-sap-bone
+
+-------------------------------------------------------------------
+Fri Sep 26 16:48:57 UTC 2025 - Nathan Cutler <ncutler@suse.com>
+
+- Backports.productcompose
+  + sync with current state of SLES-16.0 (GM)
+
+-------------------------------------------------------------------
+Wed Sep 24 10:49:29 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded since busybox modules conflict with
+    SLES system packages
+      busybox-adduser
+      busybox-attr
+      busybox-bc
+      busybox-bind-utils
+      busybox-bzip2
+      busybox-coreutils
+      busybox-cpio
+      busybox-diffutils
+      busybox-dos2unix
+      busybox-ed
+      busybox-findutils
+      busybox-gawk
+      busybox-grep
+      busybox-gzip
+      busybox-hexedit
+      busybox-hostname
+      busybox-iproute2
+      busybox-iputils
+      busybox-kbd
+      busybox-kmod
+      busybox-less
+      busybox-links
+      busybox-man
+      busybox-misc
+      busybox-ncurses-utils
+      busybox-net-tools
+      busybox-netcat
+      busybox-patch
+      busybox-policycoreutils
+      busybox-procps
+      busybox-psmisc
+      busybox-sed
+      busybox-selinux-tools
+      busybox-sendmail
+      busybox-sh
+      busybox-sha3sum
+      busybox-sharutils
+      busybox-syslogd
+      busybox-sysvinit-tools
+      busybox-tar
+      busybox-telnet
+      busybox-testsuite
+      busybox-tftp
+      busybox-time
+      busybox-traceroute
+      busybox-tunctl
+      busybox-udhcpc
+      busybox-unzip
+      busybox-util-linux
+      busybox-vi
+      busybox-vlan
+      busybox-wget
+      busybox-which
+      busybox-whois
+      busybox-xz
+  + add to backports_unneeded since kernels are not allowed (bsc#1250340)
+      kernel-azure-livepatch-devel
+      kernel-default-livepatch-devel
+      kernel-livepatch-6_12_0-160000_4-default
+      kernel-livepatch-6_12_0-160000_5-default
+      kernel-livepatch-6_12_0-160000_4-rt
+      kernel-livepatch-6_12_0-160000_5-rt
+      kernel-rt-livepatch
+      kernel-rt-livepatch-devel
+      patterns-base-kernel_livepatching
+  + add to backports_unneeded
+      chrony-pool-openSUSE (conflicts with chrony-pool-suse from SLES)
+      connman-nmcompat (conflicts with NetworkManager from SLES)
+      debuginfod-dummy-client (conflicts with debuginfod-client from SLES)
+      ecryptfs-utils (needs ecryptfs.ko, not provided)
+      elemental (requires systemd-presets-branding-Elemental, not provided)
+      geoipupdate-legacy (requires geolite2legacy, not provided)
+      gio-branding-upstream (conflicts with gio-branding from SLES)
+      libdebuginfod1-dummy (conflicts with libdebuginfod from SLES from SLES)
+      libdebuginfod-dummy-devel (requires libdebuginfod1-dummy, not provided)
+      MozillaFirefox-branding-upstream (conflicts with MozillaFirefox-branding-SLE from SLES)
+      ntpd-rs (conflicts with chrony from SLES)
+      ntpsec (conflicts with chrony from SLES)
+      ntpsec-utils (needs ntpsec)
+      plymouth-branding-upstream (conflicts with plymouth-branding-SLE from SLES)
+      systemd-default-settings-branding-openSUSE (conflicts with systemd-default-settings-branding-SLE from SLES)
+      systemd-default-settings-branding-SLE-Micro (conflicts with systemd-default-settings-branding-SLE from SLES)
+      systemd-default-settings-branding-upstream (conflicts with systemd-default-settings-branding-SLE from SLES)
+      systemd-presets-branding-ALP-transactional (conflicts with systemd-presets-branding-SLE from SLES)
+      systemd-presets-branding-Elemental (conflicts with systemd-presets-branding-SLE from SLES)
+      yum-utils (conflicts with zypper-needs-restarting from SLES)
+  + add to backports_unneeded since 32bit packages are not needed
+      dbus-1-devel-32bit
+      libatk-bridge-2_0-0-32bit
+      libatspi0-32bit
+      libavahi-client3-32bit
+      libcurl4-32bit
+      libdbus-glib-1-2-32bit
+      libdc1394-26-32bit
+      libgusb2-32bit
+      libmanette-0_2-0-32bit
+      libpcap1-32bit
+      libpolkit-agent-1-0-32bit
+      libpq5-32bit
+      libusb-1_0-devel-32bit
+      libwacom9-32bit
+
+-------------------------------------------------------------------
+Tue Sep  2 16:40:20 UTC 2025 - Nathan Cutler <ncutler@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded (bsc#1249063)
+      patterns-base-update_test
+      update-test-32bit-pkg
+      update-test-affects-package-manager
+      update-test-broken
+      update-test-feature
+      update-test-interactive
+      update-test-optional
+      update-test-reboot-needed
+      update-test-relogin-suggested
+      update-test-retracted
+      update-test-security
+      update-test-trivial
+
 -------------------------------------------------------------------
 Tue Aug 26 11:10:18 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
@@ -68,7 +251,7 @@ Thu Aug 21 12:23:55 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 Wed Aug 20 12:02:06 UTC 2025 - Adrian Schröter <adrian@suse.de>
 
