1
0

Compare commits

..

1 Commits

Author SHA256 Message Date
Marcus Meissner
f82b6807a3 hide several javas, mcphost and livepatches 2025-11-28 09:40:55 +00:00
12 changed files with 39 additions and 178 deletions

8
.gitmodules vendored
View File

@@ -17562,6 +17562,10 @@
path = rlwrap
url = ../../pool/rlwrap
branch = leap-16.0
[submodule "rmt-server"]
path = rmt-server
url = ../../pool/rmt-server
branch = leap-16.0
[submodule "rmw"]
path = rmw
url = ../../pool/rmw
@@ -26130,7 +26134,3 @@
path = python-pyRFC3339
url = ../../pool/python-pyRFC3339
branch = leap-16.0
[submodule "openQA-devel-container"]
path = openQA-devel-container
url = ../../pool/openQA-devel-container
branch = leap-16.0

View File

@@ -149,6 +149,8 @@ packagesets:
- kernel-livepatch-6_12_0-160000_5-rt
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_6-rt
- kernel-livepatch-6_12_0-160000_7-default
- kernel-livepatch-6_12_0-160000_7-rt
- kernel-rt-livepatch
- kernel-rt-livepatch-devel
- krb5-mini
@@ -1922,6 +1924,27 @@ packagesets:
- java-21-openjdk-javadoc
- java-21-openjdk-jmods
- java-21-openjdk-src
- java-22-openjdk
- java-22-openjdk-demo
- java-22-openjdk-devel
- java-22-openjdk-headless
- java-22-openjdk-javadoc
- java-22-openjdk-jmods
- java-22-openjdk-src
- java-23-openjdk
- java-23-openjdk-demo
- java-23-openjdk-devel
- java-23-openjdk-headless
- java-23-openjdk-javadoc
- java-23-openjdk-jmods
- java-23-openjdk-src
- java-24-openjdk
- java-24-openjdk-demo
- java-24-openjdk-devel
- java-24-openjdk-headless
- java-24-openjdk-javadoc
- java-24-openjdk-jmods
- java-24-openjdk-src
- java-cup
- java-cup-manual
- javacc
@@ -7932,6 +7955,8 @@ packagesets:
- kernel-kvmsmall
- kernel-kvmsmall-devel
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_7-default
- libLLVMSPIRVLib19
- libatopology2
- libdpdk-25
@@ -8043,6 +8068,8 @@ packagesets:
- grub2-s390x-emu
- kernel-default-livepatch
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_7-default
- kernel-zfcpdump
- kiwi-settings
- libHBAAPI2
@@ -8182,6 +8209,8 @@ packagesets:
- kernel-kvmsmall-devel
- kernel-kvmsmall-vdso
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_7-default
- kiwi-pxeboot
- kubevirt-virtctl
- libFLAC++10-x86-64-v3

2
openQA

Submodule openQA updated: 076d24541f...d4fcc3820c

View File

@@ -1,13 +0,0 @@
<patchinfo incident="packagehub-40">
<issue tracker="cve" id="2025-61659"/>
<issue tracker="bnc" id="1247489">VUL-0: CVE-2025-61659: bash-git-prompt: uses predictable file in /tmp for a copy of the git index</issue>
<packager>michals</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for bash-git-prompt</summary>
<description>This update for bash-git-prompt fixes the following issues:
- CVE-2025-61659: Fixed an issue where predictable files in /tmp were used for a copy of the git index (bsc#1247489)
</description>
<package>bash-git-prompt</package>
</patchinfo>

View File

@@ -1,65 +0,0 @@
<patchinfo incident="packagehub-38">
<issue tracker="bnc" id="1243954">VUL-0: CVE-2025-29785: shadowsocks-v2ray-plugin: github.com/quic-go/quic-go/internal/ackhandler: loss recovery logic for path probe packets can be used by a malicious QUIC client to trigger a null pointer dereference</issue>
<issue tracker="cve" id="2025-47911">cve#2025-47911 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-47911</issue>
<issue tracker="bnc" id="1243946">VUL-0: CVE-2025-29785: v2ray-core: github.com/quic-go/quic-go/internal/ackhandler: loss recovery logic for path probe packets can be used by a malicious QUIC client to trigger a null pointer dereference</issue>
<issue tracker="cve" id="2025-297850">cve#2025-297850 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-297850</issue>
<issue tracker="bnc" id="1251404">VUL-0: CVE-2025-47911: v2ray-core: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents</issue>
<issue tracker="bnc" id="1235164">VUL-0: CVE-2023-49295: v2ray-core: github.com/quic-go/quic-go: memory exhaustion attack against QUIC's path validation mechanism</issue>
<packager>hillwood</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for shadowsocks-v2ray-plugin, v2ray-core</summary>
<description>This update for shadowsocks-v2ray-plugin, v2ray-core fixes the following issues:
Changes in shadowsocks-v2ray-plugin:
- Update version to 5.25.0
* Update v2ray-core to v5.25.0
- Add update-vendor.patch, update v2ray-core to v5.33.0 (boo#1243954 and CVE-2025-297850)
Changes in v2ray-core:
- Fix CVE-2025-47911 and boo#1251404
* Add fix-CVE-2025-47911.patch
* Update golang.org/x/net to 0.45.0 in vendor
- Update version to 5.38.0
* TLSMirror Connection Enrollment System
* Add TLSMirror Sequence Watermarking
* LSMirror developer preview protocol is now a part of mainline V2Ray
* proxy dns with NOTIMP error
* Add TLSMirror looks like TLS censorship resistant transport protocol
as a developer preview transport
* proxy dns with NOTIMP error
* fix false success from SOCKS server when Dispatch() fails
* HTTP inbound: Directly forward plain HTTP 1xx response header
* add a option to override domain used to query https record
* Fix bugs
* Update vendor
- Update version to 5.33.0
* bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850)
* Update other vendor source
- Update version to 5.31.0
* Add Dns Proxy Response TTL Control
* Fix call newError Base with a nil value error
* Update vendor (boo#1235164)
- Update version to 5.29.3
* Enable restricted mode load for http protocol client
* Correctly implement QUIC sniffer when handling multiple initial packets
* Fix unreleased cache buffer in QUIC sniffing
* A temporary testing fix for the buffer corruption issue
* QUIC Sniffer Restructure
- Update version to 5.22.0
* Add packetEncoding for Hysteria
* Add ECH Client Support
* Add support for parsing some shadowsocks links
* Add Mekya Transport
* Fix bugs
</description>
<package>shadowsocks-v2ray-plugin</package>
<package>v2ray-core</package>
</patchinfo>

