1
0

Compare commits

...

77 Commits

Author SHA256 Message Date
351a05e702 Update patchinfo.20251025182836794674.93181000773252/_patchinfo
removed  <seperate_build_arch/>
2025-11-05 10:56:13 +01:00
caf037d873 Merge branch 'leap-16.0' into maintenance-update-1761416916 2025-11-03 15:54:28 +01:00
1f1551b5ed Add new line 2025-11-03 15:45:13 +01:00
AutoGits PR Review Bot
6082776b11 Merging
PR: products/PackageHub!204
2025-11-03 13:45:33 +00:00
Marcus Meissner
cf12843bbb build a product below the pull request so we get productcompose filtering 2025-11-03 10:35:10 +00:00
354f7c73f1 Update patchinfo incident numbers [skip actions] 2025-11-03 10:04:38 +00:00
AutoGits PR Review Bot
25b7a72f48 Merging
PR: products/PackageHub!203
2025-11-03 10:04:21 +00:00
aa671f7d22 Update patchinfo incident numbers [skip actions] 2025-11-03 09:21:40 +00:00
AutoGits PR Review Bot
b3a5d3da30 Merging
PR: products/PackageHub!192
2025-11-03 09:21:14 +00:00
baeb4dd0f0 Update patchinfo incident numbers [skip actions] 2025-10-31 09:48:08 +00:00
AutoGits PR Review Bot
ed82c1a9b7 Merging
PR: products/PackageHub!202
2025-10-31 09:47:49 +00:00
a7f1084c2b Update patchinfo incident numbers [skip actions] 2025-10-31 08:47:45 +00:00
AutoGits PR Review Bot
faec30d90c Merging
PR: products/PackageHub!177
2025-10-31 08:47:18 +00:00
dee17ce819 Update submodules from pool/python-Django#2 and create patchinfo.20251016111300220521.93181000773252/_patchinfo 2025-10-30 15:56:43 +01:00
da03c66eed Update submodules from pool/product-composer#6 and create patchinfo.20251030134459405257.187004354831441/_patchinfo 2025-10-30 14:45:13 +01:00
1aeb477ba1 Update submodules from pool/chromium#14 and create patchinfo.20251030080843825030.187004354831441/_patchinfo 2025-10-30 09:08:58 +01:00
280b37a43b Update patchinfo incident numbers [skip actions] 2025-10-29 16:01:09 +00:00
AutoGits PR Review Bot
537ee79523 Merging
PR: products/PackageHub!196
2025-10-29 16:00:48 +00:00
AutoGits PR Review Bot
1d8648ba28 Merging
PR: products/PackageHub!198
2025-10-29 15:29:34 +00:00
f42dcc1f68 Update patchinfo incident numbers [skip actions] 2025-10-29 11:37:25 +00:00
AutoGits PR Review Bot
45f8a23cee Merging
PR: products/PackageHub!190
2025-10-29 11:37:08 +00:00
5ffd93f8ff Update patchinfo incident numbers [skip actions] 2025-10-27 16:30:21 +00:00
AutoGits PR Review Bot
e66531550a Merging
PR: products/PackageHub!185
2025-10-27 16:30:02 +00:00
Elisei Roca
f089aa345a Fix melange submodule reference
For some reason, pool/melange did not have a leap-16.0 branch.

I've created one based on .changes, .spec file and sha256sum of the
package source archives.
2025-10-27 16:34:51 +01:00
bd04a8821e Update submodules from pool/MozillaThunderbird#5 and create patchinfo.20251027101939269288.187004354831441/_patchinfo 2025-10-27 11:20:22 +01:00
69a658bd00 Update patchinfo incident numbers [skip actions] 2025-10-27 09:47:56 +00:00
AutoGits PR Review Bot
ed10d127e1 Merging
PR: products/PackageHub!188
2025-10-27 09:47:38 +00:00
920f500c2d Update patchinfo incident numbers [skip actions] 2025-10-27 09:12:01 +00:00
aa01d6bd01 Update submodules from pool/amarok!1 and create patchinfo.20251025182836794674.93181000773252/_patchinfo 2025-10-25 20:29:27 +02:00
47f3feff06 Update submodules from pool/openqa#9, pool/os-autoinst#4 and create patchinfo.20251025182237146698.93181000773252/_patchinfo 2025-10-25 20:23:15 +02:00
ae03bdb413 Merge pull request 'try staging release numbers' (#187) from msmeissn/PackageHub:leap-16.0 into leap-16.0
Reviewed-on: products/PackageHub#187
2025-10-24 10:12:30 +02:00
AutoGits PR Review Bot
8dea22da27 Merging
PR: products/PackageHub!180
2025-10-23 13:09:42 +00:00
Marcus Meissner
47614025ea Added fprintd to PHUB 2025-10-23 15:06:14 +02:00
db55ee5099 Update submodules from pool/warewulf4#2 and create patchinfo.20251023113823853491.93181000773252/_patchinfo 2025-10-23 13:38:49 +02:00
AutoGits PR Review Bot
acd5200a82 Merging
PR: products/PackageHub!181
2025-10-23 09:38:12 +00:00
AutoGits PR Review Bot
fd98ce0933 Merging
PR: products/PackageHub!183
2025-10-23 09:21:53 +00:00
Marcus Meissner
8210acb531 use correct id 2025-10-23 10:42:56 +02:00
Marcus Meissner
8b0d506e17 try staging release numbers 2025-10-23 10:28:54 +02:00
a6975be399 Update submodules from pool/chromium#13 and create patchinfo.20251022070616351820.90520734224245/_patchinfo 2025-10-22 09:06:22 +02:00
fbbea248cc Merge pull request 'Pull request for security update for chromium' (#176) from msmeissn/PackageHub:maintenance-update-1760532984 into leap-16.0
Reviewed-on: products/PackageHub#176
2025-10-20 17:45:05 +02:00
30ffa267ce Update submodules from pool/lutris!1 and create patchinfo.20251020125830692820.93181000773252/_patchinfo 2025-10-20 14:59:22 +02:00
75399cad77 Merge pull request 'Add temporary bot account' (#179) from szarate/temporary-openqa into leap-16.0 2025-10-17 10:54:31 +02:00
706517b028 Update submodules from pool/virtme#1 and create patchinfo.20251017085327031166.93181000773252/_patchinfo 2025-10-17 10:53:37 +02:00
c307213f8e Update submodules from pool/opi#1 and create patchinfo.20251017085122907353.93181000773252/_patchinfo 2025-10-17 10:51:39 +02:00
3af15d4d22 Add temporary bot account foursixnine-openqa 2025-10-17 10:34:21 +02:00
60c3479bc6 Merge pull request 'do maintenance-release-review only for the codesrtream' (#178) from msmeissn/PackageHub:leap-16.0 into leap-16.0
Reviewed-on: products/PackageHub#178
2025-10-17 09:31:56 +02:00
Marcus Meissner
20bac6ac37 do maintenance-release-review only for the codesrtream 2025-10-16 18:24:41 +02:00
Elisei Roca
b511b59ca5 Rework patchinfo incident numbering action workflow
Run on tumbleweed_autobuild with pre-installed go.
Do repository checkout via git clone to reduce deps.
Use gitea-actions-autobuild as commit user, to simplify the workflow.
Add on: workflow_dispatch for triggering the workflow manually if needed.