 - Backports.productcompose:
-  + prepare some settings for maintenance. 
+  + prepare some settings for maintenance.
     but not enabling it yet
 
 -------------------------------------------------------------------
@@ -135,7 +318,7 @@ Mon Jul 28 18:16:57 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 - Backports.productcompose:
   + add to backports_unneeded (bsc#1247203)
       ALP
-      ALP-dummy-release 
+      ALP-dummy-release
 
 -------------------------------------------------------------------
 Sun Jul 27 14:35:46 UTC 2025 - Nathan Cutler <ncutler@suse.com>
@@ -156,7 +339,7 @@ Fri Jul  4 08:06:42 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
 - Backports.productcompose:
   + add a bunch of "-mini" packages to the exclude list. These
-    packages are only needed for building. 
+    packages are only needed for building.
   + sync with current state of SLES-16.0 (pre-RC2)
 
 -------------------------------------------------------------------
@@ -172,7 +355,7 @@ Fri May 30 08:11:48 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
 - Backports.productcompose:
   + fix the build again by excluding the following packages:
-      libopenssl3-32bit 
+      libopenssl3-32bit
       libopenssl-3-devel-32bit
       libopenssl-3-fips-provider-32bit
 
@@ -180,29 +363,29 @@ Fri May 30 08:11:48 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 Thu May 29 12:55:41 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
 - Backports.productcompose:
-  + sync with current state of SLES-16.0 
+  + sync with current state of SLES-16.0
 
 -------------------------------------------------------------------
 Wed May  7 08:21:19 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
 - rename default.productcompose to Backports.productcompose
   (we can do this because we are not using pkglistgen, which
-  hardcodes "default.productcompose") 
+  hardcodes "default.productcompose")
 
 -------------------------------------------------------------------
 Tue May  6 14:38:05 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
 - default.productcompose:
   + fix the x86_64 build again by adding a large number of foo-32bit
-    packages to backports_unneeded_x86_64 
+    packages to backports_unneeded_x86_64
 
 -------------------------------------------------------------------
 Wed Apr 30 09:19:49 UTC 2025 - Nathan Cutler <ncutler@suse.com>
 
 - supportstatus.txt
-  + drop this file because it is needed only when using pkglistgen 
+  + drop this file because it is needed only when using pkglistgen
 - unneeded.yml
-  + drop this file because it is needed only when using pkglistgen 
+  + drop this file because it is needed only when using pkglistgen
 
 -------------------------------------------------------------------
 Thu Apr 24 10:33:13 UTC 2025 - Nathan Cutler <ncutler@suse.com>

0Backports/Backports.productcompose

@@ -14,7 +14,7 @@ scc:
 
 build_options:
 ### For maintenance, otherwise only "the best" version of each package is picked:
-# - take_all_available_versions
+- take_all_available_versions
 - hide_flavor_in_product_directory_name
 
 ### Since the Backports product build is not self-contained in a single repository,
@@ -32,8 +32,8 @@ debug: split
 repodata: all
 
 # has only an effect during maintenance:
-set_updateinfo_from: maint-coord@suse.de
+set_updateinfo_from: maintenance@opensuse.org
-# set_updateinfo_id_prefix: openSUSE-Leap-16.0-
+set_updateinfo_id_prefix: SUSE-PackageHub-16.0-
 
