1
0

Compare commits

..

6 Commits

Author SHA256 Message Date
Marcus Meissner
97cb21a1da remove mcphost 2025-11-26 11:52:25 +00:00
d4abf6dbc4 Update patchinfo incident numbers [skip actions] 2025-11-19 09:24:16 +00:00
AutoGits PR Review Bot
c9eacc40cf Merging
PR: products/PackageHub!224
2025-11-19 09:23:57 +00:00
AutoGits PR Review Bot
1bcd952eb3 Merging
PR: products/PackageHub!217
2025-11-19 09:23:34 +00:00
Marcus Meissner
17e4e99ab5 filter out xen bsc#1253226 2025-11-17 16:30:01 +00:00
Marcus Meissner
662a62addd add patchunfo for certbot 2025-11-14 10:02:45 +00:00
4 changed files with 24 additions and 68 deletions

View File

@@ -271,6 +271,12 @@ packagesets:
- update-test-retracted
- update-test-security
- update-test-trivial
- xen
- xen-devel
- xen-libs
- xen-doc-html
- xen-tools
- xen-tools-domU
- yum-utils
# TODO: unneeded Leap package per architecture
@@ -4353,6 +4359,7 @@ packagesets:
- maven-wagon-ssh-common
- maven-wagon-ssh-external
- mbimcli-bash-completion
- mcphost
- mcstrans
- md_monitor
- mdadm

View File

@@ -0,0 +1,16 @@
<patchinfo incident="packagehub-22">
<packager>AndreasStieger</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for certbot</summary>
<description>This update for certbot fixes the following issues:
This update adds the certbot stack. (python modules: ConfigArgParse, acme, certbot, certbot-nginx, josepy, pyRFC3339).
</description>
<package>python-ConfigArgParse</package>
<package>python-acme</package>
<package>python-certbot</package>
<package>python-certbot-nginx</package>
<package>python-josepy</package>
<package>python-pyRFC3339</package>
</patchinfo>

View File

@@ -1,67 +0,0 @@
<patchinfo>
<issue tracker="cve" id="2025-13016">firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component</issue>
<issue tracker="cve" id="2025-13019">firefox: Same-origin policy bypass in the DOM: Workers component</issue>
<issue tracker="cve" id="2025-13020">firefox: Use-after-free in the WebRTC: Audio/Video component</issue>
<issue tracker="cve" id="2025-13017">firefox: Same-origin policy bypass in the DOM: Notifications component</issue>
<issue tracker="cve" id="2025-13015">firefox: Spoofing issue in Firefox</issue>
<issue tracker="cve" id="2025-13012">VUL-0: MozillaFirefox / MozillaThunderbird: update to 145.0 and 140.5esr</issue>
<issue tracker="cve" id="2025-13018">firefox: Mitigation bypass in the DOM: Security component</issue>
<issue tracker="cve" id="2025-13014">firefox: Use-after-free in the Audio/Video component</issue>
<issue tracker="cve" id="2025-13013">firefox: Mitigation bypass in the DOM: Core &amp; HTML component</issue>
<issue tracker="bnc" id="1253188">VUL-0: MozillaFirefox / MozillaThunderbird: update to 145.0 and 140.5esr</issue>
<packager>Yoshio_Sato</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for MozillaThunderbird</summary>
<description>This update for MozillaThunderbird fixes the following issues:
Changes in MozillaThunderbird:
Mozilla Thunderbird 140.5.0 ESR
MFSA 2025-91 (bsc#1253188):
* CVE-2025-13012
Race condition in the Graphics component
* CVE-2025-13016
Incorrect boundary conditions in the JavaScript: WebAssembly
component
* CVE-2025-13017
Same-origin policy bypass in the DOM: Notifications component
* CVE-2025-13018
Mitigation bypass in the DOM: Security component
* CVE-2025-13019
Same-origin policy bypass in the DOM: Workers component
* CVE-2025-13013
Mitigation bypass in the DOM: Core &amp; HTML component
* CVE-2025-13020
Use-after-free in the WebRTC: Audio/Video component
* CVE-2025-13014
Use-after-free in the Audio/Video component
* CVE-2025-13015
Spoofing issue in Thunderbird
* fixed: Could not drag and drop ICS file to Today Pane
* fixed: With Thunderbird closed, clicking a 'mailto:' link to
send signed message failed
* fixed: Upgrade from 128.x-&gt;140.x broke authentication for
@att.net using Yahoo backend
Mozilla Thunderbird 140.4.0 ESR
* Account Hub is now disabled by default for second email account
* Users could not read mail signed with OpenPGP v6 and PQC keys
* Image preview in Insert Image dialog failed with CSP error for web resources
* Emptying trash on exit did not work with some providers
* Thunderbird could crash when applying filters
* Users were unable to override expired mail server certificate
* Opening Website header link in RSS feed incorrectly re-encoded
URL parameters
Mozilla Thunderbird 140.3.1 ESR:
* several bugfixes listed here
https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes
-------------------------------------------------------------------
</description>
<package>MozillaThunderbird</package>
</patchinfo>