1
0

Compare commits

..

4 Commits

24 changed files with 27 additions and 257 deletions

24
.gitmodules vendored
View File

@@ -26110,27 +26110,3 @@
path = fprintd
url = ../../pool/fprintd
branch = leap-16.0
[submodule "python-acme"]
path = python-acme
url = ../../pool/python-acme
branch = leap-16.0
[submodule "python-certbot"]
path = python-certbot
url = ../../pool/python-certbot
branch = leap-16.0
[submodule "python-certbot-nginx"]
path = python-certbot-nginx
url = ../../pool/python-certbot-nginx
branch = leap-16.0
[submodule "python-ConfigArgParse"]
path = python-ConfigArgParse
url = ../../pool/python-ConfigArgParse
branch = leap-16.0
[submodule "python-josepy"]
path = python-josepy
url = ../../pool/python-josepy
branch = leap-16.0
[submodule "python-pyRFC3339"]
path = python-pyRFC3339
url = ../../pool/python-pyRFC3339
branch = leap-16.0

2
amarok

Submodule amarok updated: 2a1b2d88df...e1886b2904

2
knot

Submodule knot updated: 41bb945764...9637c2c881

View File

@@ -1,28 +0,0 @@
<patchinfo incident="packagehub-18">
<packager>jsulig</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for amarok</summary>
<description>This update for amarok fixes the following issues:
Changes in amarok:
- Update to version 3.3.1
* Enable saving and loading script console items, autocompletion
in script console, and re-enable some more scripting functionality
* Convert the remaining main UI toolbuttons to use icons from theme
* Clear out remnants of the now-discontinued MusicDNS service
* Fix example permission grant command in database settings (kde#386004)
* Fix equalizer gains not updating when selecting some presets (kde#463908)
* Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
* Fix MusicBrainz search
* Properly start CD playback if Amarok is not already running (kde#503310)
* Also transmit embedded cover art through MPRIS (kde#357620)
* Don't show transcoding dialog after canceling download (kde#275840)
* Load network information earlier to avoid crashes on startup (kde#507497)
* Try to export as-compatible-as-possible playlist files (kde#507329)
* Fix some random crashes during playback
</description>
<package>amarok</package>
</patchinfo>

View File

@@ -0,0 +1,14 @@
<patchinfo>
<packager>lkocman</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for grub2-compat-ia32</summary>
<description>This update for grub2-compat-ia32 fixes the following issues:
- Drop update-bootloader --get as it returns 0
even if the variable is unset
- Add update-bootloader also into post and postun Requires
</description>
<package>grub2-compat-ia32</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -1,32 +0,0 @@
<patchinfo incident="packagehub-16">
<packager>miska</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for knot</summary>
<description>This update for knot fixes the following issues:
Changes in knot:
- disable quic in stable releases due to the missing libraries
update to version 3.5.1, see
https://www.knot-dns.cz/2025-10-16-version-351.html
update to version 3.5.0, see
https://www.knot-dns.cz/2025-09-18-version-350.html
update to version 3.4.8, see
https://www.knot-dns.cz/2025-07-29-version-348.html
Use the libngtcp2_crypto_gnutls-devel instead of libngtcp2-devel
to account for the openssl and gnutls devel files split in ngtcp2.
update to version 3.4.7, see
https://www.knot-dns.cz/2025-06-04-version-347.html
</description>
<package>knot</package>
</patchinfo>

View File

@@ -1,27 +0,0 @@
<patchinfo incident="packagehub-17">
<issue tracker="cve" id="2025-59438">VUL-0: CVE-2025-59438: TRACKERBUG: mbedtls: padding oracle attack possible through timing of cipher error reporting</issue>
<packager>dheidler</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for micropython</summary>
<description>This update for micropython fixes the following issues:
Changes in micropython:
- Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438
Version 1.26.0:
* Added machine.I2CTarget for creating I2C target devices on multiple ports.
* New MCU support: STM32N6xx (800 MHz, ML accel) &amp; ESP32-C2 (WiFi + BLE).
* Major float accuracy boost (~28% → ~98%), constant folding in compiler.
* Optimized native/Viper emitters; reduced heap use for slices.
* Time functions standardized (19702099); new boards across ESP32, SAMD, STM32, Zephyr.
* ESP32: ESP-IDF 5.4.2, flash auto-detect, PCNT class, LAN8670 PHY.
* RP2: compressed errors, better lightsleep, hard IRQ timers.
* Zephyr v4.0.0: PWM, SoftI2C/SPI, BLE runtime services, boot.py/main.py support.
* mpremote adds fs tree, improved df, portable config paths.
* Updated lwIP, LittleFS, libhydrogen, stm32lib; expanded hardware/CI tests.
</description>
<package>micropython</package>
</patchinfo>