 flavors:
   backports_aarch64:
@@ -57,14 +57,78 @@ packagesets:
   packages:
   - ALP
   - ALP-dummy-release
+  - MozillaFirefox-branding-upstream
+  - NetworkManager-branding-upstream
+  - at-spi2-core-devel-32bit
+  - aws-cli
   - bash-legacybin
+  - busybox-adduser
+  - busybox-attr
+  - busybox-bc
+  - busybox-bind-utils
+  - busybox-bzip2
+  - busybox-coreutils
+  - busybox-cpio
+  - busybox-diffutils
+  - busybox-dos2unix
+  - busybox-ed
+  - busybox-findutils
+  - busybox-gawk
+  - busybox-grep
+  - busybox-gzip
+  - busybox-hexedit
+  - busybox-hostname
+  - busybox-iproute2
+  - busybox-iputils
+  - busybox-kbd
+  - busybox-kmod
+  - busybox-less
+  - busybox-links
+  - busybox-man
+  - busybox-misc
+  - busybox-ncurses-utils
+  - busybox-net-tools
+  - busybox-netcat
+  - busybox-patch
+  - busybox-policycoreutils
+  - busybox-procps
+  - busybox-psmisc
+  - busybox-sed
+  - busybox-selinux-tools
+  - busybox-sendmail
+  - busybox-sh
+  - busybox-sha3sum
+  - busybox-sharutils
+  - busybox-syslogd
+  - busybox-sysvinit-tools
+  - busybox-tar
+  - busybox-telnet
+  - busybox-testsuite
+  - busybox-tftp
+  - busybox-time
+  - busybox-traceroute
+  - busybox-tunctl
+  - busybox-udhcpc
+  - busybox-unzip
+  - busybox-util-linux
+  - busybox-vi
+  - busybox-vlan
+  - busybox-wget
   - busybox-which
+  - busybox-whois
+  - busybox-xz
   - ceph-mgr-diskprediction-local
+  - chrony-pool-openSUSE
   - cluster-md-kmp-azure
   - cluster-md-kmp-rt
+  - connman-nmcompat
   - cmake-mini
+  - dbus-1-devel-32bit
+  - debuginfod-dummy-client
   - dlm-kmp-azure
   - dlm-kmp-rt
+  - ecryptfs-utils
+  - elemental
   - envsubst-mini
   - ffmpeg-7-mini-libs
   - gettext-runtime-mini
@@ -73,38 +137,90 @@ packagesets:
   - gfs2-kmp-rt
   - ghostscript-mini
   - ghostscript-mini-devel
+  - geoipupdate-legacy
   - geolite2legacy
+  - gio-branding-upstream
   - grpc-source
+  - kernel-azure-livepatch-devel
+  - kernel-default-livepatch-devel
+  - kernel-livepatch-6_12_0-160000_4-default
+  - kernel-livepatch-6_12_0-160000_4-rt
+  - kernel-livepatch-6_12_0-160000_5-default
+  - kernel-livepatch-6_12_0-160000_5-rt
+  - kernel-rt-livepatch
+  - kernel-rt-livepatch-devel
   - krb5-mini
   - krb5-mini-devel
   - kselftests-kmp-azure
   - kselftests-kmp-default
   - kselftests-kmp-rt
   - leancrypto-kmp-default
-#  - libcups2-32bit
+  - libatk-bridge-2_0-0-32bit
+  - libatspi0-32bit
+  - libavahi-client3-32bit
+  - libcups2-32bit
   - libcurl-mini4
+  - libcurl4-32bit
+  - libcurl-devel-32bit
   - libdbus-1-3-32bit
+  - libdbus-glib-1-2-32bit
+  - libdc1394-26-32bit
+  - libdns_sd-32bit
+  - libdebuginfod-dummy-devel
+  - libdebuginfod1-dummy
   - libdvbv5-0-32bit
   - libgudev-1_0-0-32bit
+  - libgusb2-32bit
   - libinput10-32bit
   - liblirc_driver0-32bit
+  - libmanette-0_2-0-32bit
+  - libpcap1-32bit
+  - libpcap-devel-32bit
+  - libpolkit-agent-1-0-32bit
   - libpolkit-gobject-1-0-32bit
+  - libpq5-32bit
   - libpxbackend-1_0-mini
+  - libraptor2-0-32bit
   - libressl
   - libressl-devel
   - libressl-devel-doc
 #  - libsybdb5-32bit
   - libsystemd0-mini
 #  - libtdsodbc0-32bit
+  - libtss2-fapi1-32bit
   - libudev-mini1
   - libunbound-devel-mini
   - libusb-1_0-0-32bit
+  - libusb-1_0-devel-32bit
+  - libwacom9-32bit
 #  - libzip5-32bit
+  - ntpd-rs
+  - ntpsec
+  - ntpsec-utils
   - ocfs2-kmp-azure
   - ocfs2-kmp-default
   - ocfs2-kmp-rt
   - openssl_tpm2
   - pam-extra-32bit
+  - patterns-base-kernel_livepatching
+  - patterns-base-transactional_base
+  - patterns-micro-alt_onlyDVD
+  - patterns-micro-cloud
+  - patterns-micro-defaults
+  - patterns-micro-elemental_client
+  - patterns-micro-defaults
+  - patterns-micro-fips
+  - patterns-micro-hardware
+  - patterns-micro-ima-evm
+  - patterns-micro-kvm_host
+  - patterns-micro-onlyDVD
+  - patterns-micro-ra-agent
+  - patterns-micro-ra-verifier
+  - patterns-micro-salt_minion
+  - patterns-micro-sssd-ldap
+  - patterns-sap-bone
+  - patterns-base-update_test
+  - plymouth-branding-upstream
   - postgresql17-devel-mini
   - protobuf21-source
   - reproducible-faketools
@@ -130,13 +246,38 @@ packagesets:
   - reproducible-faketools-tar
   - reproducible-faketools-verbose
   - reproducible-faketools-zip
+  - sdbootutil-tukit
   - sddm-branding-openSUSE
   - sddm-qt6-branding-openSUSE
+  - systemd-default-settings-branding-openSUSE
+  - systemd-default-settings-branding-SLE-Micro
+  - systemd-default-settings-branding-upstream
+  - systemd-presets-branding-ALP-transactional
+  - systemd-presets-branding-Elemental
   - systemd-mini
   - systemd-mini-container
   - systemd-mini-devel
   - this-is-only-for-build-envs
+  - toolbox-branding-SLE-16.0
   - udev-mini
+  - update-test-32bit-pkg
+  - update-test-affects-package-manager
+  - update-test-broken
+  - update-test-feature
+  - update-test-interactive
+  - update-test-optional
+  - update-test-reboot-needed
+  - update-test-relogin-suggested
+  - update-test-retracted
+  - update-test-security
+  - update-test-trivial
+  - xen
+  - xen-devel
+  - xen-libs
+  - xen-doc-html
+  - xen-tools
+  - xen-tools-domU
+  - yum-utils
 