RUNNER_GITEA_DOMAIN is defined in the runner configuration to make this
file portable to other Gitea instances.
2025-10-15 18:31:52 +02:00
AutoGits PR Review Bot
bc3dc4b339 Update incident numbers [skip actions] 2025-10-15 13:28:41 +00:00
f93f12361f Update submodules from pool/chromium#12 and create patchinfo.20251015125625066283.90520734224245/_patchinfo 2025-10-15 14:56:31 +02:00
AutoGits PR Review Bot
994236b840 Merging
PR: products/PackageHub!175
2025-10-14 07:30:27 +00:00
Elisei Roca
29a1d5a82c Revert one use of %_is_in_project that should not reach subprojects
This part is Leap 16.0 only and not relevant for subprojects.
Excluding the failed/unresolvable packages.
2025-10-13 19:53:51 +02:00
AutoGits PR Review Bot
2e6929b3b2 Merging
PR: products/PackageHub!172
2025-10-13 13:16:34 +00:00
AutoGits PR Review Bot
c4f6a7a235 Merging
PR: products/PackageHub!173
2025-10-13 11:30:07 +00:00
335705143c _config: make sure the particular build configuration being available in this project's namespace 2025-10-13 16:11:22 +08:00
f250ad0669 Update submodules from pool/chromium#11 and create patchinfo.20251010110535882810.90520734224245/_patchinfo 2025-10-10 13:06:00 +02:00
324825e0b7 Merge pull request 'Remove unneeded micro patterns from SLES' (#170) from bigironman/PackageHub:leap-16.0 into leap-16.0
Reviewed-on: products/PackageHub#170
Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>
2025-10-10 11:48:06 +02:00
e736273676 Merge pull request 'enable maintenance flags' (#171) from msmeissn/PackageHub:adjust-for-maint into leap-16.0
Reviewed-on: products/PackageHub#171
Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>
2025-10-10 11:46:31 +02:00
Marcus Meissner
434d04cf96 enable maintenance flags 2025-10-10 10:57:14 +02:00
a97a485213 Remove unneeded micro patterns 2025-10-10 10:36:11 +02:00
AutoGits PR Review Bot
5d5cfbf4aa Merging
PR: products/PackageHub!168
2025-10-09 14:22:32 +00:00
Elisei Roca
0d97d2916b Add szarate to qam-openqa-review 2025-10-09 16:04:46 +02:00
Elisei Roca
be9326b949 Enable opensuse-review on both PkgGit and PrjGit 2025-10-09 16:04:01 +02:00
da4eebb4e9 Merge pull request 'fix-pi-prefix' (#169) from msmeissn/PackageHub:fix-pi-prefix into leap-16.0
Reviewed-on: products/PackageHub#169
2025-10-09 16:00:53 +02:00
c48f6ace11 Merge branch 'leap-16.0' into fix-pi-prefix 2025-10-09 13:32:44 +02:00
68261dc6cd Merge branch 'leap-16.0' into add-patchinfoga 2025-10-09 13:32:34 +02:00
AutoGits PR Review Bot
d19af5a4b9 Merging
PR: products/PackageHub!164
2025-10-09 08:51:42 +00:00
Marcus Meissner
d29edb21a2 added patchinfo.ga to freeze packages at GA level 2025-10-09 10:36:53 +02:00
Marcus Meissner
c31a6f7216 simplify uses as we do not need read perms 2025-10-09 10:13:37 +02:00
Marcus Meissner
8d2906ef2e use packagehub- as patch insert prefix 2025-10-09 10:03:22 +02:00
Elisei Roca
08c4095ab0 Switch to maintenance mode 2025-10-08 18:11:21 +02:00
5e849a18d0 Merge pull request 'Remove more uninstallables that are not needed' (#162) from bigironman/PackageHub:leap-16.0 into leap-16.0
Reviewed-on: products/PackageHub#162
Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>
Reviewed-by: Nathan Cutler <smithfarm@noreply.src.opensuse.org>
2025-10-07 12:11:05 +02:00
a31c06a700 Remove more uninstallables that are not needed 2025-10-06 16:54:17 +02:00
a865f86f0e Merge pull request 'Remove more unneeded 32bit packages' (#161) from bigironman/PackageHub:leap-16.0 into leap-16.0
Reviewed-on: products/PackageHub#161
Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>
Reviewed-by: Nathan Cutler <smithfarm@noreply.src.opensuse.org>
2025-10-06 16:11:35 +02:00
e047cfd6e9 Remove more unneeded 32bit packages 2025-10-06 15:44:27 +02:00
61505d870a Merge pull request 'Remove unneeded patterns' (#156) from bigironman/PackageHub:leap-16.0 into leap-16.0
Reviewed-on: products/PackageHub#156
Reviewed-by: autogits_obs_staging_bot <autogits_obs_staging_bot@noreply.src.opensuse.org>
Reviewed-by: Nathan Cutler <smithfarm@noreply.src.opensuse.org>
2025-10-03 11:08:06 +02:00
fcb6c96d1c Remove unneeded patterns 2025-10-02 17:09:24 +02:00
36 changed files with 26549 additions and 66 deletions

