1
0

Compare commits

...

27 Commits

Author SHA256 Message Date
Marcus Meissner
082d652565 filterlivepath set from update 1 2025-11-13 13:36:25 +00:00
b3eb0849c8 Update patchinfo incident numbers [skip actions] 2025-11-11 16:48:59 +00:00
AutoGits PR Review Bot
b52f6924a4 Merging
PR: products/PackageHub!210
2025-11-11 16:48:33 +00:00
54b6eca2a4 Update submodules from pool/product-composer#7 and create patchinfo.20251111094408723997.187004354831441/_patchinfo 2025-11-11 10:44:19 +01:00
1d731ee42f Update patchinfo incident numbers [skip actions] 2025-11-10 17:16:28 +00:00
AutoGits PR Review Bot
7862ce5600 Merging
PR: products/PackageHub!207
2025-11-10 17:16:10 +00:00
148e498d69 Update patchinfo incident numbers [skip actions] 2025-11-10 15:41:42 +00:00
AutoGits PR Review Bot
4f2851fe76 Merging
PR: products/PackageHub!193
2025-11-10 15:41:26 +00:00
162506107e Update patchinfo incident numbers [skip actions] 2025-11-10 15:40:56 +00:00
AutoGits PR Review Bot
7863330b11 Merging
PR: products/PackageHub!197
2025-11-10 15:40:39 +00:00
fb0e75d1b4 Update patchinfo incident numbers [skip actions] 2025-11-10 15:40:17 +00:00
AutoGits PR Review Bot
7aa51378b7 Merging
PR: products/PackageHub!195
2025-11-10 15:39:51 +00:00
AutoGits PR Review Bot
8d87e747e8 Merging
PR: products/PackageHub!208
2025-11-07 15:01:00 +00:00
Marcus Meissner
1b0f0f0118 remove product again, we do not need it currently 2025-11-07 10:23:59 +00:00
46d712de4f Update patchinfo incident numbers [skip actions] 2025-11-07 08:49:01 +00:00
AutoGits PR Review Bot
5003a51c3b Merging
PR: products/PackageHub!206
2025-11-07 08:48:34 +00:00
92d66f0b6b Update submodules from pool/chromium#15 and create patchinfo.20251106083153138720.187004354831441/_patchinfo 2025-11-06 09:32:10 +01:00
351a05e702 Update patchinfo.20251025182836794674.93181000773252/_patchinfo
removed  <seperate_build_arch/>
2025-11-05 10:56:13 +01:00
dd0d7384d4 Update patchinfo.20251027101618101208.187004354831441/_patchinfo
remove seperate build arch
2025-11-05 10:53:41 +01:00
52ba298c89 Update patchinfo.20251027103924170417.187004354831441/_patchinfo
remove sdeperate build arch
2025-11-05 10:53:07 +01:00
f5e0640ae8 Merge branch 'leap-16.0' into maintenance-update-1761560177 2025-11-03 15:55:54 +01:00
b125d840e4 Merge branch 'leap-16.0' into maintenance-update-1761561563 2025-11-03 15:55:44 +01:00
caf037d873 Merge branch 'leap-16.0' into maintenance-update-1761416916 2025-11-03 15:54:28 +01:00
1f1551b5ed Add new line 2025-11-03 15:45:13 +01:00
7f9822480c Update submodules from pool/micropython#2 and create patchinfo.20251027103924170417.187004354831441/_patchinfo 2025-10-27 11:39:35 +01:00
a391990f93 Update submodules from pool/knot#4 and create patchinfo.20251027101618101208.187004354831441/_patchinfo 2025-10-27 11:16:33 +01:00
aa01d6bd01 Update submodules from pool/amarok!1 and create patchinfo.20251025182836794674.93181000773252/_patchinfo 2025-10-25 20:29:27 +02:00
13 changed files with 133 additions and 13 deletions

View File

@@ -147,6 +147,8 @@ packagesets:
- kernel-livepatch-6_12_0-160000_4-rt
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_5-rt
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_6-rt
- kernel-rt-livepatch
- kernel-rt-livepatch-devel
- krb5-mini

2
amarok

Submodule amarok updated: e1886b2904...2a1b2d88df

2
knot

Submodule knot updated: 9637c2c881...41bb945764

View File

@@ -0,0 +1,28 @@
<patchinfo incident="packagehub-18">
<packager>jsulig</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for amarok</summary>
<description>This update for amarok fixes the following issues:
Changes in amarok:
- Update to version 3.3.1
* Enable saving and loading script console items, autocompletion
in script console, and re-enable some more scripting functionality
* Convert the remaining main UI toolbuttons to use icons from theme
* Clear out remnants of the now-discontinued MusicDNS service
* Fix example permission grant command in database settings (kde#386004)
* Fix equalizer gains not updating when selecting some presets (kde#463908)
* Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
* Fix MusicBrainz search
* Properly start CD playback if Amarok is not already running (kde#503310)
* Also transmit embedded cover art through MPRIS (kde#357620)
* Don't show transcoding dialog after canceling download (kde#275840)
* Load network information earlier to avoid crashes on startup (kde#507497)
* Try to export as-compatible-as-possible playlist files (kde#507329)
* Fix some random crashes during playback
</description>
<package>amarok</package>
</patchinfo>

