products/PackageHub
SHA256
31
1
Fork 13
Code Issues Pull Requests 21 Actions Activity

Pull request for security update for chromium #200

Closed
msmeissn wants to merge 1 commits from msmeissn/PackageHub:maintenance-update-1761724628 into leap-16.0
pull from: msmeissn/PackageHub:maintenance-update-1761724628
merge into: products:leap-16.0
Conversation 6 Commits 1 Files Changed 2 +14 -1
msmeissn commented 2025-10-29 08:57:27 +01:00
Member
Copy Link

OLD, replaced by !201: pool/chromium!14

OLD, replaced by !201: pool/chromium!14
msmeissn added 1 commit 2025-10-29 08:57:27 +01:00
Update submodules from pool/chromium#14 and create patchinfo.20251029075709103584.187004354831441/_patchinfo
Some checks are pending
ObsStaging OBS Staging build
Details
acf199d3d5
msmeissn added 1 commit 2025-10-29 08:57:28 +01:00
Update submodules from pool/chromium#14 and create patchinfo.20251029075709103584.187004354831441/_patchinfo
Some checks are pending
ObsStaging OBS Staging build
Details
acf199d3d5
autogits_workflow_pr_bot requested review from autogits_obs_staging_bot 2025-10-29 08:57:45 +01:00
autogits_workflow_pr_bot requested review from maintenance-release-review 2025-10-29 08:57:45 +01:00
autogits_workflow_pr_bot requested review from opensuse-review 2025-10-29 08:57:45 +01:00
autogits_workflow_pr_bot requested review from qam-openqa-review 2025-10-29 08:57:45 +01:00
maintenance-release-review commented 2025-10-29 09:01:16 +01:00
Member
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Submitter is member of this review group, hence they are excluded from being one of the reviewers here

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state. Submitter is member of this review group, hence they are excluded from being one of the reviewers here
opensuse-review commented 2025-10-29 09:01:29 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
autogits_obs_staging_bot commented 2025-10-29 09:02:10 +01:00
Member
Copy Link

Build is started in https://build.opensuse.org/project/show/openSUSE:Backports:SLE-16.0:PullRequest:200 .

Build is started in https://build.opensuse.org/project/show/openSUSE:Backports:SLE-16.0:PullRequest:200 .
qam-openqa-review commented 2025-10-29 09:04:19 +01:00
Member
Copy Link

Review by qam-openqa-review represents a group of reviewers: mimi_vx, mschnitzer, openqa-maintenance, foursixnine-openqa, szarate .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @qam-openqa-review: approve.
To request changes on behalf of the group, create the following comment: @qam-openqa-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Submitter is member of this review group, hence they are excluded from being one of the reviewers here

Review by qam-openqa-review represents a group of reviewers: mimi_vx, mschnitzer, openqa-maintenance, foursixnine-openqa, szarate . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@qam-openqa-review: approve`. To request changes on behalf of the group, create the following comment: `@qam-openqa-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state. Submitter is member of this review group, hence they are excluded from being one of the reviewers here
AndreasStieger reviewed 2025-10-29 09:40:17 +01:00
patchinfo.20251029075709103584.187004354831441/_patchinfo
@@ -0,0 +1,13 @@
<patchinfo>
<issue tracker="cve" id="2025-54874">VUL-0: CVE-2025-54874: TRACKERBUG: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of-bounds heap</issue>
AndreasStieger commented 2025-10-29 09:40:17 +01:00
First-time contributor
Copy Link

This CVE is from a removed patch, not a newly fixed CVE.

In fact there does not seem to be any security advisory (yet) on the announcement.

This CVE is from a removed patch, not a newly fixed CVE. In fact there does not seem to be any security advisory (yet) on the [announcement](https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html).
rfrohl commented 2025-10-29 13:45:33 +01:00
Member
Copy Link

updated in #201

Marcus is sick and I am officially on FTO, so closing 200 may take a bit

updated in https://src.opensuse.org/products/PackageHub/pulls/201 Marcus is sick and I am officially on FTO, so closing 200 may take a bit
msmeissn commented 2025-10-29 14:32:31 +01:00
Author
Member
Copy Link

robert did a new one

robert did a new one
msmeissn closed this pull request 2025-10-29 14:32:32 +01:00
Some checks are pending
ObsStaging OBS Staging build
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
maintenance-release-review
opensuse-review
qam-openqa-review
autogits_obs_staging_bot
AndreasStieger
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
abergmann adrianSuSE atartamo autobuild-owner autobuild-review autogits_obs_staging_bot autogits_workflow_pr_bot bfilho bigironman darix dmach eroca factory_bot gitea-actions-autobuild gsonnu jdsn legaldb lkocman-factory maintenance-release-review maxlin_factory mbozicevic mimi_vx mschnitzer msmeissn mstrigl oertel opensuse-review packagehub-review pluskalm qam-openqa-review rfrohl smithfarm szarate
No Assignees
7 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: products/PackageHub#200
Delete Branch "msmeissn/PackageHub:maintenance-update-1761724628"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?