Update submodules from pool/gitea-tea#1 and create patchinfo.20251126115642933537.93181000773252/_patchinfo

Update patchinfo incident numbers [skip actions]
Merging
2025-11-26 12:58:07 +01:00 · 2025-11-24 17:36:46 +00:00 · 2025-11-24 17:36:25 +00:00 · 2025-11-24 09:34:14 +00:00 · 2025-11-24 09:33:54 +00:00 · 2025-11-24 09:33:09 +00:00
64 changed files with 27252 additions and 99 deletions
--- a/.gitea/workflows/patchinfo_numberator.yaml
+++ b/.gitea/workflows/patchinfo_numberator.yaml
@@ -1,37 +1,35 @@
 # Use this as .gitea/workflows/patchinfo_numberator.yaml in all products/* repos
-name: Patchinfo ID numberator
-run-name: ${{ gitea.actor }} is setting patchinfo numbers
-on: [push]
+name: Patchinfo incident numbering
+
+on:
+  push:
+  workflow_dispatch:
+
+env:
+  REPO_PATH: /workspace/${{ gitea.repository }}
+  REPO_URL: https://gitea-actions-autobuild:${{ secrets.REPO_WRITE }}@$RUNNER_GITEA_DOMAIN/${{ gitea.repository }}.git

 jobs:
  use-go-action:
-    runs-on: tumbleweed
+    runs-on: tumbleweed_autobuild
    steps:
-      # Install packages if not provided by image
-      - run: |
-          rpm -q go && exit 0
-          zypper ref
-          zypper in -y go
-      # Generic action from GitHub to clone the product git repo
+
      - name: Checkout product
-        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/github-actions-checkout@v4
-        with:
-          token: ${{ secrets.REPO_WRITE }}
-          repo-sha256: true
+        run: |
+          test -n "${{ env.REPO_PATH }}" && rm -rfv "${{ env.REPO_PATH }}"/*
+          git config --global --add safe.directory ${{ env.REPO_PATH }}
+          git clone ${{ env.REPO_URL }} ${{ env.REPO_PATH }}

      - name: Update all new _patchinfo files
-        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/patchinfo-numbering-action@v0
-      - name: Get last commit author
-        id: last-commit
-        run: |
-          echo "author=$(git log -1 --pretty='%an <%ae>')" >> $GITHUB_OUTPUT
-      - name: Commit changes back
-        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/stefanzweifel-git-auto-commit-action@v5
+        uses: https://src.opensuse.org/actions/patchinfo-numbering-action@v0
+        with:
+          prefix: packagehub-
+
+      - name: Commit changes
+        uses: https://src.opensuse.org/actions/stefanzweifel-git-auto-commit-action@v5
        with:
          commit_user_name: gitea-actions-autobuild
-          commit_user_email: autobuild+gitea@opensuse.org
-          commit_author: ${{ steps.last-commit.outputs.author }}
-          commit_message: "Update incident numbers [skip actions]"
+          commit_author: Patchinfo incident numbering <gitea-actions-autobuild@noreply.src.opensuse.org> 
+          commit_message: "Update patchinfo incident numbers [skip actions]"
          commit_options: '--no-edit'
          skip_fetch: true
-
--- a/.gitmodules
+++ b/.gitmodules
@@ -26106,3 +26106,31 @@
 	path = perl-MCP
 	url = ../../pool/perl-MCP
 	branch = leap-16.0
+[submodule "fprintd"]
+	path = fprintd
+	url = ../../pool/fprintd
+	branch = leap-16.0
+[submodule "python-acme"]
+	path = python-acme
+	url = ../../pool/python-acme
+	branch = leap-16.0
+[submodule "python-certbot"]
+	path = python-certbot
+	url = ../../pool/python-certbot
+	branch = leap-16.0
+[submodule "python-certbot-nginx"]
+	path = python-certbot-nginx
+	url = ../../pool/python-certbot-nginx
+	branch = leap-16.0
+[submodule "python-ConfigArgParse"]
+	path = python-ConfigArgParse
+	url = ../../pool/python-ConfigArgParse
+	branch = leap-16.0
+[submodule "python-josepy"]
+	path = python-josepy
+	url = ../../pool/python-josepy
+	branch = leap-16.0
+[submodule "python-pyRFC3339"]
+	path = python-pyRFC3339
+	url = ../../pool/python-pyRFC3339
+	branch = leap-16.0
--- a/0Backports/Backports.changes
+++ b/0Backports/Backports.changes
@@ -1,3 +1,60 @@
+-------------------------------------------------------------------
+Fri Oct 10 07:19:41 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded, not needed 
+    micro patterns that are coming from SLES
+      patterns-micro-alt_onlyDVD                               
+      patterns-micro-cloud                                     
+      patterns-micro-defaults                                  
+      patterns-micro-fips                                      
+      patterns-micro-hardware                                  
+      patterns-micro-ima-evm                                   
+      patterns-micro-kvm_host                                  
+      patterns-micro-onlyDVD                                   
+      patterns-micro-ra-agent                                  
+      patterns-micro-ra-verifier                               
+      patterns-micro-salt_minion                               
+      patterns-micro-sssd-ldap            
+
+-------------------------------------------------------------------
+Mon Oct  6 14:49:27 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded, remove more uninstallables
+      aws-cli
+      NetworkManager-branding-upstream
+      sdbootutil-tukit
+      toolbox-branding-SLE-16.0 
+
+-------------------------------------------------------------------
+Mon Oct  6 13:24:32 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded, cleanup more unneeded 32bit packages
+      at-spi2-core-devel-32bit
+      libcups2-32bit
+      libcurl-devel-32bit
+      libdns_sd-32bit
+      libpcap-devel-32bit
+      libraptor2-0-32bit
+      libtss2-fapi1-32bit
+
+-------------------------------------------------------------------
+Thu Oct  2 15:07:44 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
+
+- Backports.productcompose:
+  + add to backports_unneeded since not needed patterns
+      patterns-base-transactional_base
+      patterns-micro-elemental_client
+      patterns-sap-bone
+
+-------------------------------------------------------------------
+Fri Sep 26 16:48:57 UTC 2025 - Nathan Cutler <ncutler@suse.com>
+
+- Backports.productcompose
+  + sync with current state of SLES-16.0 (GM)
+
 -------------------------------------------------------------------
 Wed Sep 24 10:49:29 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>

--- a/0Backports/Backports.productcompose
+++ b/0Backports/Backports.productcompose
@@ -14,7 +14,7 @@ scc:

 build_options:
 ### For maintenance, otherwise only "the best" version of each package is picked:
-# - take_all_available_versions
+- take_all_available_versions
 - hide_flavor_in_product_directory_name

 ### Since the Backports product build is not self-contained in a single repository,
@@ -32,8 +32,8 @@ debug: split
 repodata: all

 # has only an effect during maintenance:
-set_updateinfo_from: maint-coord@suse.de
-# set_updateinfo_id_prefix: openSUSE-Leap-16.0-
+set_updateinfo_from: maintenance@opensuse.org
+set_updateinfo_id_prefix: SUSE-PackageHub-16.0-

 flavors:
  backports_aarch64:
@@ -58,6 +58,9 @@ packagesets:
  - ALP
  - ALP-dummy-release
  - MozillaFirefox-branding-upstream
+  - NetworkManager-branding-upstream
+  - at-spi2-core-devel-32bit
+  - aws-cli
  - bash-legacybin
  - busybox-adduser
  - busybox-attr
@@ -144,6 +147,8 @@ packagesets:
  - kernel-livepatch-6_12_0-160000_4-rt
  - kernel-livepatch-6_12_0-160000_5-default
  - kernel-livepatch-6_12_0-160000_5-rt
+  - kernel-livepatch-6_12_0-160000_6-default
+  - kernel-livepatch-6_12_0-160000_6-rt
  - kernel-rt-livepatch
  - kernel-rt-livepatch-devel
  - krb5-mini
@@ -155,12 +160,14 @@ packagesets:
  - libatk-bridge-2_0-0-32bit
  - libatspi0-32bit
  - libavahi-client3-32bit
-#  - libcups2-32bit
+  - libcups2-32bit
  - libcurl-mini4
  - libcurl4-32bit
+  - libcurl-devel-32bit
  - libdbus-1-3-32bit
  - libdbus-glib-1-2-32bit
  - libdc1394-26-32bit
+  - libdns_sd-32bit
  - libdebuginfod-dummy-devel
  - libdebuginfod1-dummy
  - libdvbv5-0-32bit
@@ -170,16 +177,19 @@ packagesets:
  - liblirc_driver0-32bit
  - libmanette-0_2-0-32bit
  - libpcap1-32bit
+  - libpcap-devel-32bit
  - libpolkit-agent-1-0-32bit
  - libpolkit-gobject-1-0-32bit
  - libpq5-32bit
  - libpxbackend-1_0-mini
+  - libraptor2-0-32bit
  - libressl
  - libressl-devel
  - libressl-devel-doc
 #  - libsybdb5-32bit
  - libsystemd0-mini
 #  - libtdsodbc0-32bit
+  - libtss2-fapi1-32bit
  - libudev-mini1
  - libunbound-devel-mini
  - libusb-1_0-0-32bit
@@ -195,6 +205,22 @@ packagesets:
  - openssl_tpm2
  - pam-extra-32bit
  - patterns-base-kernel_livepatching
+  - patterns-base-transactional_base
+  - patterns-micro-alt_onlyDVD
+  - patterns-micro-cloud
+  - patterns-micro-defaults
+  - patterns-micro-elemental_client
+  - patterns-micro-defaults
+  - patterns-micro-fips
+  - patterns-micro-hardware
+  - patterns-micro-ima-evm
+  - patterns-micro-kvm_host
+  - patterns-micro-onlyDVD
+  - patterns-micro-ra-agent
+  - patterns-micro-ra-verifier
+  - patterns-micro-salt_minion
+  - patterns-micro-sssd-ldap
+  - patterns-sap-bone
  - patterns-base-update_test
  - plymouth-branding-upstream
  - postgresql17-devel-mini
@@ -222,6 +248,7 @@ packagesets:
  - reproducible-faketools-tar
  - reproducible-faketools-verbose
  - reproducible-faketools-zip
+  - sdbootutil-tukit
  - sddm-branding-openSUSE
  - sddm-qt6-branding-openSUSE