 # TODO: unneeded Leap package per architecture
 - name: backports_unneeded_aarch64
@@ -1251,17 +1392,14 @@ packagesets:
   - go-doc
   - go-md2man
   - go-race
-  - go1.23
-  - go1.23-doc
-  - go1.23-openssl
-  - go1.23-openssl-doc
-  - go1.23-openssl-race
-  - go1.23-race
   - go1.24
   - go1.24-doc
   - go1.24-openssl
   - go1.24-openssl-race
   - go1.24-race
+  - go1.25
+  - go1.25-doc
+  - go1.25-race
   - gobject-introspection
   - gobject-introspection-devel
   - golang-github-cpuguy83-go-md2man
@@ -1676,11 +1814,13 @@ packagesets:
   - ibus-gtk3
   - ibus-gtk4
   - ibus-hangul
+  - ibus-kkc
   - ibus-lang
   - ibus-libpinyin
   - ibus-libzhuyin
   - ibus-m17n
   - ibus-rime
+  - ibus-skk
   - ibus-table
   - ibus-table-chinese-array
   - ibus-table-chinese-cangjie
@@ -1696,6 +1836,7 @@ packagesets:
   - ibus-table-chinese-wubi-jidian
   - ibus-table-chinese-yong
   - ibus-table-extraphrase
+  - ibus-unikey
   - ibutils
   - icu
   - icu4j
@@ -1819,6 +1960,7 @@ packagesets:
   - jdom-javadoc
   - jdom2
   - jdom2-javadoc
+  - jdupes
   - jeos-firstboot
   - jetbrains-annotations
   - jetbrains-annotations-javadoc
@@ -1979,6 +2121,7 @@ packagesets:
   - kiwi-systemdeps-image-validation
   - kiwi-systemdeps-iso-media
   - kiwi-templates-Minimal
+  - kkc-data
   - kmod
   - kpartx
   - krb5
@@ -2559,6 +2702,7 @@ packagesets:
   - libcupsimage2
   - libcurl-devel
   - libcurl-devel-doc
+  - libcurl-mini4
   - libcurl4
   - libdaemon-devel
   - libdaemon0
@@ -3040,6 +3184,7 @@ packagesets:
   - libjcat1
   - libjemalloc2
   - libjitterentropy3
+  - libjodycode3
   - libjpeg-turbo
   - libjpeg62
   - libjpeg62-devel
@@ -3090,6 +3235,7 @@ packagesets:
   - libkeymap1
   - libkeyutils1
   - libkfont0
+  - libkkc2
   - libkmip-devel
   - libkmip-tools
   - libkmip0
@@ -3130,9 +3276,8 @@ packagesets:
   - liblcms2-2
   - liblcms2-devel
   - liblcms2-doc
-  - libldap-2_5-0
+  - libldap-2
   - libldap-data
-  - libldap2
   - libldapcpp-devel
   - libldapcpp0
   - libldb-devel
@@ -3238,6 +3383,7 @@ packagesets:
   - libmpfr6
   - libmpg123-0
   - libmplex2-2_2-0
+  - libmsgpack-c2
   - libmsgraph1-1
   - libmspack-devel
   - libmspack0
@@ -3577,6 +3723,7 @@ packagesets:
   - libsigc++3-devel
   - libsigc-2_0-0
   - libsigc-3_0-0
+  - libskk0
   - libslang2
   - libslirp-devel
   - libslirp0
@@ -4021,6 +4168,7 @@ packagesets:
   - libzypp-devel
   - libzypp-devel-doc
   - libzypp-plugin-appdata
+  - lifecycle-data-sle
   - lilv
   - linux-atm
   - linux-atm-devel
@@ -4551,13 +4699,9 @@ packagesets:
   - openjpeg2
   - openjpeg2-devel
   - openjpeg2-devel-doc
-  - openldap2-client
+  - openldap2_6-client
-  - openldap2-devel
+  - openldap2_6-devel
-  - openldap2-devel-static
+  - openldap2_6-doc
-  - openldap2-doc
-  - openldap2_5-client
-  - openldap2_5-devel
-  - openldap2_5-doc
   - openmpi4
   - openmpi4-config
   - openmpi4-devel