View File

@@ -1,37 +1,35 @@
# Use this as .gitea/workflows/patchinfo_numberator.yaml in all products/* repos
name: Patchinfo ID numberator
run-name: ${{ gitea.actor }} is setting patchinfo numbers
on: [push]
name: Patchinfo incident numbering
on:
push:
workflow_dispatch:
env:
REPO_PATH: /workspace/${{ gitea.repository }}
REPO_URL: https://gitea-actions-autobuild:${{ secrets.REPO_WRITE }}@$RUNNER_GITEA_DOMAIN/${{ gitea.repository }}.git
jobs:
use-go-action:
runs-on: tumbleweed
runs-on: tumbleweed_autobuild
steps:
# Install packages if not provided by image
- run: |
rpm -q go && exit 0
zypper ref
zypper in -y go
# Generic action from GitHub to clone the product git repo
- name: Checkout product
uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/github-actions-checkout@v4
with:
token: ${{ secrets.REPO_WRITE }}
repo-sha256: true
run: |
test -n "${{ env.REPO_PATH }}" && rm -rfv "${{ env.REPO_PATH }}"/*
git config --global --add safe.directory ${{ env.REPO_PATH }}
git clone ${{ env.REPO_URL }} ${{ env.REPO_PATH }}
- name: Update all new _patchinfo files
uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/patchinfo-numbering-action@v0
- name: Get last commit author
id: last-commit
run: |
echo "author=$(git log -1 --pretty='%an <%ae>')" >> $GITHUB_OUTPUT
- name: Commit changes back
uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.opensuse.org/actions/stefanzweifel-git-auto-commit-action@v5
uses: https://src.opensuse.org/actions/patchinfo-numbering-action@v0
with:
prefix: packagehub-
- name: Commit changes
uses: https://src.opensuse.org/actions/stefanzweifel-git-auto-commit-action@v5
with:
commit_user_name: gitea-actions-autobuild
commit_user_email: autobuild+gitea@opensuse.org
commit_author: ${{ steps.last-commit.outputs.author }}
commit_message: "Update incident numbers [skip actions]"
commit_author: Patchinfo incident numbering <gitea-actions-autobuild@noreply.src.opensuse.org>
commit_message: "Update patchinfo incident numbers [skip actions]"
commit_options: '--no-edit'
skip_fetch: true

4
.gitmodules vendored
View File

@@ -26106,3 +26106,7 @@
path = perl-MCP
url = ../../pool/perl-MCP
branch = leap-16.0
[submodule "fprintd"]
path = fprintd
url = ../../pool/fprintd
branch = leap-16.0

View File

@@ -1,3 +1,54 @@
-------------------------------------------------------------------
Fri Oct 10 07:19:41 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
- Backports.productcompose:
+ add to backports_unneeded, not needed
micro patterns that are coming from SLES
patterns-micro-alt_onlyDVD
patterns-micro-cloud
patterns-micro-defaults
patterns-micro-fips
patterns-micro-hardware
patterns-micro-ima-evm
patterns-micro-kvm_host
patterns-micro-onlyDVD
patterns-micro-ra-agent
patterns-micro-ra-verifier
patterns-micro-salt_minion
patterns-micro-sssd-ldap
-------------------------------------------------------------------
Mon Oct 6 14:49:27 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
- Backports.productcompose:
+ add to backports_unneeded, remove more uninstallables
aws-cli
NetworkManager-branding-upstream
sdbootutil-tukit
toolbox-branding-SLE-16.0
-------------------------------------------------------------------
Mon Oct 6 13:24:32 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
- Backports.productcompose:
+ add to backports_unneeded, cleanup more unneeded 32bit packages
at-spi2-core-devel-32bit
libcups2-32bit
libcurl-devel-32bit
libdns_sd-32bit
libpcap-devel-32bit
libraptor2-0-32bit
libtss2-fapi1-32bit
-------------------------------------------------------------------
Thu Oct 2 15:07:44 UTC 2025 - Wolfgang Engel <wolfgang.engel@suse.com>
- Backports.productcompose:
+ add to backports_unneeded since not needed patterns
patterns-base-transactional_base
patterns-micro-elemental_client
patterns-sap-bone
-------------------------------------------------------------------
Fri Sep 26 16:48:57 UTC 2025 - Nathan Cutler <ncutler@suse.com>