  - systemd-default-settings-branding-openSUSE
@@ -233,6 +260,7 @@ packagesets:
  - systemd-mini-container
  - systemd-mini-devel
  - this-is-only-for-build-envs
+  - toolbox-branding-SLE-16.0
  - udev-mini
  - update-test-32bit-pkg
  - update-test-affects-package-manager
@@ -245,6 +273,12 @@ packagesets:
  - update-test-retracted
  - update-test-security
  - update-test-trivial
+  - xen
+  - xen-devel
+  - xen-libs
+  - xen-doc-html
+  - xen-tools
+  - xen-tools-domU
  - yum-utils

 # TODO: unneeded Leap package per architecture
@@ -1360,17 +1394,14 @@ packagesets:
  - go-doc
  - go-md2man
  - go-race
-  - go1.23
-  - go1.23-doc
-  - go1.23-openssl
-  - go1.23-openssl-doc
-  - go1.23-openssl-race
-  - go1.23-race
  - go1.24
  - go1.24-doc
  - go1.24-openssl
  - go1.24-openssl-race
  - go1.24-race
+  - go1.25
+  - go1.25-doc
+  - go1.25-race
  - gobject-introspection
  - gobject-introspection-devel
  - golang-github-cpuguy83-go-md2man
@@ -1785,11 +1816,13 @@ packagesets:
  - ibus-gtk3
  - ibus-gtk4
  - ibus-hangul
+  - ibus-kkc
  - ibus-lang
  - ibus-libpinyin
  - ibus-libzhuyin
  - ibus-m17n
  - ibus-rime
+  - ibus-skk
  - ibus-table
  - ibus-table-chinese-array
  - ibus-table-chinese-cangjie
@@ -1805,6 +1838,7 @@ packagesets:
  - ibus-table-chinese-wubi-jidian
  - ibus-table-chinese-yong
  - ibus-table-extraphrase
+  - ibus-unikey
  - ibutils
  - icu
  - icu4j
@@ -1928,6 +1962,7 @@ packagesets:
  - jdom-javadoc
  - jdom2
  - jdom2-javadoc
+  - jdupes
  - jeos-firstboot
  - jetbrains-annotations
  - jetbrains-annotations-javadoc
@@ -2088,6 +2123,7 @@ packagesets:
  - kiwi-systemdeps-image-validation
  - kiwi-systemdeps-iso-media
  - kiwi-templates-Minimal
+  - kkc-data
  - kmod
  - kpartx
  - krb5
@@ -2668,6 +2704,7 @@ packagesets:
  - libcupsimage2
  - libcurl-devel
  - libcurl-devel-doc
+  - libcurl-mini4
  - libcurl4
  - libdaemon-devel
  - libdaemon0
@@ -3149,6 +3186,7 @@ packagesets:
  - libjcat1
  - libjemalloc2
  - libjitterentropy3
+  - libjodycode3
  - libjpeg-turbo
  - libjpeg62
  - libjpeg62-devel
@@ -3199,6 +3237,7 @@ packagesets:
  - libkeymap1
  - libkeyutils1
  - libkfont0
+  - libkkc2
  - libkmip-devel
  - libkmip-tools
  - libkmip0
@@ -3239,9 +3278,8 @@ packagesets:
  - liblcms2-2
  - liblcms2-devel
  - liblcms2-doc
-  - libldap-2_5-0
+  - libldap-2
  - libldap-data
-  - libldap2
  - libldapcpp-devel
  - libldapcpp0
  - libldb-devel
@@ -3347,6 +3385,7 @@ packagesets:
  - libmpfr6
  - libmpg123-0
  - libmplex2-2_2-0
+  - libmsgpack-c2
  - libmsgraph1-1
  - libmspack-devel
  - libmspack0
@@ -3686,6 +3725,7 @@ packagesets:
  - libsigc++3-devel
  - libsigc-2_0-0
  - libsigc-3_0-0
+  - libskk0
  - libslang2
  - libslirp-devel
  - libslirp0
@@ -4130,6 +4170,7 @@ packagesets:
  - libzypp-devel
  - libzypp-devel-doc
  - libzypp-plugin-appdata
+  - lifecycle-data-sle
  - lilv
  - linux-atm
  - linux-atm-devel
@@ -4660,13 +4701,9 @@ packagesets:
  - openjpeg2
  - openjpeg2-devel
  - openjpeg2-devel-doc
-  - openldap2-client
-  - openldap2-devel
-  - openldap2-devel-static
-  - openldap2-doc
-  - openldap2_5-client
-  - openldap2_5-devel
-  - openldap2_5-doc
+  - openldap2_6-client
+  - openldap2_6-devel
+  - openldap2_6-doc
  - openmpi4
  - openmpi4-config
  - openmpi4-devel
@@ -5211,6 +5248,7 @@ packagesets:
  - permissions-zypp-plugin
  - pesign-obs-integration
  - pgvector-devel
+  - php-composer2
  - php8
  - php8-bcmath
  - php8-bz2
@@ -6813,6 +6851,7 @@ packagesets:
  - samba-tool
  - samba-winbind
  - samba-winbind-libs
+  - sap-convergent-resource-agents
  - sap-suse-cluster-connector
  - sapcontrol-bash-completion
  - saphana-checks
@@ -6833,6 +6872,7 @@ packagesets:
  - sca-patterns-sle12
  - sca-patterns-sle15
  - sca-server-report
+  - scap-security-guide
  - sccache
  - schily-ctags
  - schily-mt
@@ -6883,6 +6923,8 @@ packagesets:
  - sisu-mojos
  - sisu-mojos-javadoc
  - sisu-plexus
+  - skkdic
+  - skkdic-extra
  - skopeo
  - skopeo-bash-completion
  - skopeo-fish-completion
@@ -7718,8 +7760,8 @@ packagesets:
  - fwts
  - fwupd-efi
  - gfs2-kmp-64kb
-  - go1.23-libstd
  - go1.24-libstd
+  - go1.25-libstd
  - google-cloud-sap-agent
  - google-dracut-config
  - google-guest-agent
@@ -7859,7 +7901,6 @@ packagesets:
  - shim
  - supportutils-plugin-suse-public-cloud
  - system-group-ne
-  - systemd-boot
  - tftpboot-agama-installer-SUSE_SLE_16-aarch64
  - u-boot-rpi3
  - u-boot-rpi3-doc
@@ -7895,7 +7936,7 @@ packagesets:
  - kernel-default-livepatch
  - kernel-kvmsmall
  - kernel-kvmsmall-devel
-  - kernel-livepatch-6_12_0-160000_20-default
+  - kernel-livepatch-6_12_0-160000_5-default
  - libLLVMSPIRVLib19
  - libatopology2
  - libdpdk-25
@@ -8006,7 +8047,7 @@ packagesets:
  - dnsdist
  - grub2-s390x-emu
  - kernel-default-livepatch
-  - kernel-livepatch-6_12_0-160000_20-default
+  - kernel-livepatch-6_12_0-160000_5-default
  - kernel-zfcpdump
  - kiwi-settings
  - libHBAAPI2
@@ -8027,8 +8068,6 @@ packagesets:
  - luajit
  - luajit-devel
  - openssl-ibmca
-  - openssl-ibmca-engine
-  - openssl-ibmca-provider
  - orarun
  - osasnmpd
  - pam-doc
@@ -8082,7 +8121,6 @@ packagesets:
  - cloud-regionsrv-client-plugin-azure
  - cloud-regionsrv-client-plugin-ec2
  - cloud-regionsrv-client-plugin-gce
-  - containerized-data-importer-manifests
  - crash-gcore
  - disk-encryption-tool
  - dmidecode
@@ -8111,8 +8149,8 @@ packagesets:
  - gfxboot-devel
  - glibc-livepatches
  - gmmlib-devel
-  - go1.23-libstd
  - go1.24-libstd
+  - go1.25-libstd
  - google-cloud-sap-agent
  - google-dracut-config
  - google-guest-agent
@@ -8148,9 +8186,8 @@ packagesets:
  - kernel-kvmsmall
  - kernel-kvmsmall-devel
  - kernel-kvmsmall-vdso
-  - kernel-livepatch-6_12_0-160000_20-default
+  - kernel-livepatch-6_12_0-160000_5-default
  - kiwi-pxeboot
-  - kubevirt-manifests
  - kubevirt-virtctl
  - libFLAC++10-x86-64-v3
  - libFLAC12-x86-64-v3
@@ -8419,7 +8456,6 @@ packagesets:
  - sysctl-logger
  - syslinux
  - system-group-ne
-  - systemd-boot
  - systemd-presets-branding-SLE-SAP
  - tboot
  - tftpboot-agama-installer-SUSE_SLE_16-x86_64
@@ -8494,3 +8530,4 @@ packagesets:
  - backports_ppc64le
  - backports_s390x
  - backports_x86_64
+
--- a/2
+++ b/2
--- a/8
+++ b/8
@@ -1,4 +1,8 @@
+%if 0%{?is_stage_project}
+Release: <CI_CNT>.<B_CNT> spec:bp160.999999.<CI_CNT>.<B_CNT>
+%else
 Release: <CI_CNT>.<B_CNT> spec:bp160.<CI_CNT>.<B_CNT>
+%endif

 # 000productcompose experiment
 %if "%_repository" == "product"
@@ -143,7 +147,7 @@ Substitute: wallpaper-branding-openSUSE wallpaper-branding-SLE
 %define is_opensuse  1
 %define is_backports 1

-%if "%_project" == "openSUSE:Backports:SLE-16.0" || "%_project" == "openSUSE:Backports:SLE-16.0:git"
+%if 0%{?_is_in_project}
 Macros:
 %vendor openSUSE
 %distribution SUSE Linux Enterprise 16
@@ -164,7 +168,7 @@ Macros:

 # Leap specific package list, the same list with excludebuild must add to Backports project
 # Most of package should be built in Backports
-%if "%_project" == "openSUSE:Backports:SLE-16.0" || "%_project" == "openSUSE:Backports:SLE-16.0:git"
+%if "%_project" == "openSUSE:Backports:SLE-16.0"
 # we build ffado:ffado-mixer for openSUSE, the main one is built in SLFO
 BuildFlags: excludebuild:ffado
 # build gpgme:qt flavor for qt5 support
--- a/_maintainership.json
+++ b/_maintainership.json
@@ -1,3 +1,3 @@
 {
-    "": ["packagehub-review"]
+    "": ["maintenance-release-review"]
 }
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/patchinfo.20251010110535882810.90520734224245/_patchinfo
+++ b/patchinfo.20251010110535882810.90520734224245/_patchinfo
@@ -0,0 +1,66 @@
+<patchinfo incident="packagehub-1">
+  <issue tracker="bnc" id="1251334">VUL-0: chromium: release 141.0.7390.65</issue>
+  <issue tracker="cve" id="2025-11213">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11216">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11207">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11211">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11212">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11210">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="bnc" id="1250780">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11208">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-10890">VUL-0: chromium: release 140.0.7339.207</issue>
+  <issue tracker="cve" id="2025-11206">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11460">VUL-0: chromium: release 141.0.7390.65</issue>
+  <issue tracker="cve" id="2025-11219">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="bnc" id="1250472">VUL-0: chromium: release 140.0.7339.207</issue>
+  <issue tracker="cve" id="2025-11205">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-10891">VUL-0: chromium: release 140.0.7339.207</issue>
+  <issue tracker="cve" id="2025-11458"/>
+  <issue tracker="cve" id="2025-11215">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-11209">VUL-0: chromium: release 141.0.7390.54</issue>
+  <issue tracker="cve" id="2025-10892">VUL-0: chromium: release 140.0.7339.207</issue>
+  <packager>AndreasStieger</packager>
+  <rating>critical</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 141.0.7390.76:
+
+  * Do not send URLs as AIM input. This is to resolve a privacy
+    concern, around passing urls to AI Mode.