@@ -5102,6 +5246,7 @@ packagesets:
   - permissions-zypp-plugin
   - pesign-obs-integration
   - pgvector-devel
+  - php-composer2
   - php8
   - php8-bcmath
   - php8-bz2
@@ -6704,6 +6849,7 @@ packagesets:
   - samba-tool
   - samba-winbind
   - samba-winbind-libs
+  - sap-convergent-resource-agents
   - sap-suse-cluster-connector
   - sapcontrol-bash-completion
   - saphana-checks
@@ -6724,6 +6870,7 @@ packagesets:
   - sca-patterns-sle12
   - sca-patterns-sle15
   - sca-server-report
+  - scap-security-guide
   - sccache
   - schily-ctags
   - schily-mt
@@ -6774,6 +6921,8 @@ packagesets:
   - sisu-mojos
   - sisu-mojos-javadoc
   - sisu-plexus
+  - skkdic
+  - skkdic-extra
   - skopeo
   - skopeo-bash-completion
   - skopeo-fish-completion
@@ -7609,8 +7758,8 @@ packagesets:
   - fwts
   - fwupd-efi
   - gfs2-kmp-64kb
-  - go1.23-libstd
   - go1.24-libstd
+  - go1.25-libstd
   - google-cloud-sap-agent
   - google-dracut-config
   - google-guest-agent
@@ -7750,7 +7899,6 @@ packagesets:
   - shim
   - supportutils-plugin-suse-public-cloud
   - system-group-ne
-  - systemd-boot
   - tftpboot-agama-installer-SUSE_SLE_16-aarch64
   - u-boot-rpi3
   - u-boot-rpi3-doc
@@ -7786,7 +7934,7 @@ packagesets:
   - kernel-default-livepatch
   - kernel-kvmsmall
   - kernel-kvmsmall-devel
-  - kernel-livepatch-6_12_0-160000_20-default
+  - kernel-livepatch-6_12_0-160000_5-default
   - libLLVMSPIRVLib19
   - libatopology2
   - libdpdk-25
@@ -7897,7 +8045,7 @@ packagesets:
   - dnsdist
   - grub2-s390x-emu
   - kernel-default-livepatch
-  - kernel-livepatch-6_12_0-160000_20-default
+  - kernel-livepatch-6_12_0-160000_5-default
   - kernel-zfcpdump
   - kiwi-settings
   - libHBAAPI2
@@ -7918,8 +8066,6 @@ packagesets:
   - luajit
   - luajit-devel
   - openssl-ibmca
-  - openssl-ibmca-engine
-  - openssl-ibmca-provider
   - orarun
   - osasnmpd
   - pam-doc
@@ -7973,7 +8119,6 @@ packagesets:
   - cloud-regionsrv-client-plugin-azure
   - cloud-regionsrv-client-plugin-ec2
   - cloud-regionsrv-client-plugin-gce
-  - containerized-data-importer-manifests
   - crash-gcore
   - disk-encryption-tool
   - dmidecode
@@ -8002,8 +8147,8 @@ packagesets:
   - gfxboot-devel
   - glibc-livepatches
   - gmmlib-devel
-  - go1.23-libstd
   - go1.24-libstd
+  - go1.25-libstd
   - google-cloud-sap-agent
   - google-dracut-config
   - google-guest-agent
@@ -8039,9 +8184,8 @@ packagesets:
   - kernel-kvmsmall
   - kernel-kvmsmall-devel
   - kernel-kvmsmall-vdso
-  - kernel-livepatch-6_12_0-160000_20-default
+  - kernel-livepatch-6_12_0-160000_5-default
   - kiwi-pxeboot
-  - kubevirt-manifests
   - kubevirt-virtctl
   - libFLAC++10-x86-64-v3
   - libFLAC12-x86-64-v3
@@ -8310,7 +8454,6 @@ packagesets:
   - sysctl-logger
   - syslinux
   - system-group-ne
-  - systemd-boot
   - systemd-presets-branding-SLE-SAP
   - tboot
   - tftpboot-agama-installer-SUSE_SLE_16-x86_64