View File

@@ -14,7 +14,7 @@ scc:
build_options:
### For maintenance, otherwise only "the best" version of each package is picked:
# - take_all_available_versions
- take_all_available_versions
- hide_flavor_in_product_directory_name
### Since the Backports product build is not self-contained in a single repository,
@@ -32,8 +32,8 @@ debug: split
repodata: all
# has only an effect during maintenance:
set_updateinfo_from: maint-coord@suse.de
# set_updateinfo_id_prefix: openSUSE-Leap-16.0-
set_updateinfo_from: maintenance@opensuse.org
set_updateinfo_id_prefix: SUSE-PackageHub-16.0-
flavors:
backports_aarch64:
@@ -58,6 +58,9 @@ packagesets:
- ALP
- ALP-dummy-release
- MozillaFirefox-branding-upstream
- NetworkManager-branding-upstream
- at-spi2-core-devel-32bit
- aws-cli
- bash-legacybin
- busybox-adduser
- busybox-attr
@@ -155,12 +158,14 @@ packagesets:
- libatk-bridge-2_0-0-32bit
- libatspi0-32bit
- libavahi-client3-32bit
# - libcups2-32bit
- libcups2-32bit
- libcurl-mini4
- libcurl4-32bit
- libcurl-devel-32bit
- libdbus-1-3-32bit
- libdbus-glib-1-2-32bit
- libdc1394-26-32bit
- libdns_sd-32bit
- libdebuginfod-dummy-devel
- libdebuginfod1-dummy
- libdvbv5-0-32bit
@@ -170,16 +175,19 @@ packagesets:
- liblirc_driver0-32bit
- libmanette-0_2-0-32bit
- libpcap1-32bit
- libpcap-devel-32bit
- libpolkit-agent-1-0-32bit
- libpolkit-gobject-1-0-32bit
- libpq5-32bit
- libpxbackend-1_0-mini
- libraptor2-0-32bit
- libressl
- libressl-devel
- libressl-devel-doc
# - libsybdb5-32bit
- libsystemd0-mini
# - libtdsodbc0-32bit
- libtss2-fapi1-32bit
- libudev-mini1
- libunbound-devel-mini
- libusb-1_0-0-32bit
@@ -195,6 +203,22 @@ packagesets:
- openssl_tpm2
- pam-extra-32bit
- patterns-base-kernel_livepatching
- patterns-base-transactional_base
- patterns-micro-alt_onlyDVD
- patterns-micro-cloud
- patterns-micro-defaults
- patterns-micro-elemental_client
- patterns-micro-defaults
- patterns-micro-fips
- patterns-micro-hardware
- patterns-micro-ima-evm
- patterns-micro-kvm_host
- patterns-micro-onlyDVD
- patterns-micro-ra-agent
- patterns-micro-ra-verifier
- patterns-micro-salt_minion
- patterns-micro-sssd-ldap
- patterns-sap-bone
- patterns-base-update_test
- plymouth-branding-upstream
- postgresql17-devel-mini
@@ -222,6 +246,7 @@ packagesets:
- reproducible-faketools-tar
- reproducible-faketools-verbose
- reproducible-faketools-zip
- sdbootutil-tukit
- sddm-branding-openSUSE
- sddm-qt6-branding-openSUSE
- systemd-default-settings-branding-openSUSE
@@ -233,6 +258,7 @@ packagesets:
- systemd-mini-container
- systemd-mini-devel
- this-is-only-for-build-envs
- toolbox-branding-SLE-16.0
- udev-mini
- update-test-32bit-pkg
- update-test-affects-package-manager

View File

@@ -1,4 +1,8 @@
%if 0%{?is_stage_project}
Release: <CI_CNT>.<B_CNT> spec:bp160.999999.<CI_CNT>.<B_CNT>
%else
Release: <CI_CNT>.<B_CNT> spec:bp160.<CI_CNT>.<B_CNT>
%endif
# 000productcompose experiment
%if "%_repository" == "product"
@@ -143,7 +147,7 @@ Substitute: wallpaper-branding-openSUSE wallpaper-branding-SLE
%define is_opensuse 1
%define is_backports 1
%if "%_project" == "openSUSE:Backports:SLE-16.0" || "%_project" == "openSUSE:Backports:SLE-16.0:git"
%if 0%{?_is_in_project}
Macros:
%vendor openSUSE
%distribution SUSE Linux Enterprise 16
@@ -164,7 +168,7 @@ Macros:
# Leap specific package list, the same list with excludebuild must add to Backports project
# Most of package should be built in Backports
%if "%_project" == "openSUSE:Backports:SLE-16.0" || "%_project" == "openSUSE:Backports:SLE-16.0:git"
%if "%_project" == "openSUSE:Backports:SLE-16.0"
# we build ffado:ffado-mixer for openSUSE, the main one is built in SLFO
BuildFlags: excludebuild:ffado
# build gpgme:qt flavor for qt5 support