+
+Chromium 141.0.7390.65 (boo#1251334):
+
+  * CVE-2025-11458: Heap buffer overflow in Sync
+  * CVE-2025-11460: Use after free in Storage
+  * CVE-2025-11211: Out of bounds read in WebCodecs
+
+Chromium 141.0.7390.54 (stable released 2025-09-30) (boo#1250780)
+
+  * CVE-2025-11205: Heap buffer overflow in WebGPU
+  * CVE-2025-11206: Heap buffer overflow in Video
+  * CVE-2025-11207: Side-channel information leakage in Storage
+  * CVE-2025-11208: Inappropriate implementation in Media
+  * CVE-2025-11209: Inappropriate implementation in Omnibox
+  * CVE-2025-11210: Side-channel information leakage in Tab
+  * CVE-2025-11211: Out of bounds read in Media
+  * CVE-2025-11212: Inappropriate implementation in Media
+  * CVE-2025-11213: Inappropriate implementation in Omnibox
+  * CVE-2025-11215: Off by one error in V8
+  * CVE-2025-11216: Inappropriate implementation in Storage
+  * CVE-2025-11219: Use after free in V8
+  * Various fixes from internal audits, fuzzing and other initiatives
+
+Chromium 141.0.7390.37 (beta released 2025-09-24)
+
+Chromium 140.0.7339.207 (boo#1250472)
+
+  * CVE-2025-10890: Side-channel information leakage in V8
+  * CVE-2025-10891: Integer overflow in V8
+  * CVE-2025-10892: Integer overflow in V8
+
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251015125625066283.90520734224245/_patchinfo
+++ b/patchinfo.20251015125625066283.90520734224245/_patchinfo
@@ -0,0 +1,17 @@
+<patchinfo incident="packagehub-3">
+  <issue tracker="bnc" id="1252013">VUL-0: CVE-2025-11756: chromium: Use after free in Safe Browsing</issue>
+  <issue tracker="cve" id="2025-11756"/>
+  <packager>AndreasStieger</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 141.0.7390.107:
+
+* CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)
+
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251016111300220521.93181000773252/_patchinfo
+++ b/patchinfo.20251016111300220521.93181000773252/_patchinfo
@@ -0,0 +1,17 @@
+<patchinfo incident="packagehub-11">
+  <issue tracker="bnc" id="1250487">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
+  <issue tracker="cve" id="2025-59682">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
+  <issue tracker="cve" id="2025-59681"/>
+  <issue tracker="bnc" id="1250485">VUL-0: CVE-2025-59681: python-Django,python-Django4: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB</issue>
+  <packager>mcalabkova</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for python-Django</summary>
+  <description>This update for python-Django fixes the following issues:
+
+- CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485)
+- CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract() (boo#1250487)
+</description>
+  <package>python-Django</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251017085122907353.93181000773252/_patchinfo
+++ b/patchinfo.20251017085122907353.93181000773252/_patchinfo
@@ -0,0 +1,103 @@
+<patchinfo incident="packagehub-4">
+  <packager>dheidler</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for opi</summary>
+  <description>This update for opi fixes the following issues:
+
+- Version 5.8.8
+  * Fix adding openh264 repo on leap 16.0
+
+This update for opi fixes the following issues:
+
+- Version 5.8.7
+  * Fix ocenaudio url
+  * Add LocalSend plugin
+  * Run all tests in verbose mode
+  * Print written repo files in verbose mode
+  * Increase timeouts in test/06_install_non_interactive.py
+  * Remove DNF references from README.md
+
+This update for opi fixes the following issues:
+
+- Version 5.8.5
+  * add librewolf plugin (#205)
+  * Install .NET 9
+  * Add verbose mode
+  * Change the order of the process in the github module
+  * Add rustdesk plugin
+
+This update for opi fixes the following issues:
+
+- Version 5.8.4
+  * Use arm64 rpm for libation on aarch64
+
+This update for opi fixes the following issues:
+
+- Version 5.8.3
+  * Install dependencies rpm-build and squashfs at runtime if needed
+  * Drop DNF support
+
+This update for opi fixes the following issues:
+
+- Version 5.8.2
+  * Warn about adding staging repos
+  * Gracefully handle zypper exit code 106 (repos without cache present)
+
+This update for opi fixes the following issues:
+
+- Version 5.8.1
+  * Fix SyntaxWarning: invalid escape sequence '\s'
+
+This update for opi fixes the following issues:
+
+- Version 5.8.0
+  * Add mullvad-brower
+
+This update for opi fixes the following issues:
+
+- Version 5.7.0
+  * Add leap-only plugin to install zellij from github release
+  * Don't use subprocess.run user kwarg on 15.6
+  * Fix tests: Use helloworld-opi-tests instead of zfs
+  * Perform search despite locked rpmdb
+  * Simplify backend code
+
+This update for opi fixes the following issues:
+
+- Use no macros in url in .spec for packtrack
+
+This update for opi fixes the following issues:
+
+- Version 5.6.0
+  * Add plugin to install vagrant from hashicorp repo
+
+This update for opi fixes the following issues:
+
+- Version 5.5.0
+  * Update opi/plugins/collabora.py
+  * add collabora office desktop
+  * Omit unsupported cli args on leap in 99_install_opi.py
+  * Switch to PEP517 install
+  * Fix 09_install_with_multi_repos_in_single_file_non_interactive.py
+  * Fix 07_install_multiple.py on tumbleweed
+  * Fix test suite on tumbleweed
+  * Update available apps in opi - README.md
+
+This update for opi fixes the following issues:
+
+- Version 5.4.0
+  * Show key ID when importing or deleting package signing keys
+  * Add option to install google-chrome-canary
+
+This update for opi fixes the following issues:
+
+- Version 5.3.0
+  * Fix tests for new zypper version
+  * fix doblue slash in packman repo url
+  * Add Plugin to install Libation
+
+</description>
+  <package>opi</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251017085327031166.93181000773252/_patchinfo
+++ b/patchinfo.20251017085327031166.93181000773252/_patchinfo
@@ -0,0 +1,17 @@
+<patchinfo incident="packagehub-5">
+  <packager>michals</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for virtme</summary>
+  <description>This update for virtme fixes the following issues:
+
+- Update to 1.38:
+  * Fix the infamous Stale file handle (ESTALE) errors with virtiofsd
+  * Fix for systemctl daemon-reload when systemd support is enabled
+  * Fix for a kernel symlink issue affecting openSUSE/SLE
+  * README/docs improvements
+  * Various coding style cleanups
+</description>
+  <package>virtme</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251020125830692820.93181000773252/_patchinfo
+++ b/patchinfo.20251020125830692820.93181000773252/_patchinfo
@@ -0,0 +1,55 @@
+<patchinfo incident="packagehub-6">
+  <issue tracker="bnc" id="1206292">[SELinux] Wine/Proton not working reliably with default SELinux configuration</issue>
+  <packager>regularhunter</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for lutris</summary>
+  <description>This update for lutris fixes the following issues:
+
+- Move selinux dependency
+
+- Fix gaming under selinux (bsc#1206292)
+
+- Fix wrong placement of lang_package macro in spec file
+
+- Update to 0.5.19:
+  * Fix Proton integration bugs so Proton-fixes are applied
+  * Do not offer DXVK, VKD3D, D3D Extras or DDXVK-NVAPI on Proton versions;
+    Proton will handle these.
+  * The "Enable Esync" and "Enable Fsync" settings are now passed on to Proton
+  * DXVK's integrated D8VK will be enabled in Proton
+  * Emulator BIOS file location (used by libretro) may be set in Preferences
+  * Obtain the release year from GOG and Itch.io.
+  * MAME Machine setting uses a searchable entry for its enourmous list
+  * Support for importing Commodore 64 ROMs
+
+- Add BuildRequires apparmor-abstractions, apparmor-rpm-macros for
+  Leap, fix for build error: directories not owned by a package:
+  /etc/apparmor.d
+
+- update to 0.5.18:
+  * Lutris downloads the latest GE-Proton build for Wine if any Wine version is installed
+  * Use dark theme by default
+  * Display cover-art rather than banners by default
+  * Add 'Uncategorized' view to sidebar
+  * Preference options that do not work on Wayland will be hidden when on Wayland
+  * Game searches can now use fancy tags like 'installed:yes' or 'source:gog', with explanatory tool-tip
+  * A new filter button on the search box can build many of these fancy tags for you
+  * Runner searches can use 'installed:yes' as well, but no other fancy searches or anything
+  * Updated the Flathub and Amazon source to new APIs, restoring integration
+  * Itch.io source integration will load a collection named 'Lutris' if present
+  * GOG and Itch.io sources can now offer Linux and Windows installers for the same game
+  * Added support for the 'foot' terminal
+  * Support for DirectX 8 in DXVK v2.4
+  * Support for Ayatana Application Indicators
+  * Additional options for Ruffle runner
+  * Updated download links for the Atari800 and MicroM8 runners
+  * No longer re-download cached installation files even when some are missing
+  * Lutris log is included in the 'System' tab of the Preferences window
+  * Improved error reporting, with the Lutris log included in the error details
+  * Add AppArmor profile for Ubuntu versions &gt;= 23.10
+  * Add Duckstation runner
+</description>
+  <package>lutris</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251022070616351820.90520734224245/_patchinfo
+++ b/patchinfo.20251022070616351820.90520734224245/_patchinfo
@@ -0,0 +1,16 @@
+<patchinfo incident="packagehub-8">
+  <issue tracker="cve" id="2025-12036">VUL-0: CVE-2025-12036: chromium: Inappropriate implementation in V8</issue>
+  <issue tracker="bnc" id="1252402">VUL-0: CVE-2025-12036: chromium: Inappropriate implementation in V8</issue>
+  <packager>AndreasStieger</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 141.0.7390.122:
+
+  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251023113823853491.93181000773252/_patchinfo
+++ b/patchinfo.20251023113823853491.93181000773252/_patchinfo
@@ -0,0 +1,57 @@
+<patchinfo incident="packagehub-7">
+  <issue tracker="bnc" id="1248768">[warewulf, REGRESSION] None of the disk/partition/filesystem Options to `wwctl profile set` appear to do anything</issue>
+  <issue tracker="bnc" id="1227465">[warewulf, kernel] After updating the Kernel in the Container Image 'wwctl container list' still shows old</issue>
+  <issue tracker="bnc" id="1246082">warewulf4-slurm suggest  slurm only</issue>
+  <issue tracker="bnc" id="1248906">VUL-0: CVE-2025-58058: warewulf4: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory</issue>
+  <issue tracker="bnc" id="1227686">[warewulf, kernel] Feature: Allow to determine the Kernel to boot - with none set, take latest</issue>
+  <issue tracker="cve" id="2025-58058">cve#2025-58058 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-58058</issue>
+  <packager>mslacken</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for warewulf4</summary>
+  <description>This update for warewulf4 fixes the following issues:
+
+Changes in warewulf4:
+
+- Update to version 4.6.4:
+  * v4.6.4 release updates
+  * Convert disk booleans from wwbool to *bool which allows bools in
+    disk to be set to false via command line (bsc#1248768)
+  * Update NetworkManager Overlay
+    * Disable ipv4 in NetworkManager if no address or route is specified
+  * fix(wwctl): Create overlay edit tempfile in tmpdir
+  * Add default for systemd name for warewulf in warewulf.conf
+  * Atomic overlay file application in wwclient
+  * Simpler names for overlay methods
+  * Fix warewulfd api behavior when deleting distribution overlay
+
+- Update to version 4.6.3:
+  * v4.6.3 release
+  * IPv6 iPXE support
+  * Fix a syntax error in the RPM specfile
+  * Fix a race condition in wwctl overlay edit
+  * Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays
+  * Move reexec.Init() to beginning of wwctl
+  * Add documentation for using tmpfs to distribute across numa nodes
+  * added warewuld configure option
+  * Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)
+  * Address copilot review from #1945
+  * Refactor wwapi tests for proper isolation
+  * Bugfix: cloning a site overlay when parent dir does not exist
+  * Clone to a site overlay when adding files in wwapi
+  * Consolidated createOverlayFile and updateOverlayFile to addOverlayFile
+  * Support for creating and updating overlay file in wwapi
+  * Only return overlay files that refer to a path within the overlay
+  * add overlay file deletion support
+  * DELETE /api/overlays/{id}?force=true can delete overlays in use
+  * Restore idempotency of PUT /api/nodes/{id}
+  * Simplify overlay mtime api and add tests
+  * add node overlay buildtime
+  * Improved netplan support
+  * Rebuild overlays for discovered nodes
+  * Restrict userdocs from building during pr when not modified
+  * Update to v4.6.2 GitHub release notes
+</description>
+  <package>warewulf4</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251023150135882810.90520734224245/_patchinfo
+++ b/patchinfo.20251023150135882810.90520734224245/_patchinfo
@@ -0,0 +1,11 @@
+<patchinfo incident="packagehub-9">
+  <packager>dgarcia</packager>
+  <rating>moderate</rating>
+  <category>optional</category>
+  <summary>Optional update for fprintd</summary>