README.md

@@ -1,4 +1,5 @@
-
+## [openSUSE:Backports:SLE-16.0](https://build.opensuse.org/project/show/openSUSE:Backports:SLE-16.0)
+ 
 Adding packages from Factory pool:
 
  # git submodule add ../../pool/FreeCAD FreeCAD

_maintainership.json

@@ -1,3 +1,3 @@
 {
-    "": ["bigironman", "maxlin_factory", "lkocman-factory", "smithfarm"]
+    "": ["maintenance-release-review"]
 }

patchinfo.20251010110535882810.90520734224245/_patchinfo

@@ -0,0 +1,66 @@
+<patchinfo incident="packagehub-1">
+  <issue tracker="bnc" id="1251334">VUL-0: chromium: release 141.0.7390.65</issue>
+  <issue tracker="cve" id="2025-11213">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11216">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11207">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11211">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11212">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11210">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="bnc" id="1250780">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11208">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-10890">VUL-0: chromium: release 140.0.7339.207</issue>
+  <issue tracker="cve" id="2025-11206">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11460">VUL-0: chromium: release 141.0.7390.65</issue>
+  <issue tracker="cve" id="2025-11219">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="bnc" id="1250472">VUL-0: chromium: release 140.0.7339.207</issue>
+  <issue tracker="cve" id="2025-11205">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-10891">VUL-0: chromium: release 140.0.7339.207</issue>
+  <issue tracker="cve" id="2025-11458"/>
+  <issue tracker="cve" id="2025-11215">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11209">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-10892">VUL-0: chromium: release 140.0.7339.207</issue>
+  <packager>AndreasStieger</packager>
+  <rating>critical</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 141.0.7390.76:
+
+  * Do not send URLs as AIM input. This is to resolve a privacy
+    concern, around passing urls to AI Mode.
+
+Chromium 141.0.7390.65 (boo#1251334):
+
+  * CVE-2025-11458: Heap buffer overflow in Sync
+  * CVE-2025-11460: Use after free in Storage
+  * CVE-2025-11211: Out of bounds read in WebCodecs
+
+Chromium 141.0.7390.54 (stable released 2025-09-30) (boo#1250780)
+
+  * CVE-2025-11205: Heap buffer overflow in WebGPU
+  * CVE-2025-11206: Heap buffer overflow in Video
+  * CVE-2025-11207: Side-channel information leakage in Storage
+  * CVE-2025-11208: Inappropriate implementation in Media
+  * CVE-2025-11209: Inappropriate implementation in Omnibox
+  * CVE-2025-11210: Side-channel information leakage in Tab
+  * CVE-2025-11211: Out of bounds read in Media
+  * CVE-2025-11212: Inappropriate implementation in Media
+  * CVE-2025-11213: Inappropriate implementation in Omnibox
+  * CVE-2025-11215: Off by one error in V8
+  * CVE-2025-11216: Inappropriate implementation in Storage
+  * CVE-2025-11219: Use after free in V8
+  * Various fixes from internal audits, fuzzing and other initiatives
+
+Chromium 141.0.7390.37 (beta released 2025-09-24)
+
+Chromium 140.0.7339.207 (boo#1250472)
+
+  * CVE-2025-10890: Side-channel information leakage in V8
+  * CVE-2025-10891: Integer overflow in V8
+  * CVE-2025-10892: Integer overflow in V8
+
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251015125625066283.90520734224245/_patchinfo

@@ -0,0 +1,17 @@
+<patchinfo incident="packagehub-3">
+  <issue tracker="bnc" id="1252013">VUL-0: CVE-2025-11756: chromium: Use after free in Safe Browsing</issue>
+  <issue tracker="cve" id="2025-11756"/>
+  <packager>AndreasStieger</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 141.0.7390.107:
+
+* CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)
+
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251016111300220521.93181000773252/_patchinfo

@@ -0,0 +1,17 @@
+<patchinfo incident="packagehub-11">
+  <issue tracker="bnc" id="1250487">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
+  <issue tracker="cve" id="2025-59682">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
+  <issue tracker="cve" id="2025-59681"/>
+  <issue tracker="bnc" id="1250485">VUL-0: CVE-2025-59681: python-Django,python-Django4: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB</issue>
+  <packager>mcalabkova</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for python-Django</summary>
+  <description>This update for python-Django fixes the following issues:
+
+- CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485)
+- CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract() (boo#1250487)
+</description>
+  <package>python-Django</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251017085122907353.93181000773252/_patchinfo