View File

@@ -1,90 +0,0 @@
<patchinfo incident="packagehub-39">
<packager>os-autoinst-obs-workflow</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for openQA, os-autoinst, openQA-devel-container</summary>
<description>This update for openQA, os-autoinst, openQA-devel-container fixes the following issues:
Changes in openQA:
- Update to version 5.1763743683.1da97aa2:
* Optimize Job Group dropdown database query
* Split dependency handling out of create_from_settings
* Give jobs with high MAX_JOB_TIME a priority malus
* Make the number of builds per group on the front page configurable
* docs: Feature auto-generated deepwiki less prominently
* apparmor: Additional perms for tests in osado to run
- Update to version 5.1763153079.b36ac754:
* Skip a build if there are no jobs
* Remove unused variable
- Update to version 5.1762879267.52145e9a:
* Avoid installing unwanted package versions
* Fix check in git_clone for dirty git dir
* Prevent `t/24-worker-webui-connection.t` from running into timeout
* Be explicit about certain aspects of archiving in the documentation
* Fix sporadic failures in `t/ui/10-tests_overview.t`
* Adapt os-autoinst-scripts reference after rename
* Properly conclude scheduling if there are no jobs
- Update to version 5.1762193001.2f6e71ca:
* Potentially improve stability of `t/ui/16-tests_job_next_previous.t`
* Avoid failing check in `t/16-utils-runcmd.t`
* README: Add deepwiki badge
* Dependency cron 2025-10-27
* Retry image optimizations
Changes in os-autoinst:
- Update to version 5.1763561851.03e049d:
* Avoid `Can't exec "ffmpeg"` if ffmpeg isn't present
* Fix syntax errors in nft due to multiple interfaces in $ethernet
* README: Feature auto-generated deepwiki less prominently
* Install NetworkManager-ovs in os-autoinst-setup-multi-machine
* Add disconnect_usb (qemu only, for now)
- Update to version 5.1763048144.30f43a0:
* Configure ftables in os-autoinst-setup-multi-machine
* Makefile: Fix reruns on incomplete build dir generations
* Propagate C++ exceptions to Perl in image write function
* Add support NICPCIADDR variable to QEMU backend
* Remove test which causes unhandled output
* Improve includes in tinycv library
* Handle OpenCV exceptions when writing an image
* Avoid ignoring errors silently when writing images
* Avoid saving test results referring to non-existent screenshots
- Update to version 5.1762250353.5150272:
* Makefile: Fix reruns on incomplete build dir generations
* Propagate C++ exceptions to Perl in image write function
* Add support NICPCIADDR variable to QEMU backend
* Remove test which causes unhandled output
* Allow array keys like `ISSUES[]` as introduced in openQA commit a53b19b
* Improve includes in tinycv library
- Update to version 5.1761723693.2b88807:
* Propagate C++ exceptions to Perl in image write function
* Add support NICPCIADDR variable to QEMU backend
* Remove test which causes unhandled output
* Allow array keys like `ISSUES[]` as introduced in openQA commit a53b19b
* Improve includes in tinycv library
* Handle OpenCV exceptions when writing an image
* Avoid ignoring errors silently when writing images
Changes in openQA-devel-container:
- Update to version 5.1763743683.1da97aa28:
* Update to latest openQA version
</description>
<package>openQA</package>
<package>openQA:openQA-devel-test</package>
<package>openQA:openQA-test</package>
<package>openQA:openQA-worker-test</package>
<package>openQA:openQA-client-test</package>
<package>os-autoinst</package>
<package>os-autoinst:os-autoinst-test</package>
<package>os-autoinst:os-autoinst-devel-test</package>
<package>os-autoinst:os-autoinst-openvswitch-test</package>
<package>openQA-devel-container</package>
</patchinfo>

1
rmt-server Submodule

Submodule rmt-server added at 4c6de7905a