+  <description>
+This update ships fprintd 1.94.4 to openSUSE Leap 16.0 and SLES Package Hub 16.0
+</description>
+  <package>fprintd</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251025182237146698.93181000773252/_patchinfo
+++ b/patchinfo.20251025182237146698.93181000773252/_patchinfo
@@ -0,0 +1,129 @@
+<patchinfo incident="packagehub-13">
+  <packager>os-autoinst-obs-workflow</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for openQA, os-autoinst</summary>
+  <description>This update for openQA, os-autoinst fixes the following issues:
+
+Changes in openQA:
+
+- Update to version 5.1761296552.ae7c17aa:
+  * Add tests for file_security_policy
+  * Pass parameter $is_userfile to log_url
+  * Remove redirect and serve files as attachments if necessary
+  * Serve files uploaded by tests via asset domain
+  * Use direct link to subdomain for the test assets
+  * Revert "Don't redirect to asset domain via /needles/ID/(image|json) route"
+  * Revert "Don't redirect screenshots, thumbs and needles to files_domain"
+
+- Update to version 5.1761228068.a3a7f84d:
+  * Dependency cron 2025-10-23
+
+- Update to version 5.1761037330.ad78558e:
+  * Avoid needless check for number of clones
+  * Avoid creation of `git_clone` tasks for jobs with empty `DISTRI`
+
+- Update to version 5.1760515610.a802d1dd:
+  * Lower the prio of archiving jobs to avoid piling up finalize jobs
+  * Add signatures in Schema::Result::ApiKeys
+
+- Update to version 5.1760245411.e3aeaaec:
+  * Dependency cron 2025-10-12
+
+- Update to version 5.1760108577.fd2f2a48:
+  * Log unavailability due to high load only as warning
+  * Filter job stats of scheduled products also by arch and build
+  * Document how to disable image optimizations
+  * Make image optimization errors stop the job producing an incomplete job
+  * Improve wording in description about job stats API
+  * Run `optipng` for real and handle errors if it fails
+
+- Update to version 5.1759912962.689b31ed:
+  * Avoid failing `obs_rsync_run` jobs when restarting `openqa-gru.service`
+
+- Update to version 5.1759834744.06a7028a:
+  * parser: ktap: Return earlier if subtest result is SKIP
+  * parser: ktap: Fallback to subtest index if name is not available
+
+- Update to version 5.1759440640.bb989cab:
+  * Don't redirect to asset domain via /needles/ID/(image|json) route
+
+- Update to version 5.1759402042.49e912c3:
+  * Introduce array job settings
+  * Retry `obs_rsync_update_*` tasks if Gru service terminates
+
+- Update to version 5.1759329378.3b8e8685:
+  * Reduce the number of required checks for Mergify again
+  * Ensure a failing cache service is seen as such by the worker/scheduler
+
+- Update to version 5.1759248257.70b23b32:
+  * Increase number of successful checks in Mergify config again
+  * Disable Helm Chart CI checks temporarily
+  * Consider all jobs for cleanup, not just jobs that were executed
+  * Verify job deletion when dependent job present
+
+- Update to version 5.1759149505.49c40b0b:
+  * Use always the latest PostgreSQL image in Compose and documentation
+  * Update the PostgreSQL version in the contributing documentation
+  * Update PostgreSQL data path in Docker Compose file after updating to v18
+  * Specify PostgreSQL version in Docker Compose configuration explicitly
+  * mergify: Allow more time for dependabot update reaction
+  * Remove version property from docker-compose
+  * README: Fix openQA badge after switch to UEFI
+  * build(deps-dev): bump eslint from 9.35.0 to 9.36.0
+
+- Update to version 5.1758910696.7549bb98:
+  * Replace argument assignment with signatures on ObsRsync/Task
+  * Enable automatic dependabot updates again after improvements
+  * docs: Add instructions for a continuous dashboard setup
+  * Replace argument assignment with signatures Folders package
+  * Fully cover WebAPI::Plugin::ObsRsync::Controller::Folders
+  * script: Also use OPENQA_WEBUI_MODE for related services
+
+- Update to version 5.1758814503.03d923a4:
+  * Use Mojo::File in Worker for is_qemu_running
+  * Use Mojo::File in Worker for meminfo
+  * Document archiving of important jobs
+
+- Update to version 5.1758729450.b88c0b40:
+  * Reject jobs if worker is broken when receiving a new job
+
+- Update to version 5.1758711845.e5c02221:
+  * script: Allow to configure openQA mode
+  * t: run at least once Memorylimit register with max_rss_limit &gt; 0
+  * Replace argument assignation with signatures on MemoryLimit
+
+Changes in os-autoinst:
+
+- Update to version 5.1761036042.c43e4ab:
+  * Update perltidy
+  * Allow redirects in needle NeedleDownloader
+  * Don't overwrite firewall xml
+  * Add UEFI support for ipxe kernel boot
+  * os-autoinst-setup-multi-machine: Simplify determine_ethernet_interface
+
+- Update to version 5.1759328765.e7438f7:
+  * Allow redirects in needle NeedleDownloader
+  * Don't overwrite firewall xml
+  * Add UEFI support for ipxe kernel boot
+  * t: Use consistent Mojo::File in 08-autotest as well
+  * os-autoinst-setup-multi-machine: Simplify determine_ethernet_interface
+
+- Update to version 5.1759134946.e08d7c7:
+  * Add UEFI support for ipxe kernel boot
+  * t: Use consistent Mojo::File in 08-autotest as well
+  * os-autoinst-setup-multi-machine: Simplify determine_ethernet_interface
+  * os-autoinst-setup-multi-machine: Only call zypper when necessary
+  * os-autoinst-setup-multi-machine: Improve network interface check
+</description>
+  <package>openQA</package>
+  <package>openQA:openQA-devel-test</package>
+  <package>openQA:openQA-test</package>
+  <package>openQA:openQA-worker-test</package>
+  <package>openQA:openQA-client-test</package>
+  <package>os-autoinst</package>
+  <package>os-autoinst:os-autoinst-test</package>
+  <package>os-autoinst:os-autoinst-devel-test</package>
+  <package>os-autoinst:os-autoinst-openvswitch-test</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251025182836794674.93181000773252/_patchinfo
+++ b/patchinfo.20251025182836794674.93181000773252/_patchinfo
@@ -0,0 +1,28 @@
+<patchinfo incident="packagehub-18">
+  <packager>jsulig</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for amarok</summary>
+  <description>This update for amarok fixes the following issues:
+
+Changes in amarok:
+
+- Update to version 3.3.1
+  * Enable saving and loading script console items, autocompletion
+    in script console, and re-enable some more scripting functionality
+  * Convert the remaining main UI toolbuttons to use icons from theme
+  * Clear out remnants of the now-discontinued MusicDNS service
+  * Fix example permission grant command in database settings (kde#386004)
+  * Fix equalizer gains not updating when selecting some presets (kde#463908)
+  * Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
+  * Fix MusicBrainz search
+  * Properly start CD playback if Amarok is not already running (kde#503310)
+  * Also transmit embedded cover art through MPRIS (kde#357620)
+  * Don't show transcoding dialog after canceling download (kde#275840)
+  * Load network information earlier to avoid crashes on startup (kde#507497)
+  * Try to export as-compatible-as-possible playlist files (kde#507329)
+  * Fix some random crashes during playback
+
+</description>
+  <package>amarok</package>
+</patchinfo>
--- a/patchinfo.20251027101618101208.187004354831441/_patchinfo
+++ b/patchinfo.20251027101618101208.187004354831441/_patchinfo
@@ -0,0 +1,32 @@
+<patchinfo incident="packagehub-16">
+  <packager>miska</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for knot</summary>
+  <description>This update for knot fixes the following issues:
+
+Changes in knot:
+
+- disable quic in stable releases due to the missing libraries
+
+update to version 3.5.1, see
+
+  https://www.knot-dns.cz/2025-10-16-version-351.html
+
+update to version 3.5.0, see
+
+  https://www.knot-dns.cz/2025-09-18-version-350.html
+
+update to version 3.4.8, see
+
+  https://www.knot-dns.cz/2025-07-29-version-348.html
+
+Use the libngtcp2_crypto_gnutls-devel instead of libngtcp2-devel
+to account for the openssl and gnutls devel files split in ngtcp2.
+
+update to version 3.4.7, see
+
+  https://www.knot-dns.cz/2025-06-04-version-347.html
+</description>
+  <package>knot</package>
+</patchinfo>
--- a/patchinfo.20251027101939269288.187004354831441/_patchinfo
+++ b/patchinfo.20251027101939269288.187004354831441/_patchinfo
@@ -0,0 +1,48 @@
+<patchinfo incident="packagehub-10">
+  <issue tracker="cve" id="2025-10527">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="cve" id="2025-10536">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="cve" id="2025-10528">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="cve" id="2025-10537">Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="cve" id="2025-10529">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="cve" id="2025-10532">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="cve" id="2025-10533">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 115.28, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
+  <issue tracker="bnc" id="1249391">VUL-0: MozillaFirefox / MozillaThunderbird: update to 143.0 and 140.3esr</issue>
+  <packager>Yoshio_Sato</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for MozillaThunderbird</summary>
+  <description>This update for MozillaThunderbird fixes the following issues:
+
+Changes in MozillaThunderbird:
+
+Mozilla Thunderbird 140.3.0 ESR:
+
+  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
+    draft subject
+  * Thunderbird could crash on startup
+  * Thunderbird could crash when importing mail
+  * Opening Website header link in RSS feed incorrectly re-encoded
+    URL parameters
+  MFSA 2025-78 (bsc#1249391)
+  * CVE-2025-10527
+    Sandbox escape due to use-after-free in the Graphics:
+    Canvas2D component
+  * CVE-2025-10528
+    Sandbox escape due to undefined behavior, invalid pointer in
+    the Graphics: Canvas2D component
+  * CVE-2025-10529
+    Same-origin policy bypass in the Layout component
+  * CVE-2025-10532
+    Incorrect boundary conditions in the JavaScript: GC component
+  * CVE-2025-10533
+    Integer overflow in the SVG component
+  * CVE-2025-10536
+    Information disclosure in the Networking: Cache component
+  * CVE-2025-10537
+    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
+    ESR 140.3, Firefox 143 and Thunderbird 143
+
+</description>
+  <package>MozillaThunderbird</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251027103924170417.187004354831441/_patchinfo
+++ b/patchinfo.20251027103924170417.187004354831441/_patchinfo
@@ -0,0 +1,27 @@
+<patchinfo incident="packagehub-17">
+  <issue tracker="cve" id="2025-59438">VUL-0: CVE-2025-59438: TRACKERBUG: mbedtls: padding oracle attack possible through timing of cipher error reporting</issue>
+  <packager>dheidler</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for micropython</summary>
+  <description>This update for micropython fixes the following issues:
+
+Changes in micropython:
+
+- Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438
+
+Version 1.26.0:
+
+  * Added machine.I2CTarget for creating I2C target devices on multiple ports.
+  * New MCU support: STM32N6xx (800 MHz, ML accel) &amp; ESP32-C2 (WiFi + BLE).
+  * Major float accuracy boost (~28% → ~98%), constant folding in compiler.
+  * Optimized native/Viper emitters; reduced heap use for slices.
+  * Time functions standardized (1970–2099); new boards across ESP32, SAMD, STM32, Zephyr.
+  * ESP32: ESP-IDF 5.4.2, flash auto-detect, PCNT class, LAN8670 PHY.
+  * RP2: compressed errors, better lightsleep, hard IRQ timers.
+  * Zephyr v4.0.0: PWM, SoftI2C/SPI, BLE runtime services, boot.py/main.py support.
+  * mpremote adds fs tree, improved df, portable config paths.
+  * Updated lwIP, LittleFS, libhydrogen, stm32lib; expanded hardware/CI tests.
+</description>
+  <package>micropython</package>
+</patchinfo>
--- a/patchinfo.20251030080843825030.187004354831441/_patchinfo
+++ b/patchinfo.20251030080843825030.187004354831441/_patchinfo
@@ -0,0 +1,56 @@
+<patchinfo incident="packagehub-12">
+  <issue tracker="cve" id="2025-12441"/>
+  <issue tracker="cve" id="2025-12429"/>
+  <issue tracker="cve" id="2025-12431"/>
+  <issue tracker="cve" id="2025-12444"/>
+  <issue tracker="cve" id="2025-12428"/>
+  <issue tracker="cve" id="2025-12438"/>
+  <issue tracker="cve" id="2025-12435"/>
+  <issue tracker="cve" id="2025-12437"/>
+  <issue tracker="cve" id="2025-12443"/>
+  <issue tracker="cve" id="2025-12430"/>
+  <issue tracker="cve" id="2025-12440"/>
+  <issue tracker="cve" id="2025-12445"/>
+  <issue tracker="cve" id="2025-12446"/>
+  <issue tracker="cve" id="2025-12432"/>
+  <issue tracker="cve" id="2025-12436"/>
+  <issue tracker="cve" id="2025-12434"/>
+  <issue tracker="cve" id="2025-54874">VUL-0: CVE-2025-54874: TRACKERBUG: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of-bounds heap</issue>
+  <issue tracker="cve" id="2025-12433"/>
+  <issue tracker="bnc" id="1252881">VUL-0: chromium: release 142.0.7444.59</issue>
+  <issue tracker="cve" id="2025-12439"/>
+  <issue tracker="cve" id="2025-12447"/>
+  <packager>AndreasStieger</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 142.0.7444.59, the stable channel promotion of 142.