@@ -0,0 +1,103 @@
+<patchinfo incident="packagehub-4">
+  <packager>dheidler</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for opi</summary>
+  <description>This update for opi fixes the following issues:
+
+- Version 5.8.8
+  * Fix adding openh264 repo on leap 16.0
+
+This update for opi fixes the following issues:
+
+- Version 5.8.7
+  * Fix ocenaudio url
+  * Add LocalSend plugin
+  * Run all tests in verbose mode
+  * Print written repo files in verbose mode
+  * Increase timeouts in test/06_install_non_interactive.py
+  * Remove DNF references from README.md
+
+This update for opi fixes the following issues:
+
+- Version 5.8.5
+  * add librewolf plugin (#205)
+  * Install .NET 9
+  * Add verbose mode
+  * Change the order of the process in the github module
+  * Add rustdesk plugin
+
+This update for opi fixes the following issues:
+
+- Version 5.8.4
+  * Use arm64 rpm for libation on aarch64
+
+This update for opi fixes the following issues:
+
+- Version 5.8.3
+  * Install dependencies rpm-build and squashfs at runtime if needed
+  * Drop DNF support
+
+This update for opi fixes the following issues:
+
+- Version 5.8.2
+  * Warn about adding staging repos
+  * Gracefully handle zypper exit code 106 (repos without cache present)
+
+This update for opi fixes the following issues:
+
+- Version 5.8.1
+  * Fix SyntaxWarning: invalid escape sequence '\s'
+
+This update for opi fixes the following issues:
+
+- Version 5.8.0
+  * Add mullvad-brower
+
+This update for opi fixes the following issues:
+
+- Version 5.7.0
+  * Add leap-only plugin to install zellij from github release
+  * Don't use subprocess.run user kwarg on 15.6
+  * Fix tests: Use helloworld-opi-tests instead of zfs
+  * Perform search despite locked rpmdb
+  * Simplify backend code
+
+This update for opi fixes the following issues:
+
+- Use no macros in url in .spec for packtrack
+
+This update for opi fixes the following issues:
+
+- Version 5.6.0
+  * Add plugin to install vagrant from hashicorp repo
+
+This update for opi fixes the following issues:
+
+- Version 5.5.0
+  * Update opi/plugins/collabora.py
+  * add collabora office desktop
+  * Omit unsupported cli args on leap in 99_install_opi.py
+  * Switch to PEP517 install
+  * Fix 09_install_with_multi_repos_in_single_file_non_interactive.py
+  * Fix 07_install_multiple.py on tumbleweed
+  * Fix test suite on tumbleweed
+  * Update available apps in opi - README.md
+
+This update for opi fixes the following issues:
+
+- Version 5.4.0
+  * Show key ID when importing or deleting package signing keys
+  * Add option to install google-chrome-canary
+
+This update for opi fixes the following issues:
+
+- Version 5.3.0
+  * Fix tests for new zypper version
+  * fix doblue slash in packman repo url
+  * Add Plugin to install Libation
+
+</description>
+  <package>opi</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251017085327031166.93181000773252/_patchinfo

@@ -0,0 +1,17 @@
+<patchinfo incident="packagehub-5">
+  <packager>michals</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for virtme</summary>
+  <description>This update for virtme fixes the following issues:
+
+- Update to 1.38:
+  * Fix the infamous Stale file handle (ESTALE) errors with virtiofsd
+  * Fix for systemctl daemon-reload when systemd support is enabled
+  * Fix for a kernel symlink issue affecting openSUSE/SLE
+  * README/docs improvements
+  * Various coding style cleanups
+</description>
+  <package>virtme</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251020125830692820.93181000773252/_patchinfo

@@ -0,0 +1,55 @@
+<patchinfo incident="packagehub-6">
+  <issue tracker="bnc" id="1206292">[SELinux] Wine/Proton not working reliably with default SELinux configuration</issue>
+  <packager>regularhunter</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for lutris</summary>
+  <description>This update for lutris fixes the following issues:
+
+- Move selinux dependency
+
+- Fix gaming under selinux (bsc#1206292)
+
+- Fix wrong placement of lang_package macro in spec file
+
+- Update to 0.5.19:
+  * Fix Proton integration bugs so Proton-fixes are applied
+  * Do not offer DXVK, VKD3D, D3D Extras or DDXVK-NVAPI on Proton versions;
+    Proton will handle these.
+  * The "Enable Esync" and "Enable Fsync" settings are now passed on to Proton
+  * DXVK's integrated D8VK will be enabled in Proton
+  * Emulator BIOS file location (used by libretro) may be set in Preferences
+  * Obtain the release year from GOG and Itch.io.
+  * MAME Machine setting uses a searchable entry for its enourmous list
+  * Support for importing Commodore 64 ROMs
+
+- Add BuildRequires apparmor-abstractions, apparmor-rpm-macros for
+  Leap, fix for build error: directories not owned by a package:
+  /etc/apparmor.d
+
+- update to 0.5.18:
+  * Lutris downloads the latest GE-Proton build for Wine if any Wine version is installed
+  * Use dark theme by default
+  * Display cover-art rather than banners by default
+  * Add 'Uncategorized' view to sidebar
+  * Preference options that do not work on Wayland will be hidden when on Wayland
+  * Game searches can now use fancy tags like 'installed:yes' or 'source:gog', with explanatory tool-tip
+  * A new filter button on the search box can build many of these fancy tags for you
+  * Runner searches can use 'installed:yes' as well, but no other fancy searches or anything
+  * Updated the Flathub and Amazon source to new APIs, restoring integration
+  * Itch.io source integration will load a collection named 'Lutris' if present
+  * GOG and Itch.io sources can now offer Linux and Windows installers for the same game
+  * Added support for the 'foot' terminal
+  * Support for DirectX 8 in DXVK v2.4
+  * Support for Ayatana Application Indicators
+  * Additional options for Ruffle runner
+  * Updated download links for the Atari800 and MicroM8 runners
+  * No longer re-download cached installation files even when some are missing
+  * Lutris log is included in the 'System' tab of the Preferences window
+  * Improved error reporting, with the Lutris log included in the error details
+  * Add AppArmor profile for Ubuntu versions &gt;= 23.10
+  * Add Duckstation runner
+</description>
+  <package>lutris</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251022070616351820.90520734224245/_patchinfo