View File

@@ -1,3 +1,3 @@
{
"": ["packagehub-review"]
"": ["maintenance-release-review"]
}

2
amarok

Submodule amarok updated: e1886b2904...2a1b2d88df

1
fprintd Submodule

Submodule fprintd added at 3d1b159ec5

2
lutris

Submodule lutris updated: ed0d79ecd4...937dc36983

Submodule melange updated: 32c0112588...4ca0d8a776

2
openQA

Submodule openQA updated: 04be1d7de7...d4fcc3820c

2
opi

Submodule opi updated: 8e0625ef06...13283891b5

View File

@@ -0,0 +1,66 @@
<patchinfo incident="packagehub-1">
<issue tracker="bnc" id="1251334">VUL-0: chromium: release 141.0.7390.65</issue>
<issue tracker="cve" id="2025-11213">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11216">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11207">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11211">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11212">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11210">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="bnc" id="1250780">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11208">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-10890">VUL-0: chromium: release 140.0.7339.207</issue>
<issue tracker="cve" id="2025-11206">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11460">VUL-0: chromium: release 141.0.7390.65</issue>
<issue tracker="cve" id="2025-11219">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="bnc" id="1250472">VUL-0: chromium: release 140.0.7339.207</issue>
<issue tracker="cve" id="2025-11205">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-10891">VUL-0: chromium: release 140.0.7339.207</issue>
<issue tracker="cve" id="2025-11458"/>
<issue tracker="cve" id="2025-11215">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-11209">VUL-0: chromium: release 141.0.7390.54</issue>
<issue tracker="cve" id="2025-10892">VUL-0: chromium: release 140.0.7339.207</issue>
<packager>AndreasStieger</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 141.0.7390.76:
* Do not send URLs as AIM input. This is to resolve a privacy
concern, around passing urls to AI Mode.
Chromium 141.0.7390.65 (boo#1251334):
* CVE-2025-11458: Heap buffer overflow in Sync
* CVE-2025-11460: Use after free in Storage
* CVE-2025-11211: Out of bounds read in WebCodecs
Chromium 141.0.7390.54 (stable released 2025-09-30) (boo#1250780)
* CVE-2025-11205: Heap buffer overflow in WebGPU
* CVE-2025-11206: Heap buffer overflow in Video
* CVE-2025-11207: Side-channel information leakage in Storage
* CVE-2025-11208: Inappropriate implementation in Media
* CVE-2025-11209: Inappropriate implementation in Omnibox
* CVE-2025-11210: Side-channel information leakage in Tab
* CVE-2025-11211: Out of bounds read in Media
* CVE-2025-11212: Inappropriate implementation in Media
* CVE-2025-11213: Inappropriate implementation in Omnibox
* CVE-2025-11215: Off by one error in V8
* CVE-2025-11216: Inappropriate implementation in Storage
* CVE-2025-11219: Use after free in V8
* Various fixes from internal audits, fuzzing and other initiatives
Chromium 141.0.7390.37 (beta released 2025-09-24)
Chromium 140.0.7339.207 (boo#1250472)
* CVE-2025-10890: Side-channel information leakage in V8
* CVE-2025-10891: Integer overflow in V8
* CVE-2025-10892: Integer overflow in V8
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,17 @@
<patchinfo incident="packagehub-3">
<issue tracker="bnc" id="1252013">VUL-0: CVE-2025-11756: chromium: Use after free in Safe Browsing</issue>
<issue tracker="cve" id="2025-11756"/>
<packager>AndreasStieger</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 141.0.7390.107:
* CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,17 @@
<patchinfo incident="packagehub-11">
<issue tracker="bnc" id="1250487">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
<issue tracker="cve" id="2025-59682">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
<issue tracker="cve" id="2025-59681"/>
<issue tracker="bnc" id="1250485">VUL-0: CVE-2025-59681: python-Django,python-Django4: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB</issue>
<packager>mcalabkova</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for python-Django</summary>
<description>This update for python-Django fixes the following issues:
- CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485)
- CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract() (boo#1250487)
</description>
<package>python-Django</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,103 @@
<patchinfo incident="packagehub-4">
<packager>dheidler</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for opi</summary>
<description>This update for opi fixes the following issues:
- Version 5.8.8
* Fix adding openh264 repo on leap 16.0
This update for opi fixes the following issues:
- Version 5.8.7
* Fix ocenaudio url
* Add LocalSend plugin
* Run all tests in verbose mode
* Print written repo files in verbose mode
* Increase timeouts in test/06_install_non_interactive.py
* Remove DNF references from README.md
This update for opi fixes the following issues:
- Version 5.8.5
* add librewolf plugin (#205)
* Install .NET 9
* Add verbose mode
* Change the order of the process in the github module
* Add rustdesk plugin
This update for opi fixes the following issues:
- Version 5.8.4
* Use arm64 rpm for libation on aarch64
This update for opi fixes the following issues:
- Version 5.8.3
* Install dependencies rpm-build and squashfs at runtime if needed
* Drop DNF support
This update for opi fixes the following issues:
- Version 5.8.2
* Warn about adding staging repos
* Gracefully handle zypper exit code 106 (repos without cache present)
This update for opi fixes the following issues:
- Version 5.8.1
* Fix SyntaxWarning: invalid escape sequence '\s'
This update for opi fixes the following issues:
- Version 5.8.0
* Add mullvad-brower
This update for opi fixes the following issues:
- Version 5.7.0
* Add leap-only plugin to install zellij from github release
* Don't use subprocess.run user kwarg on 15.6
* Fix tests: Use helloworld-opi-tests instead of zfs
* Perform search despite locked rpmdb
* Simplify backend code
This update for opi fixes the following issues:
- Use no macros in url in .spec for packtrack
This update for opi fixes the following issues:
- Version 5.6.0
* Add plugin to install vagrant from hashicorp repo
This update for opi fixes the following issues:
- Version 5.5.0
* Update opi/plugins/collabora.py
* add collabora office desktop
* Omit unsupported cli args on leap in 99_install_opi.py
* Switch to PEP517 install
* Fix 09_install_with_multi_repos_in_single_file_non_interactive.py
* Fix 07_install_multiple.py on tumbleweed
* Fix test suite on tumbleweed
* Update available apps in opi - README.md
This update for opi fixes the following issues:
- Version 5.4.0
* Show key ID when importing or deleting package signing keys
* Add option to install google-chrome-canary
This update for opi fixes the following issues:
- Version 5.3.0
* Fix tests for new zypper version
* fix doblue slash in packman repo url
* Add Plugin to install Libation
</description>
<package>opi</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,17 @@
<patchinfo incident="packagehub-5">
<packager>michals</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for virtme</summary>
<description>This update for virtme fixes the following issues:
- Update to 1.38:
* Fix the infamous Stale file handle (ESTALE) errors with virtiofsd
* Fix for systemctl daemon-reload when systemd support is enabled
* Fix for a kernel symlink issue affecting openSUSE/SLE
* README/docs improvements
* Various coding style cleanups
</description>
<package>virtme</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,55 @@
<patchinfo incident="packagehub-6">
<issue tracker="bnc" id="1206292">[SELinux] Wine/Proton not working reliably with default SELinux configuration</issue>
<packager>regularhunter</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for lutris</summary>
<description>This update for lutris fixes the following issues:
- Move selinux dependency
- Fix gaming under selinux (bsc#1206292)
- Fix wrong placement of lang_package macro in spec file
- Update to 0.5.19:
* Fix Proton integration bugs so Proton-fixes are applied
* Do not offer DXVK, VKD3D, D3D Extras or DDXVK-NVAPI on Proton versions;
Proton will handle these.
* The "Enable Esync" and "Enable Fsync" settings are now passed on to Proton
* DXVK's integrated D8VK will be enabled in Proton
* Emulator BIOS file location (used by libretro) may be set in Preferences
* Obtain the release year from GOG and Itch.io.
* MAME Machine setting uses a searchable entry for its enourmous list
* Support for importing Commodore 64 ROMs
- Add BuildRequires apparmor-abstractions, apparmor-rpm-macros for
Leap, fix for build error: directories not owned by a package:
/etc/apparmor.d
- update to 0.5.18:
* Lutris downloads the latest GE-Proton build for Wine if any Wine version is installed
* Use dark theme by default
* Display cover-art rather than banners by default
* Add 'Uncategorized' view to sidebar
* Preference options that do not work on Wayland will be hidden when on Wayland
* Game searches can now use fancy tags like 'installed:yes' or 'source:gog', with explanatory tool-tip
* A new filter button on the search box can build many of these fancy tags for you
* Runner searches can use 'installed:yes' as well, but no other fancy searches or anything
* Updated the Flathub and Amazon source to new APIs, restoring integration
* Itch.io source integration will load a collection named 'Lutris' if present
* GOG and Itch.io sources can now offer Linux and Windows installers for the same game
* Added support for the 'foot' terminal
* Support for DirectX 8 in DXVK v2.4
* Support for Ayatana Application Indicators
* Additional options for Ruffle runner
* Updated download links for the Atari800 and MicroM8 runners
* No longer re-download cached installation files even when some are missing
* Lutris log is included in the 'System' tab of the Preferences window
* Improved error reporting, with the Lutris log included in the error details
* Add AppArmor profile for Ubuntu versions &gt;= 23.10
* Add Duckstation runner
</description>
<package>lutris</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,16 @@
<patchinfo incident="packagehub-8">
<issue tracker="cve" id="2025-12036">VUL-0: CVE-2025-12036: chromium: Inappropriate implementation in V8</issue>
<issue tracker="bnc" id="1252402">VUL-0: CVE-2025-12036: chromium: Inappropriate implementation in V8</issue>
<packager>AndreasStieger</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 141.0.7390.122:
* CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,57 @@
<patchinfo incident="packagehub-7">
<issue tracker="bnc" id="1248768">[warewulf, REGRESSION] None of the disk/partition/filesystem Options to `wwctl profile set` appear to do anything</issue>
<issue tracker="bnc" id="1227465">[warewulf, kernel] After updating the Kernel in the Container Image 'wwctl container list' still shows old</issue>
<issue tracker="bnc" id="1246082">warewulf4-slurm suggest slurm only</issue>
<issue tracker="bnc" id="1248906">VUL-0: CVE-2025-58058: warewulf4: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory</issue>
<issue tracker="bnc" id="1227686">[warewulf, kernel] Feature: Allow to determine the Kernel to boot - with none set, take latest</issue>
<issue tracker="cve" id="2025-58058">cve#2025-58058 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-58058</issue>
<packager>mslacken</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for warewulf4</summary>
<description>This update for warewulf4 fixes the following issues:
Changes in warewulf4:
- Update to version 4.6.4:
* v4.6.4 release updates
* Convert disk booleans from wwbool to *bool which allows bools in
disk to be set to false via command line (bsc#1248768)
* Update NetworkManager Overlay
* Disable ipv4 in NetworkManager if no address or route is specified
* fix(wwctl): Create overlay edit tempfile in tmpdir
* Add default for systemd name for warewulf in warewulf.conf
* Atomic overlay file application in wwclient
* Simpler names for overlay methods
* Fix warewulfd api behavior when deleting distribution overlay
- Update to version 4.6.3:
* v4.6.3 release
* IPv6 iPXE support
* Fix a syntax error in the RPM specfile
* Fix a race condition in wwctl overlay edit
* Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays
* Move reexec.Init() to beginning of wwctl
* Add documentation for using tmpfs to distribute across numa nodes
* added warewuld configure option
* Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)
* Address copilot review from #1945
* Refactor wwapi tests for proper isolation
* Bugfix: cloning a site overlay when parent dir does not exist
* Clone to a site overlay when adding files in wwapi
* Consolidated createOverlayFile and updateOverlayFile to addOverlayFile
* Support for creating and updating overlay file in wwapi
* Only return overlay files that refer to a path within the overlay
* add overlay file deletion support
* DELETE /api/overlays/{id}?force=true can delete overlays in use
* Restore idempotency of PUT /api/nodes/{id}
* Simplify overlay mtime api and add tests
* add node overlay buildtime
* Improved netplan support
* Rebuild overlays for discovered nodes
* Restrict userdocs from building during pr when not modified
* Update to v4.6.2 GitHub release notes
</description>
<package>warewulf4</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,11 @@
<patchinfo incident="packagehub-9">