+
+Security fixes (boo#1252881):
+
+  * CVE-2025-12428: Type Confusion in V8
+  * CVE-2025-12429: Inappropriate implementation in V8
+  * CVE-2025-12430: Object lifecycle issue in Media
+  * CVE-2025-12431: Inappropriate implementation in Extensions
+  * CVE-2025-12432: Race in V8
+  * CVE-2025-12433: Inappropriate implementation in V8
+  * CVE-2025-12434: Race in Storage
+  * CVE-2025-12435: Incorrect security UI in Omnibox
+  * CVE-2025-12436: Policy bypass in Extensions
+  * CVE-2025-12437: Use after free in PageInfo
+  * CVE-2025-12438: Use after free in Ozone
+  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
+  * CVE-2025-12440: Inappropriate implementation in Autofill
+  * CVE-2025-12441: Out of bounds read in V8
+  * CVE-2025-12443: Out of bounds read in WebXR
+  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
+  * CVE-2025-12445: Policy bypass in Extensions
+  * CVE-2025-12446: Incorrect security UI in SplitView
+  * CVE-2025-12447: Incorrect security UI in Omnibox
+
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251030134459405257.187004354831441/_patchinfo
+++ b/patchinfo.20251030134459405257.187004354831441/_patchinfo
@@ -0,0 +1,24 @@
+<patchinfo incident="packagehub-14">
+  <packager>adrianSuSE</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for product-composer</summary>
+  <description>This update for product-composer fixes the following issues:
+
+Update to version 0.6.16:
+
+  - merge updateinfo's with same id into one
+  - error out on updateinfo with same id, but non-mergable content
+
+Update to version 0.6.15:
+
+  * Support updateinfo handling in arch specific meta data
+
+Update to version 0.6.14:
+
+  * option to disable joliet extensions on media
+  * no joliet extensions on source and debug media anymore
+</description>
+  <package>product-composer</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251104153107003768.187004354831441/_patchinfo
+++ b/patchinfo.20251104153107003768.187004354831441/_patchinfo
@@ -0,0 +1,63 @@
+<patchinfo incident="packagehub-15">
+  <issue tracker="cve" id="2025-11710"/>
+  <issue tracker="cve" id="2025-11709"/>
+  <issue tracker="cve" id="2025-11715"/>
+  <issue tracker="bnc" id="1247774">[SLFO:Main] [SLES16.0] MozillaFirefox fails to build on s390x</issue>
+  <issue tracker="cve" id="2025-11712"/>
+  <issue tracker="cve" id="2025-11708"/>
+  <issue tracker="cve" id="2025-11714"/>
+  <issue tracker="cve" id="2025-11713"/>
+  <issue tracker="cve" id="2025-11711"/>
+  <issue tracker="bnc" id="1251263">VUL-0: MozillaFirefox / MozillaThunderbird: update to 144.0 and 140.4esr</issue>
+  <packager>MSirringhaus</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for MozillaThunderbird</summary>
+  <description>This update for MozillaThunderbird fixes the following issues:
+
+Mozilla Thunderbird 140.4:
+
+  * changed: Account Hub is now disabled by default for second
+    email account
+  * changed: Flatpak runtime has been updated to Freedesktop SDK
+    24.08
+  * fixed: Users could not read mail signed with OpenPGP v6 and
+    PQC keys
+  * fixed: Image preview in Insert Image dialog failed with CSP
+    error for web resources
+  * fixed: Emptying trash on exit did not work with some
+    providers
+  * fixed: Thunderbird could crash when applying filters
+  * fixed: Users were unable to override expired mail server
+    certificate
+  * fixed: Opening Website header link in RSS feed incorrectly
+    re-encoded URL parameters
+  * fixed: Security fixes
+
+MFSA 2025-85 (bsc#1251263):
+
+  * CVE-2025-11708
+    Use-after-free in MediaTrackGraphImpl::GetInstance()
+  * CVE-2025-11709
+    Out of bounds read/write in a privileged process triggered by
+    WebGL textures
+  * CVE-2025-11710
+    Cross-process information leaked due to malicious IPC
+    messages
+  * CVE-2025-11711
+    Some non-writable Object properties could be modified
+  * CVE-2025-11712
+    An OBJECT tag type attribute overrode browser behavior on web
+    resources without a content-type
+  * CVE-2025-11713
+    Potential user-assisted code execution in “Copy as cURL”
+    command
+  * CVE-2025-11714
+    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
+    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
+  * CVE-2025-11715
+    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
+    ESR 140.4, Firefox 144 and Thunderbird 144
+</description>
+  <package>MozillaThunderbird</package>
+</patchinfo>
--- a/patchinfo.20251106083153138720.187004354831441/_patchinfo
+++ b/patchinfo.20251106083153138720.187004354831441/_patchinfo
@@ -0,0 +1,23 @@
+<patchinfo incident="packagehub-19">
+  <issue tracker="bnc" id="1253089">VUL-0: chromium: release 142.0.7444.134</issue>
+  <issue tracker="cve" id="2025-12727"/>
+  <issue tracker="cve" id="2025-12725"/>
+  <issue tracker="cve" id="2025-12729">VUL-0: chromium: release 142.0.7444.134</issue>
+  <issue tracker="cve" id="2025-12728"/>
+  <issue tracker="cve" id="2025-12726"/>
+  <packager>AndreasStieger</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 142.0.7444.134 (boo#1253089):
+
+  * CVE-2025-12725: Out of bounds write in WebGPU
+  * CVE-2025-12726: Inappropriate implementation in Views
+  * CVE-2025-12727: Inappropriate implementation in V8
+  * CVE-2025-12728: Inappropriate implementation in Omnibox
+  * CVE-2025-12729: Inappropriate implementation in Omnibox
+</description>
+  <package>chromium</package>
+</patchinfo>
--- a/patchinfo.20251111094408723997.187004354831441/_patchinfo
+++ b/patchinfo.20251111094408723997.187004354831441/_patchinfo
@@ -0,0 +1,14 @@
+<patchinfo incident="packagehub-20">
+  <packager>adrianSuSE</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for product-composer</summary>
+  <description>This update for product-composer fixes the following issues:
+
+Update to version 0.6.17:
+
+  - fix multiarch media handling of updateinfo id's
+</description>
+  <package>product-composer</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251112154630847363.187004354831441/_patchinfo
+++ b/patchinfo.20251112154630847363.187004354831441/_patchinfo
@@ -0,0 +1,16 @@
+<patchinfo incident="packagehub-21">
+  <issue tracker="bnc" id="1253267">VUL-0: chromium: release 142.0.7444.162</issue>
+  <issue tracker="cve" id="2025-13042">VUL-0: chromium: release 142.0.7444.162</issue>
+  <packager>AndreasStieger</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Chromium 142.0.7444.162 (boo#1253267):
+
+  * CVE-2025-13042: Inappropriate implementation in V8
+</description>
+  <package>chromium</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251113160751974202.187004354831441/_patchinfo
+++ b/patchinfo.20251113160751974202.187004354831441/_patchinfo
@@ -0,0 +1,16 @@
+<patchinfo incident="packagehub-28">
+  <packager>adrianSuSE</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for product-composer</summary>
+  <description>This update for product-composer fixes the following issues:
+
+Changes in product-composer:
+
+Update to version 0.6.18:
+
+  - Fix filtering of not used rpms in updateinfo
+</description>
+  <package>product-composer</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251113161402184432.187004354831441/_patchinfo
+++ b/patchinfo.20251113161402184432.187004354831441/_patchinfo
@@ -0,0 +1,140 @@
+<patchinfo incident="packagehub-29">
+  <packager>mgorse</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for gramps</summary>
+  <description>This update for gramps fixes the following issues:
+
+Changes in gramps:
+
+Update to version 6.0.3:
+
+  * Revert “Pass an object rather than a handle to the note editor callback”.
+    Fixes #13884.
+  * Update translations.
+
+Update to version 6.0.2;
+
+  * Fix date modifiers for lt.
+  * Update translation template for new release.
+  * Add optimization to HasIdOf rules.
+  * Connect the Help button in the repository reference editor. Fixes #13352.
+  * Pass an object rather than a handle to the note editor callback. Fixes
+    #13702.
+  * Fix broken compound dates with bce year in XML import. Fixes #13631.
+  * Avoid multiple copies of Rules after Plugin manager reload. Fixes #13844.
+  * Fix bad surname list after upgrade from bsddb. Fixes #13807.
+  * Fix narrated web when two places have same name but a different type. Fixes
+    #13841.
+  * Fix crash in citation view due to wrong filter_info. Fixes #13796.
+  * Don’t attempt to call set_orientation if self.pui is None. Fixes #13820.
+  * Don’t crash in search_changed if self.search_list has no active item. Fixes
+    #13793.
+  * Fix incorrect addons project after upgrade from Gramps 5.2. Fixes #13789.
+  * Respect user choice of CSS files for existing narrated web site. Fixes
+    #13792.
+  * Ensure that the spell checker gets removed with the editor. Fixes #13795.
+  * Fix Optimizer class when combining sub-filters. Fixes #13799.
+  * Remove check for Gtk translations in Snap packages.
+  * Update translations.
+
+Update to version 6.0.1:
+
+  * Update translations: ar, br, ca, cs, de, de_AT, el, en_GB, es, fi, fr, ga,
+    he, it, ja, ko, nb, nl, pl, pt_PT, ro, sk, sv, tr, uk, zh_CN.
+  * Update translation template for new release.
+  * Extend SearchBar so that it supports text search and filters. Fixes #13720.
+  * Fix patronymic in name display. Fixes #13764.
+  * Update links in the README to v6.0.
+  * Update the INSTALL file. Issue #13717.
+
+    + Change install from setup.py to pip.
+    + Update typical installation locations.
+    + Remove the --resourcepath option which no longer exists.
+
+  * Fix wiki help link in the Addon Manager. Fixes #13735.
+  * Remove the outer progress meter from the filter prepare phase. Fixes #13725.
+  * Fix error when importing a GEDCOM file into an existing tree. Fixes #13726.
+  * Avoid empty metadata fields. Fixes #13721.
+  * Update Italian date modifiers.
+
+Update to version 6.0.0:
+
+  * Full changelog available at
+    https://gramps-project.org/blog/2025/03/gramps-6-0-0-released/
+  * Reports
+
+    + The narrative web report has four main improvements:
+
+      - New indexes for big databases.
+      - Add heatmap.
+      - Improve language and hamburger menus.
+      - Show other roles for an event.
+
+    + Other report changes:
+
+      - Add gender symbol option to the detailed descendant, detailed ancestral
+        and descendant report.
+      - Add Gramps ID option to Kinship Report.
+      - Tree reports convert images to thumbnails for embedding. This allows
+        cropped rectangles selected in the media references to be displayed.
+      - Report options are now memorised on a per family tree (database) level.
+
+  * Gramplets
+
+    + Improvements to the backlinks (References) gramplets:
+    + Allow an object to be made active from within the backlinks gramplet.
+    + Add a context menu to make “Edit” and “Make Active” more discoverable.
+    + Allow objects in the backlinks gramplets to be dragged to the clipboard.
+    + Add edit capability to the notes gramplets.
+    + Enhanced version of the Filter gramplet.
+
+  * Selector dialogs
+    + A standard search bar has been added to the person selector dialog. It
+      may default to selecting men or women by default, but selecting on other
+      columns is possible.
+    + It is now possible to select multiple media objects in the media selector
+      and gallery tabs.
+    + The media selector has a new path column.
+
+  * Other changes
+
+    + Improvements to the Probably Alive code.
+    + New rules: “Has Event”, “Has Source” and “Having Note of Type”.
+    + New Gedcom 7.0 event roles: “Father”, Mother”, “Parent”, “Child”, “Multiple”, Friend”, “Neighbour” and “Officiator”.
+    + Allow web-accessible file references in media objects.
+    + Add a preference option for the selection of the toolbar style.
+    + Enhancements to the help display. This is ongoing though.
+    + Enable Web Connection menu in all list views.
+
+Update to version 5.2.4:
+
+  * Fix Citations gramplet to recognize event reference citations. Fixes #13555.
+  * Fix exception when finding relationship to home person. Fixes #13495.
+  * Fix mouse scroll direction in pedigree view.
+  * Fix incorrect usage of exec. As of PEP558, locals() is not populated by
+    exec(). This change means that this call is broken on Python 3.13.
+  * Remove some usage of globals().
+  * Remove unnecessary use of exec.
+  * Test current_date being an empty date in probably alive function. Fixes #13431.
+  * Improve warning message in date_test.py when 3 tests are skipped.
+  * Correctly assign sortval = 0 when a date is EMPTY. Fixes #13415, #13423.
+  * Fix unicode conversion bug when upgrading from schema 16 to 17.
+  * Correct the documentation for the match() method of the Date class. Also
+    added more detail to documentation in 3 other cases. Fixes #13428.
+  * Gramps version output now reports OS rather than Platform. Fixes #12285.
+  * Downgrade upgrade messages from warning to informational level. Fixes #13464.
+  * Fix list size option in the top surnames gramplet. Allow users to specify
+    how many surnames appear in the list from 10 to 1000. Fixes #13448.
+  * Correct misleading description of GUI element placement.
+  * Use the preferred calendar for new dates only in the date editor. Fixes #13403.
+  * Fix docs typo in INSTALL file.
+  * Fix printing of Books. Fixes #12804.
+  * Render reports with styled notes containing subscript and strikethrough. Fixes #13417.
+  * Remove broken link to svn2cl package in the About dialog. Fixes #13152.
+  * Improve media performance in the narrative web report. Fixes #13370.
+  * Updated translations.
+</description>
+  <package>gramps</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251114110535882810.90520734224245/_patchinfo
+++ b/patchinfo.20251114110535882810.90520734224245/_patchinfo
@@ -0,0 +1,16 @@
+<patchinfo incident="packagehub-22">
+  <packager>AndreasStieger</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for certbot</summary>
+  <description>This update for certbot fixes the following issues:
+
+This update adds the certbot stack. (python modules: ConfigArgParse, acme, certbot, certbot-nginx, josepy, pyRFC3339).
+</description>
+<package>python-ConfigArgParse</package>
+<package>python-acme</package>
+<package>python-certbot</package>
+<package>python-certbot-nginx</package>
+<package>python-josepy</package>
+<package>python-pyRFC3339</package>
+</patchinfo>
--- a/patchinfo.20251117132013106524.187004354831441/_patchinfo
+++ b/patchinfo.20251117132013106524.187004354831441/_patchinfo
@@ -0,0 +1,31 @@
+<patchinfo incident="packagehub-23">
+  <issue tracker="bnc" id="1238516">quilt: cannot refresh patches for non-x86 code</issue>
+  <issue tracker="bnc" id="1236907">rpm,quilt: update to rpm 4.20 breaks many "quilt setup" invocations</issue>
+  <packager>jdelvare</packager>
+  <rating>important</rating>
+  <category>recommended</category>
+  <summary>Recommended update for quilt</summary>
+  <description>This update for quilt fixes the following issues:
+
+Changes in quilt:
+
+Update to version 0.69:
+
+  * Fix escaping of % and backslash in patch names
+  * new: Stop claiming support of option -p ab
+  * patches: Several performance optimizations
+  * series: Simplify the code
+
+- Make it possible to run "quilt setup" on a spec file which excludes the local
+  architecture (boo#1238516).