@@ -0,0 +1,16 @@
+<patchinfo incident="packagehub-8">
+  <issue tracker="cve" id="2025-12036">VUL-0: CVE-2025-12036: chromium: Inappropriate implementation in V8</issue>
+  <issue tracker="bnc" id="1252402">VUL-0: CVE-2025-12036: chromium: Inappropriate implementation in V8</issue>
+  <packager>AndreasStieger</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 141.0.7390.122:
+
+  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>

patchinfo.20251023113823853491.93181000773252/_patchinfo

@@ -0,0 +1,57 @@
+<patchinfo incident="packagehub-7">
+  <issue tracker="bnc" id="1248768">[warewulf, REGRESSION] None of the disk/partition/filesystem Options to `wwctl profile set` appear to do anything</issue>
+  <issue tracker="bnc" id="1227465">[warewulf, kernel] After updating the Kernel in the Container Image 'wwctl container list' still shows old</issue>
+  <issue tracker="bnc" id="1246082">warewulf4-slurm suggest  slurm only</issue>
+  <issue tracker="bnc" id="1248906">VUL-0: CVE-2025-58058: warewulf4: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory</issue>
+  <issue tracker="bnc" id="1227686">[warewulf, kernel] Feature: Allow to determine the Kernel to boot - with none set, take latest</issue>
+  <issue tracker="cve" id="2025-58058">cve#2025-58058 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-58058</issue>
+  <packager>mslacken</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for warewulf4</summary>
+  <description>This update for warewulf4 fixes the following issues:
+
+Changes in warewulf4:
+
+- Update to version 4.6.4:
+  * v4.6.4 release updates
+  * Convert disk booleans from wwbool to *bool which allows bools in
+    disk to be set to false via command line (bsc#1248768)
+  * Update NetworkManager Overlay
+    * Disable ipv4 in NetworkManager if no address or route is specified
+  * fix(wwctl): Create overlay edit tempfile in tmpdir
+  * Add default for systemd name for warewulf in warewulf.conf
+  * Atomic overlay file application in wwclient
+  * Simpler names for overlay methods
+  * Fix warewulfd api behavior when deleting distribution overlay
+
+- Update to version 4.6.3:
+  * v4.6.3 release
+  * IPv6 iPXE support
+  * Fix a syntax error in the RPM specfile
+  * Fix a race condition in wwctl overlay edit
+  * Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays
+  * Move reexec.Init() to beginning of wwctl
+  * Add documentation for using tmpfs to distribute across numa nodes
+  * added warewuld configure option
+  * Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)
+  * Address copilot review from #1945
+  * Refactor wwapi tests for proper isolation
+  * Bugfix: cloning a site overlay when parent dir does not exist
+  * Clone to a site overlay when adding files in wwapi
+  * Consolidated createOverlayFile and updateOverlayFile to addOverlayFile
+  * Support for creating and updating overlay file in wwapi
+  * Only return overlay files that refer to a path within the overlay
+  * add overlay file deletion support
+  * DELETE /api/overlays/{id}?force=true can delete overlays in use
+  * Restore idempotency of PUT /api/nodes/{id}
+  * Simplify overlay mtime api and add tests
+  * add node overlay buildtime
+  * Improved netplan support
+  * Rebuild overlays for discovered nodes
+  * Restrict userdocs from building during pr when not modified
+  * Update to v4.6.2 GitHub release notes
+</description>
+  <package>warewulf4</package>
+  <seperate_build_arch/>
+</patchinfo>