View File

@@ -0,0 +1,32 @@
<patchinfo incident="packagehub-16">
<packager>miska</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for knot</summary>
<description>This update for knot fixes the following issues:
Changes in knot:
- disable quic in stable releases due to the missing libraries
update to version 3.5.1, see
https://www.knot-dns.cz/2025-10-16-version-351.html
update to version 3.5.0, see
https://www.knot-dns.cz/2025-09-18-version-350.html
update to version 3.4.8, see
https://www.knot-dns.cz/2025-07-29-version-348.html
Use the libngtcp2_crypto_gnutls-devel instead of libngtcp2-devel
to account for the openssl and gnutls devel files split in ngtcp2.
update to version 3.4.7, see
https://www.knot-dns.cz/2025-06-04-version-347.html
</description>
<package>knot</package>
</patchinfo>

View File

@@ -0,0 +1,27 @@
<patchinfo incident="packagehub-17">
<issue tracker="cve" id="2025-59438">VUL-0: CVE-2025-59438: TRACKERBUG: mbedtls: padding oracle attack possible through timing of cipher error reporting</issue>
<packager>dheidler</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for micropython</summary>
<description>This update for micropython fixes the following issues:
Changes in micropython:
- Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438
Version 1.26.0:
* Added machine.I2CTarget for creating I2C target devices on multiple ports.
* New MCU support: STM32N6xx (800 MHz, ML accel) &amp; ESP32-C2 (WiFi + BLE).
* Major float accuracy boost (~28% → ~98%), constant folding in compiler.
* Optimized native/Viper emitters; reduced heap use for slices.
* Time functions standardized (19702099); new boards across ESP32, SAMD, STM32, Zephyr.
* ESP32: ESP-IDF 5.4.2, flash auto-detect, PCNT class, LAN8670 PHY.
* RP2: compressed errors, better lightsleep, hard IRQ timers.
* Zephyr v4.0.0: PWM, SoftI2C/SPI, BLE runtime services, boot.py/main.py support.
* mpremote adds fs tree, improved df, portable config paths.
* Updated lwIP, LittleFS, libhydrogen, stm32lib; expanded hardware/CI tests.
</description>
<package>micropython</package>
</patchinfo>

View File

@@ -1,4 +1,4 @@
<patchinfo>
<patchinfo incident="packagehub-15">
<issue tracker="cve" id="2025-11710"/>
<issue tracker="cve" id="2025-11709"/>
<issue tracker="cve" id="2025-11715"/>
@@ -60,4 +60,4 @@ MFSA 2025-85 (bsc#1251263):
ESR 140.4, Firefox 144 and Thunderbird 144
</description>
<package>MozillaThunderbird</package>
</patchinfo>
</patchinfo>

View File

@@ -0,0 +1,23 @@
<patchinfo incident="packagehub-19">
<issue tracker="bnc" id="1253089">VUL-0: chromium: release 142.0.7444.134</issue>
<issue tracker="cve" id="2025-12727"/>
<issue tracker="cve" id="2025-12725"/>
<issue tracker="cve" id="2025-12729">VUL-0: chromium: release 142.0.7444.134</issue>
<issue tracker="cve" id="2025-12728"/>
<issue tracker="cve" id="2025-12726"/>
<packager>AndreasStieger</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 142.0.7444.134 (boo#1253089):
* CVE-2025-12725: Out of bounds write in WebGPU
* CVE-2025-12726: Inappropriate implementation in Views
* CVE-2025-12727: Inappropriate implementation in V8
* CVE-2025-12728: Inappropriate implementation in Omnibox
* CVE-2025-12729: Inappropriate implementation in Omnibox
</description>
<package>chromium</package>
</patchinfo>

View File

@@ -0,0 +1,14 @@
<patchinfo incident="packagehub-20">
<packager>adrianSuSE</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for product-composer</summary>
<description>This update for product-composer fixes the following issues:
Update to version 0.6.17:
- fix multiarch media handling of updateinfo id's
</description>
<package>product-composer</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -1,10 +1,4 @@
{
"ObsProject": "openSUSE:Backports:SLE-16.0",
"StagingProject": "openSUSE:Backports:SLE-16.0:PullRequest",
"QA": [
{
"Name": "Leap",
"Origin": "openSUSE:Leap:16.0:Products"
},
]
}