+
+- Fix building noarch packages with rpm &gt;= 4.20 (boo#1236907).
+- Make it possible to preprocess spec files which do not comply with the standard. Most
+  notably multibuild OBS spec files need to be preprocessed. Use
+  option "--spec-filter=obs" for these (boo#1236907).
+- Detect the change of build root path hierarchy introduced by rpm 4.20 (boo#1236907).
+- Install the bash completion file to the right directory (reported
+  by rpmlint).
+</description>
+  <package>quilt</package>
+</patchinfo>
--- a/patchinfo.20251118105940725571.187004354831441/_patchinfo
+++ b/patchinfo.20251118105940725571.187004354831441/_patchinfo
@@ -0,0 +1,19 @@
+<patchinfo incident="packagehub-24">
+  <issue tracker="bnc" id="1253698">(CVE-2025-13223) (CVE-2025-13224) VUL-0 chromium: release 142.0.7444.175</issue>
+  <issue tracker="cve" id="2025-13224">(CVE-2025-13223) (CVE-2025-13224) VUL-0 chromium: release 142.0.7444.175</issue>
+  <issue tracker="cve" id="2025-13223"/>
+  <packager>oertel</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for chromium</summary>
+  <description>This update for chromium fixes the following issues:
+
+Changes in chromium:
+
+Chromium 142.0.7444.175 (boo#1253698):
+
+  * CVE-2025-13223: Type Confusion in V8
+  * CVE-2025-13224: Type Confusion in V8
+</description>
+  <package>chromium</package>
+</patchinfo>
--- a/patchinfo.20251118110024655567.187004354831441/_patchinfo
+++ b/patchinfo.20251118110024655567.187004354831441/_patchinfo
@@ -0,0 +1,67 @@
+<patchinfo incident="packagehub-27">
+  <issue tracker="cve" id="2025-13016">firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component</issue>
+  <issue tracker="cve" id="2025-13019">firefox: Same-origin policy bypass in the DOM: Workers component</issue>
+  <issue tracker="cve" id="2025-13020">firefox: Use-after-free in the WebRTC: Audio/Video component</issue>
+  <issue tracker="cve" id="2025-13017">firefox: Same-origin policy bypass in the DOM: Notifications component</issue>
+  <issue tracker="cve" id="2025-13015">firefox: Spoofing issue in Firefox</issue>
+  <issue tracker="cve" id="2025-13012">VUL-0: MozillaFirefox / MozillaThunderbird: update to 145.0 and 140.5esr</issue>
+  <issue tracker="cve" id="2025-13018">firefox: Mitigation bypass in the DOM: Security component</issue>
+  <issue tracker="cve" id="2025-13014">firefox: Use-after-free in the Audio/Video component</issue>
+  <issue tracker="cve" id="2025-13013">firefox: Mitigation bypass in the DOM: Core &amp; HTML component</issue>
+  <issue tracker="bnc" id="1253188">VUL-0: MozillaFirefox / MozillaThunderbird: update to 145.0 and 140.5esr</issue>
+  <packager>Yoshio_Sato</packager>
+  <rating>important</rating>
+  <category>security</category>
+  <summary>Security update for MozillaThunderbird</summary>
+  <description>This update for MozillaThunderbird fixes the following issues:
+
+Changes in MozillaThunderbird:
+
+Mozilla Thunderbird 140.5.0 ESR
+
+MFSA 2025-91 (bsc#1253188):
+
+  * CVE-2025-13012
+    Race condition in the Graphics component
+  * CVE-2025-13016
+    Incorrect boundary conditions in the JavaScript: WebAssembly
+    component
+  * CVE-2025-13017
+    Same-origin policy bypass in the DOM: Notifications component
+  * CVE-2025-13018
+    Mitigation bypass in the DOM: Security component
+  * CVE-2025-13019
+    Same-origin policy bypass in the DOM: Workers component
+  * CVE-2025-13013
+    Mitigation bypass in the DOM: Core &amp; HTML component
+  * CVE-2025-13020
+    Use-after-free in the WebRTC: Audio/Video component
+  * CVE-2025-13014
+    Use-after-free in the Audio/Video component
+  * CVE-2025-13015
+    Spoofing issue in Thunderbird
+  * fixed: Could not drag and drop ICS file to Today Pane
+  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
+    send signed message failed
+  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
+    @att.net using Yahoo backend
+
+Mozilla Thunderbird 140.4.0 ESR
+
+  * Account Hub is now disabled by default for second email account
+  * Users could not read mail signed with OpenPGP v6 and PQC keys
+  * Image preview in Insert Image dialog failed with CSP error for web resources
+  * Emptying trash on exit did not work with some providers
+  * Thunderbird could crash when applying filters
+  * Users were unable to override expired mail server certificate
+  * Opening Website header link in RSS feed incorrectly re-encoded
+    URL parameters
+
+Mozilla Thunderbird 140.3.1 ESR:
+
+  * several bugfixes listed here
+    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes
+-------------------------------------------------------------------
+</description>
+  <package>MozillaThunderbird</package>
+</patchinfo>
--- a/patchinfo.20251119124936938893.187004354831441/_patchinfo
+++ b/patchinfo.20251119124936938893.187004354831441/_patchinfo
@@ -0,0 +1,25 @@
+<patchinfo incident="packagehub-26">
+  <packager>cfconrad</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for synce4l</summary>
+  <description>This update for synce4l fixes the following issues:
+
+synce4l was updated to 1.1.1:
+
+  * fix possible resource leak
+  * fix requested thread stack size
+  * fix scorecard.yml
+  * initialize pin ID to -1
+  * fix crash in dpll_rt_recv()
+  * create scorecard.yml
+  * unlink smc_socket_path before binding
+  * check smc_socket_path length
+  * change default smc_socket_path to /run/synce4l_socket
+  * fix more compiler warnings
+
+- Initial packaging of version 1.0.0.
+</description>
+  <package>synce4l</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251119130842836205.187004354831441/_patchinfo
+++ b/patchinfo.20251119130842836205.187004354831441/_patchinfo
@@ -0,0 +1,54 @@
+<patchinfo incident="packagehub-25">
+  <issue tracker="bnc" id="1247368">nmon does not support max cpu configuration</issue>
+  <packager>dirkmueller</packager>
+  <rating>moderate</rating>
+  <category>recommended</category>
+  <summary>Recommended update for nmon</summary>
+  <description>This update for nmon fixes the following issues:
+
+Changes in nmon:
+
+- Increase CPU MAX to 2048 (bsc#1247368)
+
+update to 16q:
+
+  * bugfixes
+  * POWER pool_capacity now correctly divided by 100.
+  * Online view POWER Welcome panel on POWER reports the top MHz
+  Small changes only:
+  * Boottime shown online in the Kernel "k" panel
+  * Utilisation stats: /proc/stat now reports 10 Utilisation stats
+  * Bug caused Seg Faults core dumps fixed while collecting to a
+  * Fix: Improved memory handling for extreme numbers of processes
+    (1000's) or rapid exec of processes  (100's in a millisecond)
+    for large Linux servers. We have examples on Intel of 80 CPU
+  * Online Dot "." command no longer also changes what is displayed
+    as users said it was confusing.
+  * Minor online start-up flash screen text changes to include C
+    concise CPU stats and U for full  Utilisation stats (all 10 of
+    them) instead of a file.
+  * Copyright and GPL v3 notice in the code plus online "h" and
+  * Source code re-indented.
+  * Fixes for Welcome screen on Mainframe
+  * Fixed for Curses handling when collecting data to file - big
+    bug for main frame and x86.
+  * Fixes for Welcome screen on Mainframe
+  * Fixed for Curses handling when collecting data to file - big
+    bug for main frame and x86.
+    + You need a S822LC With NVIDIA GPU(s) and Nvidia Library
+      installed libnvidia-ml.so
+  * CPU Wide View - online view for up to 192 CPUs
+  * CPU MHz per Core ratings for machine that allow cores with
+    different MHz - online &amp; saved to file
+  * lscpu stats capture - online &amp; to file
+  * Z experiment mode showing CPU interrupts - Renamed U stats in
+    version 16b - online only
+  * Online colourising stats to aid usability - online only
+  * Massive improvement in help information: nmon -? and nmon -h
+  * Code change to alphabetic order for getopt() and key input
+  * New nmon logo on flash screen - online only
+  * Extra kernel stats - online only
+</description>
+  <package>nmon</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.20251126115642933537.93181000773252/_patchinfo
+++ b/patchinfo.20251126115642933537.93181000773252/_patchinfo
@@ -0,0 +1,86 @@
+<patchinfo>
+  <issue tracker="bnc" id="1251471">VUL-0: CVE-2025-47911: gitea-tea: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents</issue>
+  <issue tracker="bnc" id="1251663">VUL-0: CVE-2025-58190: gitea-tea: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input</issue>
+  <issue tracker="cve" id="2025-58190">cve#2025-58190 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-58190</issue>
+  <issue tracker="cve" id="2025-47911">cve#2025-47911 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-47911</issue>
+  <packager>olh</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for gitea-tea</summary>
+  <description>This update for gitea-tea fixes the following issues:
+
+Changes in gitea-tea:
+
+- update to 0.11.1:
+  * 61d4e57 Fix Pr Create crash (#823)
+  * 4f33146 add test for matching logins (#820)
+  * 08b8398 Update README.md (#819)
+
+- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (boo#1251663)
+- CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (boo#1251471)
+
+- update to 0.11.0:
+  * Fix yaml output single quote (#814)
+  * generate man page (#811)
+  * feat: add validation for object-format flag in repo create
+    command (#741)
+  * Fix release version (#815)
+  * update gitea sdk to v0.22 (#813)
+  * don't fallback login directly (#806)
+  * Check duplicated login name in interact mode when creating new
+    login (#803)
+  * Fix bug when output json with special chars (#801)
+  * add debug mode and update readme (#805)
+  * update go.mod to retract the wrong tag v1.3.3 (#802)
+  * revert completion scripts removal (#808)
+  * Remove pagination from context (#807)
+  * Continue auth when failed to open browser (#794)
+  * Fix bug (#793)
+  * Fix tea login add with ssh public key bug (#789)
+  * Add temporary authentication via environment variables (#639)
+  * Fix attachment size (#787)
+  * deploy image when tagging (#792)
+  * Add Zip URL for release list (#788)
+  * Use bubbletea instead of survey for interacting with TUI (#786)
+  * capitalize a few items
+  * rm out of date comparison file
+  * README: Document logging in to gitea (#790)
+  * remove autocomplete command (#782)
+  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
+    docker tag to v1.2.5 (#773)
+  * replace arch package url (#783)
+  * fix: Reenable -p and --limit switches (#778)
+
+- Update to 0.10.1+git.1757695903.cc20b52:
+  - feat: add validation for object-format flag in repo create
+    command (see gh#openSUSE/openSUSE-git#60)
+  - Fix release version
+  - update gitea sdk to v0.22
+  - don't fallback login directly
+  - Check duplicated login name in interact mode when creating
+    new login
+  - Fix bug when output json with special chars
+  - add debug mode and update readme
+  - update go.mod to retract the wrong tag v1.3.3
+  - revert completion scripts removal