<packager>dgarcia</packager>
<rating>moderate</rating>
<category>optional</category>
<summary>Optional update for fprintd</summary>
<description>
This update ships fprintd 1.94.4 to openSUSE Leap 16.0 and SLES Package Hub 16.0
</description>
<package>fprintd</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,129 @@
<patchinfo incident="packagehub-13">
<packager>os-autoinst-obs-workflow</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for openQA, os-autoinst</summary>
<description>This update for openQA, os-autoinst fixes the following issues:
Changes in openQA:
- Update to version 5.1761296552.ae7c17aa:
* Add tests for file_security_policy
* Pass parameter $is_userfile to log_url
* Remove redirect and serve files as attachments if necessary
* Serve files uploaded by tests via asset domain
* Use direct link to subdomain for the test assets
* Revert "Don't redirect to asset domain via /needles/ID/(image|json) route"
* Revert "Don't redirect screenshots, thumbs and needles to files_domain"
- Update to version 5.1761228068.a3a7f84d:
* Dependency cron 2025-10-23
- Update to version 5.1761037330.ad78558e:
* Avoid needless check for number of clones
* Avoid creation of `git_clone` tasks for jobs with empty `DISTRI`
- Update to version 5.1760515610.a802d1dd:
* Lower the prio of archiving jobs to avoid piling up finalize jobs
* Add signatures in Schema::Result::ApiKeys
- Update to version 5.1760245411.e3aeaaec:
* Dependency cron 2025-10-12
- Update to version 5.1760108577.fd2f2a48:
* Log unavailability due to high load only as warning
* Filter job stats of scheduled products also by arch and build
* Document how to disable image optimizations
* Make image optimization errors stop the job producing an incomplete job
* Improve wording in description about job stats API
* Run `optipng` for real and handle errors if it fails
- Update to version 5.1759912962.689b31ed:
* Avoid failing `obs_rsync_run` jobs when restarting `openqa-gru.service`
- Update to version 5.1759834744.06a7028a:
* parser: ktap: Return earlier if subtest result is SKIP
* parser: ktap: Fallback to subtest index if name is not available
- Update to version 5.1759440640.bb989cab:
* Don't redirect to asset domain via /needles/ID/(image|json) route
- Update to version 5.1759402042.49e912c3:
* Introduce array job settings
* Retry `obs_rsync_update_*` tasks if Gru service terminates
- Update to version 5.1759329378.3b8e8685:
* Reduce the number of required checks for Mergify again
* Ensure a failing cache service is seen as such by the worker/scheduler
- Update to version 5.1759248257.70b23b32:
* Increase number of successful checks in Mergify config again
* Disable Helm Chart CI checks temporarily
* Consider all jobs for cleanup, not just jobs that were executed
* Verify job deletion when dependent job present
- Update to version 5.1759149505.49c40b0b:
* Use always the latest PostgreSQL image in Compose and documentation
* Update the PostgreSQL version in the contributing documentation
* Update PostgreSQL data path in Docker Compose file after updating to v18
* Specify PostgreSQL version in Docker Compose configuration explicitly
* mergify: Allow more time for dependabot update reaction
* Remove version property from docker-compose
* README: Fix openQA badge after switch to UEFI
* build(deps-dev): bump eslint from 9.35.0 to 9.36.0
- Update to version 5.1758910696.7549bb98:
* Replace argument assignment with signatures on ObsRsync/Task
* Enable automatic dependabot updates again after improvements
* docs: Add instructions for a continuous dashboard setup
* Replace argument assignment with signatures Folders package
* Fully cover WebAPI::Plugin::ObsRsync::Controller::Folders
* script: Also use OPENQA_WEBUI_MODE for related services
- Update to version 5.1758814503.03d923a4:
* Use Mojo::File in Worker for is_qemu_running
* Use Mojo::File in Worker for meminfo
* Document archiving of important jobs
- Update to version 5.1758729450.b88c0b40:
* Reject jobs if worker is broken when receiving a new job
- Update to version 5.1758711845.e5c02221:
* script: Allow to configure openQA mode
* t: run at least once Memorylimit register with max_rss_limit &gt; 0
* Replace argument assignation with signatures on MemoryLimit
Changes in os-autoinst:
- Update to version 5.1761036042.c43e4ab:
* Update perltidy
* Allow redirects in needle NeedleDownloader
* Don't overwrite firewall xml
* Add UEFI support for ipxe kernel boot
* os-autoinst-setup-multi-machine: Simplify determine_ethernet_interface
- Update to version 5.1759328765.e7438f7:
* Allow redirects in needle NeedleDownloader
* Don't overwrite firewall xml
* Add UEFI support for ipxe kernel boot
* t: Use consistent Mojo::File in 08-autotest as well
* os-autoinst-setup-multi-machine: Simplify determine_ethernet_interface
- Update to version 5.1759134946.e08d7c7:
* Add UEFI support for ipxe kernel boot
* t: Use consistent Mojo::File in 08-autotest as well
* os-autoinst-setup-multi-machine: Simplify determine_ethernet_interface
* os-autoinst-setup-multi-machine: Only call zypper when necessary
* os-autoinst-setup-multi-machine: Improve network interface check
</description>
<package>openQA</package>
<package>openQA:openQA-devel-test</package>
<package>openQA:openQA-test</package>
<package>openQA:openQA-worker-test</package>
<package>openQA:openQA-client-test</package>
<package>os-autoinst</package>
<package>os-autoinst:os-autoinst-test</package>
<package>os-autoinst:os-autoinst-devel-test</package>
<package>os-autoinst:os-autoinst-openvswitch-test</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,28 @@
<patchinfo>
<packager>jsulig</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for amarok</summary>
<description>This update for amarok fixes the following issues:
Changes in amarok:
- Update to version 3.3.1
* Enable saving and loading script console items, autocompletion
in script console, and re-enable some more scripting functionality
* Convert the remaining main UI toolbuttons to use icons from theme
* Clear out remnants of the now-discontinued MusicDNS service
* Fix example permission grant command in database settings (kde#386004)
* Fix equalizer gains not updating when selecting some presets (kde#463908)
* Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
* Fix MusicBrainz search
* Properly start CD playback if Amarok is not already running (kde#503310)
* Also transmit embedded cover art through MPRIS (kde#357620)
* Don't show transcoding dialog after canceling download (kde#275840)
* Load network information earlier to avoid crashes on startup (kde#507497)
* Try to export as-compatible-as-possible playlist files (kde#507329)
* Fix some random crashes during playback
</description>
<package>amarok</package>
</patchinfo>