View File

@@ -1,63 +0,0 @@
<patchinfo incident="packagehub-15">
<issue tracker="cve" id="2025-11710"/>
<issue tracker="cve" id="2025-11709"/>
<issue tracker="cve" id="2025-11715"/>
<issue tracker="bnc" id="1247774">[SLFO:Main] [SLES16.0] MozillaFirefox fails to build on s390x</issue>
<issue tracker="cve" id="2025-11712"/>
<issue tracker="cve" id="2025-11708"/>
<issue tracker="cve" id="2025-11714"/>
<issue tracker="cve" id="2025-11713"/>
<issue tracker="cve" id="2025-11711"/>
<issue tracker="bnc" id="1251263">VUL-0: MozillaFirefox / MozillaThunderbird: update to 144.0 and 140.4esr</issue>
<packager>MSirringhaus</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for MozillaThunderbird</summary>
<description>This update for MozillaThunderbird fixes the following issues:
Mozilla Thunderbird 140.4:
* changed: Account Hub is now disabled by default for second
email account
* changed: Flatpak runtime has been updated to Freedesktop SDK
24.08
* fixed: Users could not read mail signed with OpenPGP v6 and
PQC keys
* fixed: Image preview in Insert Image dialog failed with CSP
error for web resources
* fixed: Emptying trash on exit did not work with some
providers
* fixed: Thunderbird could crash when applying filters
* fixed: Users were unable to override expired mail server
certificate
* fixed: Opening Website header link in RSS feed incorrectly
re-encoded URL parameters
* fixed: Security fixes
MFSA 2025-85 (bsc#1251263):
* CVE-2025-11708
Use-after-free in MediaTrackGraphImpl::GetInstance()
* CVE-2025-11709
Out of bounds read/write in a privileged process triggered by
WebGL textures
* CVE-2025-11710
Cross-process information leaked due to malicious IPC
messages
* CVE-2025-11711
Some non-writable Object properties could be modified
* CVE-2025-11712
An OBJECT tag type attribute overrode browser behavior on web
resources without a content-type
* CVE-2025-11713
Potential user-assisted code execution in “Copy as cURL”
command
* CVE-2025-11714
Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
* CVE-2025-11715
Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
ESR 140.4, Firefox 144 and Thunderbird 144
</description>
<package>MozillaThunderbird</package>
</patchinfo>

View File

@@ -1,23 +0,0 @@
<patchinfo incident="packagehub-19">
<issue tracker="bnc" id="1253089">VUL-0: chromium: release 142.0.7444.134</issue>
<issue tracker="cve" id="2025-12727"/>
<issue tracker="cve" id="2025-12725"/>
<issue tracker="cve" id="2025-12729">VUL-0: chromium: release 142.0.7444.134</issue>
<issue tracker="cve" id="2025-12728"/>
<issue tracker="cve" id="2025-12726"/>
<packager>AndreasStieger</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 142.0.7444.134 (boo#1253089):
* CVE-2025-12725: Out of bounds write in WebGPU
* CVE-2025-12726: Inappropriate implementation in Views
* CVE-2025-12727: Inappropriate implementation in V8
* CVE-2025-12728: Inappropriate implementation in Omnibox
* CVE-2025-12729: Inappropriate implementation in Omnibox
</description>
<package>chromium</package>
</patchinfo>

View File

@@ -1,14 +0,0 @@
<patchinfo incident="packagehub-20">
<packager>adrianSuSE</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for product-composer</summary>
<description>This update for product-composer fixes the following issues:
Update to version 0.6.17:
- fix multiarch media handling of updateinfo id's
</description>
<package>product-composer</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -1,16 +0,0 @@
<patchinfo incident="packagehub-21">
<issue tracker="bnc" id="1253267">VUL-0: chromium: release 142.0.7444.162</issue>
<issue tracker="cve" id="2025-13042">VUL-0: chromium: release 142.0.7444.162</issue>
<packager>AndreasStieger</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 142.0.7444.162 (boo#1253267):
* CVE-2025-13042: Inappropriate implementation in V8
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -1,17 +0,0 @@
<patchinfo>
<packager>AndreasStieger</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for certbot</summary>
<description>This update for certbot fixes the following issues:
This update adds the certbot stack. (python modules: ConfigArgParse, acme, certbot, certbot-nginx, josepy, pyRFC3339).
</description>
<package>python-ConfigArgParse</package>
<package>python-acme</package>
<package>python-certbot</package>
<package>python-certbot-nginx</package>
<package>python-josepy</package>
<package>python-pyRFC3339</package>
</patchinfo>

Submodule python-acme deleted from 27b3328397

Submodule python-certbot deleted from f9b56088c8

Submodule python-josepy deleted from 921f2778a2

Submodule python-pyRFC3339 deleted from d5107ae95b

View File

@@ -1,4 +1,10 @@
{
"ObsProject": "openSUSE:Backports:SLE-16.0",
"StagingProject": "openSUSE:Backports:SLE-16.0:PullRequest",
"QA": [
{
"Name": "Leap",
"Origin": "openSUSE:Leap:16.0:Products"
},
]
}