+  - Remove pagination from context
+  - Continue auth when failed to open browser
+  - Fix bug
+  - Fix tea login add with ssh public key bug
+  - Add temporary authentication via environment variables
+  - Fix attachment size
+  - deploy image when tagging
+  - Add Zip URL for release list
+  - Use bubbletea instead of survey for interacting with TUI
+  - capitalize a few items
+  - rm out of date comparison file
+  - README: Document logging in to gitea
+  - remove autocomplete command
+  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
+    docker tag to v1.2.5
+  - replace arch package url
+  - fix: Reenable `-p` and `--limit` switches
+</description>
+  <package>gitea-tea</package>
+  <seperate_build_arch/>
+</patchinfo>
--- a/patchinfo.ga/_patchinfo
+++ b/patchinfo.ga/_patchinfo
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/1
+++ b/1
--- a/1
+++ b/1
--- a/1
+++ b/1
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/staging.config
+++ b/staging.config
@@ -1,4 +1,4 @@
 {
  "ObsProject": "openSUSE:Backports:SLE-16.0",
-  "StagingProject": "openSUSE:Backports:SLE-16.0:PullRequest"
+  "StagingProject": "openSUSE:Backports:SLE-16.0:PullRequest",
 }
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/workflow.config
+++ b/workflow.config
@@ -1,23 +1,74 @@
 {
-        "Workflows": ["pr"],
-        "GitProjectName": "products/PackageHub#leap-16.0",
-        "Organization": "pool",
-        "Branch": "leap-16.0",
-        "ManualMergeProject": true,
-        "Reviewers": [
-                       "+legaldb",
-                       "-autogits_obs_staging_bot",
-                       "*packagehub-review"
-                     ],
-        "ReviewGroups": [
-                          {
-                             "Name": "packagehub-review",
-                             "Reviewers": [
-                                            "bigironman",
-                                            "lkocman-factory",
-                                            "maxlin_factory",
-                                            "smithfarm"
-                                          ]
-                          }
-                        ]
+  "Workflows": ["pr"],
+  "GitProjectName": "products/PackageHub#leap-16.0",
+  "Organization": "pool",
+  "Branch": "leap-16.0",
+  "ManualMergeProject": true,
+  "NoProjectGitPR": true,
+  "Reviewers": [
+    "-maintenance-release-review",
+    "*opensuse-review",
+    "+legaldb",
+    "-autogits_obs_staging_bot",
+    "-qam-openqa-review"
+  ],
+  "ReviewGroups": [
+    {
+      "Name": "maintenance-release-review",
+      "Reviewers": [
+        "abergmann",
+        "amattiazzo",
+        "bfilho",
+        "cmatos",
+        "crazybyte",
+        "emanuelecappello",
+        "gsonnu",
+        "maintenance-robot",
+        "mauriziogalli",
+        "mbozicevic",
+        "mimi_vx",
+        "mschnitzer",
+        "msmeissn",
+        "pluskalm",
+        "rfrohl",
+        "slemke"
+        ],
+      "Silent": true
+    },
+    {
+      "Name": "opensuse-review",
+      "Reviewers": [
+        "alarrosa",
+        "anag",
+        "atartamo",
+        "bigironman",
+        "darix",
+        "dimstar",
+        "dmach",
+        "eroca",
+        "jdsn",
+        "jengelh",
+        "mcalabkova",
+        "mstrigl",
+        "nkrapp",
+        "oertel",
+        "RBrownSUSE",
+        "simotek",
+        "smithfarm"
+      ],
+      "Silent": true
+    },
+    {
+      "Name": "qam-openqa-review",
+      "Reviewers": [
+        "mimi_vx",
+        "mschnitzer",
+        "msmeissn",
+        "openqa-maintenance",
+        "foursixnine-openqa",
+        "szarate"
+        ],
+      "Silent": true
+    }
+  ]
 }
Author	SHA256	Message	Date
Robert Frohl	4dcb2da4e3	Update submodules from pool/gitea-tea#1 and create patchinfo.20251126115642933537.93181000773252/_patchinfo	2025-11-26 12:58:07 +01:00
Patchinfo incident numbering	315fd347cb	Update patchinfo incident numbers [skip actions]	2025-11-24 17:36:46 +00:00
AutoGits PR Review Bot	1aaeefe3e7	Merging PR: products/PackageHub!216	2025-11-24 17:36:25 +00:00
Patchinfo incident numbering	890fcb23db	Update patchinfo incident numbers [skip actions]	2025-11-24 09:34:14 +00:00
AutoGits PR Review Bot	0d83b2f97d	Merging PR: products/PackageHub!215	2025-11-24 09:33:54 +00:00
AutoGits PR Review Bot	d3fa2d8093	Merging PR: products/PackageHub!214	2025-11-24 09:33:09 +00:00
Patchinfo incident numbering	35d43b7128	Update patchinfo incident numbers [skip actions]	2025-11-20 17:06:50 +00:00
AutoGits PR Review Bot	3d3d411edd	Merging PR: products/PackageHub!227	2025-11-20 17:06:31 +00:00
Patchinfo incident numbering	244f0464f8	Update patchinfo incident numbers [skip actions]	2025-11-20 17:05:59 +00:00
AutoGits PR Review Bot	f9cfafe0d2	Merging PR: products/PackageHub!229	2025-11-20 17:05:38 +00:00
Patchinfo incident numbering	98183c2d10	Update patchinfo incident numbers [skip actions]	2025-11-20 17:05:23 +00:00
AutoGits PR Review Bot	d6124c97ca	Merging PR: products/PackageHub!230	2025-11-20 17:04:46 +00:00
Patchinfo incident numbering	782985afd7	Update patchinfo incident numbers [skip actions]	2025-11-20 10:06:56 +00:00
AutoGits PR Review Bot	10e754d7a4	Merging PR: products/PackageHub!226	2025-11-20 10:06:21 +00:00
Patchinfo incident numbering	56c30f1899	Update patchinfo incident numbers [skip actions]	2025-11-19 17:36:23 +00:00
AutoGits PR Review Bot	89bbb673f7	Merging PR: products/PackageHub!221	2025-11-19 17:35:41 +00:00
Marcus Meissner	797087a546	Update submodules from pool/nmon#2 and create patchinfo.20251119130842836205.187004354831441/_patchinfo	2025-11-19 14:09:11 +01:00
Marcus Meissner	ef2d057210	Update submodules from pool/synce4l#1 and create patchinfo.20251119124936938893.187004354831441/_patchinfo	2025-11-19 13:50:10 +01:00
Patchinfo incident numbering	d4abf6dbc4	Update patchinfo incident numbers [skip actions]	2025-11-19 09:24:16 +00:00
AutoGits PR Review Bot	c9eacc40cf	Merging PR: products/PackageHub!224	2025-11-19 09:23:57 +00:00
AutoGits PR Review Bot	1bcd952eb3	Merging PR: products/PackageHub!217	2025-11-19 09:23:34 +00:00
Marcus Meissner	854f44ed9c	Update patchinfo.20251118105940725571.187004354831441/_patchinfo	2025-11-18 14:19:54 +01:00
Marcus Meissner	4b3a8849e6	Update patchinfo.20251118110024655567.187004354831441/_patchinfo	2025-11-18 14:19:31 +01:00
Marcus Meissner	ec5f90ea17	Update submodules from pool/MozillaThunderbird#9 and create patchinfo.20251118110024655567.187004354831441/_patchinfo	2025-11-18 12:01:06 +01:00
Marcus Meissner	43e7874d50	Update submodules from pool/chromium#17 and create patchinfo.20251118105940725571.187004354831441/_patchinfo	2025-11-18 11:59:47 +01:00
Marcus Meissner	17e4e99ab5	filter out xen bsc#1253226	2025-11-17 16:30:01 +00:00
Marcus Meissner	2d261f7863	Update patchinfo.20251117132013106524.187004354831441/_patchinfo remove seperate buildarch	2025-11-17 14:44:25 +01:00
Marcus Meissner	5291ba32bb	Update submodules from pool/quilt#1 and create patchinfo.20251117132013106524.187004354831441/_patchinfo	2025-11-17 14:20:51 +01:00
Marcus Meissner	662a62addd	add patchunfo for certbot	2025-11-14 10:02:45 +00:00
AutoGits PR Review Bot	d9ad5b0d95	Merging PR: products/PackageHub!211	2025-11-14 09:57:31 +00:00
Marcus Meissner	817b1cd1f8	Update submodules from pool/gramps#2 and create patchinfo.20251113161402184432.187004354831441/_patchinfo	2025-11-13 17:14:44 +01:00
Marcus Meissner	4028bd4bf0	Update submodules from pool/product-composer#8 and create patchinfo.20251113160751974202.187004354831441/_patchinfo	2025-11-13 17:07:58 +01:00
Patchinfo incident numbering	52f1c10e67	Update patchinfo incident numbers [skip actions]	2025-11-13 15:20:09 +00:00
AutoGits PR Review Bot	b95f5de289	Merging PR: products/PackageHub!212	2025-11-13 15:19:32 +00:00
Marcus Meissner	082d652565	filterlivepath set from update 1	2025-11-13 13:36:25 +00:00
Marcus Meissner	fccc06cc6f	Update submodules from pool/chromium#16 and create patchinfo.20251112154630847363.187004354831441/_patchinfo	2025-11-12 16:46:43 +01:00
Markéta Machová	5e88777506	add certbot stack to PackageHub	2025-11-12 11:39:26 +01:00
Patchinfo incident numbering	b3eb0849c8	Update patchinfo incident numbers [skip actions]	2025-11-11 16:48:59 +00:00
AutoGits PR Review Bot	b52f6924a4	Merging PR: products/PackageHub!210	2025-11-11 16:48:33 +00:00
Marcus Meissner	54b6eca2a4	Update submodules from pool/product-composer#7 and create patchinfo.20251111094408723997.187004354831441/_patchinfo	2025-11-11 10:44:19 +01:00
Patchinfo incident numbering	1d731ee42f	Update patchinfo incident numbers [skip actions]	2025-11-10 17:16:28 +00:00
AutoGits PR Review Bot	7862ce5600	Merging PR: products/PackageHub!207	2025-11-10 17:16:10 +00:00
Patchinfo incident numbering	148e498d69	Update patchinfo incident numbers [skip actions]	2025-11-10 15:41:42 +00:00
AutoGits PR Review Bot	4f2851fe76	Merging PR: products/PackageHub!193	2025-11-10 15:41:26 +00:00
Patchinfo incident numbering	162506107e	Update patchinfo incident numbers [skip actions]	2025-11-10 15:40:56 +00:00
AutoGits PR Review Bot	7863330b11	Merging PR: products/PackageHub!197	2025-11-10 15:40:39 +00:00
Patchinfo incident numbering	fb0e75d1b4	Update patchinfo incident numbers [skip actions]	2025-11-10 15:40:17 +00:00
AutoGits PR Review Bot	7aa51378b7	Merging PR: products/PackageHub!195	2025-11-10 15:39:51 +00:00
AutoGits PR Review Bot	8d87e747e8	Merging PR: products/PackageHub!208	2025-11-07 15:01:00 +00:00
Marcus Meissner	1b0f0f0118	remove product again, we do not need it currently	2025-11-07 10:23:59 +00:00
Patchinfo incident numbering	46d712de4f	Update patchinfo incident numbers [skip actions]	2025-11-07 08:49:01 +00:00
AutoGits PR Review Bot	5003a51c3b	Merging PR: products/PackageHub!206	2025-11-07 08:48:34 +00:00
Marcus Meissner	92d66f0b6b	Update submodules from pool/chromium#15 and create patchinfo.20251106083153138720.187004354831441/_patchinfo	2025-11-06 09:32:10 +01:00
Robert Frohl	351a05e702	Update patchinfo.20251025182836794674.93181000773252/_patchinfo removed <seperate_build_arch/>	2025-11-05 10:56:13 +01:00
Marcus Meissner	dd0d7384d4	Update patchinfo.20251027101618101208.187004354831441/_patchinfo remove seperate build arch	2025-11-05 10:53:41 +01:00
Marcus Meissner	52ba298c89	Update patchinfo.20251027103924170417.187004354831441/_patchinfo remove sdeperate build arch	2025-11-05 10:53:07 +01:00
Marcus Meissner	dc8c823d25	Update patchinfo.20251104153107003768.187004354831441/_patchinfo remove seperate buiild arch	2025-11-05 10:52:05 +01:00
Marcus Meissner	c662779915	Update submodules from pool/MozillaThunderbird#6 and create patchinfo.20251104153107003768.187004354831441/_patchinfo	2025-11-04 16:32:07 +01:00
Marcus Meissner	f5e0640ae8	Merge branch 'leap-16.0' into maintenance-update-1761560177	2025-11-03 15:55:54 +01:00
Marcus Meissner	b125d840e4	Merge branch 'leap-16.0' into maintenance-update-1761561563	2025-11-03 15:55:44 +01:00
Elisei Roca	caf037d873	Merge branch 'leap-16.0' into maintenance-update-1761416916	2025-11-03 15:54:28 +01:00
Robert Frohl	1f1551b5ed	Add new line	2025-11-03 15:45:13 +01:00
AutoGits PR Review Bot	6082776b11	Merging PR: products/PackageHub!204	2025-11-03 13:45:33 +00:00
Marcus Meissner	cf12843bbb	build a product below the pull request so we get productcompose filtering	2025-11-03 10:35:10 +00:00
Patchinfo incident numbering	354f7c73f1	Update patchinfo incident numbers [skip actions]	2025-11-03 10:04:38 +00:00
AutoGits PR Review Bot	25b7a72f48	Merging PR: products/PackageHub!203	2025-11-03 10:04:21 +00:00
Patchinfo incident numbering	aa671f7d22	Update patchinfo incident numbers [skip actions]	2025-11-03 09:21:40 +00:00
AutoGits PR Review Bot	b3a5d3da30	Merging PR: products/PackageHub!192	2025-11-03 09:21:14 +00:00
Patchinfo incident numbering	baeb4dd0f0	Update patchinfo incident numbers [skip actions]	2025-10-31 09:48:08 +00:00
AutoGits PR Review Bot	ed82c1a9b7	Merging PR: products/PackageHub!202	2025-10-31 09:47:49 +00:00
Patchinfo incident numbering	a7f1084c2b	Update patchinfo incident numbers [skip actions]	2025-10-31 08:47:45 +00:00
AutoGits PR Review Bot	faec30d90c	Merging PR: products/PackageHub!177	2025-10-31 08:47:18 +00:00
Robert Frohl	dee17ce819	Update submodules from pool/python-Django#2 and create patchinfo.20251016111300220521.93181000773252/_patchinfo	2025-10-30 15:56:43 +01:00
Marcus Meissner	da03c66eed	Update submodules from pool/product-composer#6 and create patchinfo.20251030134459405257.187004354831441/_patchinfo	2025-10-30 14:45:13 +01:00
Marcus Meissner	1aeb477ba1	Update submodules from pool/chromium#14 and create patchinfo.20251030080843825030.187004354831441/_patchinfo	2025-10-30 09:08:58 +01:00
Patchinfo incident numbering	280b37a43b	Update patchinfo incident numbers [skip actions]	2025-10-29 16:01:09 +00:00
AutoGits PR Review Bot	537ee79523	Merging PR: products/PackageHub!196	2025-10-29 16:00:48 +00:00
AutoGits PR Review Bot	1d8648ba28	Merging PR: products/PackageHub!198	2025-10-29 15:29:34 +00:00
Patchinfo incident numbering	f42dcc1f68	Update patchinfo incident numbers [skip actions]	2025-10-29 11:37:25 +00:00
AutoGits PR Review Bot	45f8a23cee	Merging PR: products/PackageHub!190	2025-10-29 11:37:08 +00:00
Patchinfo incident numbering	5ffd93f8ff	Update patchinfo incident numbers [skip actions]	2025-10-27 16:30:21 +00:00
AutoGits PR Review Bot	e66531550a	Merging PR: products/PackageHub!185	2025-10-27 16:30:02 +00:00
Elisei Roca	f089aa345a	Fix melange submodule reference For some reason, pool/melange did not have a leap-16.0 branch. I've created one based on .changes, .spec file and sha256sum of the package source archives.	2025-10-27 16:34:51 +01:00
Marcus Meissner	7f9822480c	Update submodules from pool/micropython#2 and create patchinfo.20251027103924170417.187004354831441/_patchinfo	2025-10-27 11:39:35 +01:00
Marcus Meissner	bd04a8821e	Update submodules from pool/MozillaThunderbird#5 and create patchinfo.20251027101939269288.187004354831441/_patchinfo	2025-10-27 11:20:22 +01:00
Marcus Meissner	a391990f93	Update submodules from pool/knot#4 and create patchinfo.20251027101618101208.187004354831441/_patchinfo	2025-10-27 11:16:33 +01:00
Patchinfo incident numbering	69a658bd00	Update patchinfo incident numbers [skip actions]	2025-10-27 09:47:56 +00:00
AutoGits PR Review Bot	ed10d127e1	Merging PR: products/PackageHub!188	2025-10-27 09:47:38 +00:00
Patchinfo incident numbering	920f500c2d	Update patchinfo incident numbers [skip actions]	2025-10-27 09:12:01 +00:00
Robert Frohl	aa01d6bd01	Update submodules from pool/amarok!1 and create patchinfo.20251025182836794674.93181000773252/_patchinfo	2025-10-25 20:29:27 +02:00
Robert Frohl	47f3feff06	Update submodules from pool/openqa#9 , pool/os-autoinst#4 and create patchinfo.20251025182237146698.93181000773252/_patchinfo	2025-10-25 20:23:15 +02:00
Elisei Roca	ae03bdb413	Merge pull request 'try staging release numbers' (#187 ) from msmeissn/PackageHub:leap-16.0 into leap-16.0 Reviewed-on: products/PackageHub#187	2025-10-24 10:12:30 +02:00
AutoGits PR Review Bot	8dea22da27	Merging PR: products/PackageHub!180	2025-10-23 13:09:42 +00:00
Marcus Meissner	47614025ea	Added fprintd to PHUB	2025-10-23 15:06:14 +02:00
Robert Frohl	db55ee5099	Update submodules from pool/warewulf4#2 and create patchinfo.20251023113823853491.93181000773252/_patchinfo	2025-10-23 13:38:49 +02:00
AutoGits PR Review Bot	acd5200a82	Merging PR: products/PackageHub!181	2025-10-23 09:38:12 +00:00
AutoGits PR Review Bot	fd98ce0933	Merging PR: products/PackageHub!183	2025-10-23 09:21:53 +00:00
Marcus Meissner	8210acb531	use correct id	2025-10-23 10:42:56 +02:00
Marcus Meissner	8b0d506e17	try staging release numbers	2025-10-23 10:28:54 +02:00
Marcus Meissner	a6975be399	Update submodules from pool/chromium#13 and create patchinfo.20251022070616351820.90520734224245/_patchinfo	2025-10-22 09:06:22 +02:00
Elisei Roca	fbbea248cc	Merge pull request 'Pull request for security update for chromium' (#176 ) from msmeissn/PackageHub:maintenance-update-1760532984 into leap-16.0 Reviewed-on: products/PackageHub#176	2025-10-20 17:45:05 +02:00
Robert Frohl	30ffa267ce	Update submodules from pool/lutris!1 and create patchinfo.20251020125830692820.93181000773252/_patchinfo	2025-10-20 14:59:22 +02:00
Elisei Roca	75399cad77	Merge pull request 'Add temporary bot account' (#179 ) from szarate/temporary-openqa into leap-16.0	2025-10-17 10:54:31 +02:00
Robert Frohl	706517b028	Update submodules from pool/virtme#1 and create patchinfo.20251017085327031166.93181000773252/_patchinfo	2025-10-17 10:53:37 +02:00
Robert Frohl	c307213f8e	Update submodules from pool/opi#1 and create patchinfo.20251017085122907353.93181000773252/_patchinfo	2025-10-17 10:51:39 +02:00
Santiago Zarate	3af15d4d22	Add temporary bot account foursixnine-openqa	2025-10-17 10:34:21 +02:00
Elisei Roca	60c3479bc6	Merge pull request 'do maintenance-release-review only for the codesrtream' (#178 ) from msmeissn/PackageHub:leap-16.0 into leap-16.0 Reviewed-on: products/PackageHub#178	2025-10-17 09:31:56 +02:00
Marcus Meissner	20bac6ac37	do maintenance-release-review only for the codesrtream	2025-10-16 18:24:41 +02:00
Elisei Roca	b511b59ca5	Rework patchinfo incident numbering action workflow Run on tumbleweed_autobuild with pre-installed go. Do repository checkout via git clone to reduce deps. Use gitea-actions-autobuild as commit user, to simplify the workflow. Add on: workflow_dispatch for triggering the workflow manually if needed. RUNNER_GITEA_DOMAIN is defined in the runner configuration to make this file portable to other Gitea instances.	2025-10-15 18:31:52 +02:00
AutoGits PR Review Bot	bc3dc4b339	Update incident numbers [skip actions]	2025-10-15 13:28:41 +00:00
Marcus Meissner	f93f12361f	Update submodules from pool/chromium#12 and create patchinfo.20251015125625066283.90520734224245/_patchinfo	2025-10-15 14:56:31 +02:00
AutoGits PR Review Bot	994236b840	Merging PR: products/PackageHub!175	2025-10-14 07:30:27 +00:00
Elisei Roca	29a1d5a82c	Revert one use of %_is_in_project that should not reach subprojects This part is Leap 16.0 only and not relevant for subprojects. Excluding the failed/unresolvable packages.	2025-10-13 19:53:51 +02:00
AutoGits PR Review Bot	2e6929b3b2	Merging PR: products/PackageHub!172	2025-10-13 13:16:34 +00:00
AutoGits PR Review Bot	c4f6a7a235	Merging PR: products/PackageHub!173	2025-10-13 11:30:07 +00:00
Max Lin	335705143c	_config: make sure the particular build configuration being available in this project's namespace	2025-10-13 16:11:22 +08:00
Marcus Meissner	f250ad0669	Update submodules from pool/chromium#11 and create patchinfo.20251010110535882810.90520734224245/_patchinfo	2025-10-10 13:06:00 +02:00
Nathan Cutler	324825e0b7	Merge pull request 'Remove unneeded micro patterns from SLES' (#170 ) from bigironman/PackageHub:leap-16.0 into leap-16.0 Reviewed-on: products/PackageHub#170 Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>	2025-10-10 11:48:06 +02:00
Nathan Cutler	e736273676	Merge pull request 'enable maintenance flags' (#171 ) from msmeissn/PackageHub:adjust-for-maint into leap-16.0 Reviewed-on: products/PackageHub#171 Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>	2025-10-10 11:46:31 +02:00
Marcus Meissner	434d04cf96	enable maintenance flags	2025-10-10 10:57:14 +02:00
Wolfgang Engel	a97a485213	Remove unneeded micro patterns	2025-10-10 10:36:11 +02:00
AutoGits PR Review Bot	5d5cfbf4aa	Merging PR: products/PackageHub!168	2025-10-09 14:22:32 +00:00
Elisei Roca	0d97d2916b	Add szarate to qam-openqa-review	2025-10-09 16:04:46 +02:00
Elisei Roca	be9326b949	Enable opensuse-review on both PkgGit and PrjGit	2025-10-09 16:04:01 +02:00
Elisei Roca	da4eebb4e9	Merge pull request 'fix-pi-prefix' (#169 ) from msmeissn/PackageHub:fix-pi-prefix into leap-16.0 Reviewed-on: products/PackageHub#169	2025-10-09 16:00:53 +02:00
Marcus Meissner	c48f6ace11	Merge branch 'leap-16.0' into fix-pi-prefix	2025-10-09 13:32:44 +02:00
Marcus Meissner	68261dc6cd	Merge branch 'leap-16.0' into add-patchinfoga	2025-10-09 13:32:34 +02:00
AutoGits PR Review Bot	d19af5a4b9	Merging PR: products/PackageHub!164	2025-10-09 08:51:42 +00:00
Marcus Meissner	d29edb21a2	added patchinfo.ga to freeze packages at GA level	2025-10-09 10:36:53 +02:00
Marcus Meissner	c31a6f7216	simplify uses as we do not need read perms	2025-10-09 10:13:37 +02:00
Marcus Meissner	8d2906ef2e	use packagehub- as patch insert prefix	2025-10-09 10:03:22 +02:00
Elisei Roca	08c4095ab0	Switch to maintenance mode	2025-10-08 18:11:21 +02:00
Nathan Cutler	5e849a18d0	Merge pull request 'Remove more uninstallables that are not needed' (#162 ) from bigironman/PackageHub:leap-16.0 into leap-16.0 Reviewed-on: products/PackageHub#162 Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org> Reviewed-by: Nathan Cutler <smithfarm@noreply.src.opensuse.org>	2025-10-07 12:11:05 +02:00
Wolfgang Engel	a31c06a700	Remove more uninstallables that are not needed	2025-10-06 16:54:17 +02:00
Nathan Cutler	a865f86f0e	Merge pull request 'Remove more unneeded 32bit packages' (#161 ) from bigironman/PackageHub:leap-16.0 into leap-16.0 Reviewed-on: products/PackageHub#161 Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org> Reviewed-by: Nathan Cutler <smithfarm@noreply.src.opensuse.org>	2025-10-06 16:11:35 +02:00
Wolfgang Engel	e047cfd6e9	Remove more unneeded 32bit packages	2025-10-06 15:44:27 +02:00
Nathan Cutler	61505d870a	Merge pull request 'Remove unneeded patterns' (#156 ) from bigironman/PackageHub:leap-16.0 into leap-16.0 Reviewed-on: products/PackageHub#156 Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org> Reviewed-by: Nathan Cutler <smithfarm@noreply.src.opensuse.org>	2025-10-03 11:08:06 +02:00
Wolfgang Engel	fcb6c96d1c	Remove unneeded patterns	2025-10-02 17:09:24 +02:00
Wolfgang Engel	3d7a75de4e	Merge pull request '0Backports: sync with current state of SLES-16.0 (GM)' (#144 ) from wip-sles-unneeded-gm into leap-16.0 Reviewed-on: products/PackageHub#144 Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>	2025-09-29 11:36:04 +02:00
Nathan Cutler	5ff3980bb7	0Backports: sync with current state of SLES-16.0 (GM) Signed-off-by: Nathan Cutler <ncutler@suse.cz>	2025-09-26 18:49:34 +02:00