View File

@@ -0,0 +1,48 @@
<patchinfo incident="packagehub-10">
<issue tracker="cve" id="2025-10527">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="cve" id="2025-10536">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="cve" id="2025-10528">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="cve" id="2025-10537">Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="cve" id="2025-10529">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="cve" id="2025-10532">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="cve" id="2025-10533">This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 115.28, Firefox ESR &lt; 140.3, Thunderbird &lt; 143, and Thunderbird &lt; 140.3.</issue>
<issue tracker="bnc" id="1249391">VUL-0: MozillaFirefox / MozillaThunderbird: update to 143.0 and 140.3esr</issue>
<packager>Yoshio_Sato</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for MozillaThunderbird</summary>
<description>This update for MozillaThunderbird fixes the following issues:
Changes in MozillaThunderbird:
Mozilla Thunderbird 140.3.0 ESR:
* Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
draft subject
* Thunderbird could crash on startup
* Thunderbird could crash when importing mail
* Opening Website header link in RSS feed incorrectly re-encoded
URL parameters
MFSA 2025-78 (bsc#1249391)
* CVE-2025-10527
Sandbox escape due to use-after-free in the Graphics:
Canvas2D component
* CVE-2025-10528
Sandbox escape due to undefined behavior, invalid pointer in
the Graphics: Canvas2D component
* CVE-2025-10529
Same-origin policy bypass in the Layout component
* CVE-2025-10532
Incorrect boundary conditions in the JavaScript: GC component
* CVE-2025-10533
Integer overflow in the SVG component
* CVE-2025-10536
Information disclosure in the Networking: Cache component
* CVE-2025-10537
Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
ESR 140.3, Firefox 143 and Thunderbird 143
</description>
<package>MozillaThunderbird</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,56 @@
<patchinfo incident="packagehub-12">
<issue tracker="cve" id="2025-12441"/>
<issue tracker="cve" id="2025-12429"/>
<issue tracker="cve" id="2025-12431"/>
<issue tracker="cve" id="2025-12444"/>
<issue tracker="cve" id="2025-12428"/>
<issue tracker="cve" id="2025-12438"/>
<issue tracker="cve" id="2025-12435"/>
<issue tracker="cve" id="2025-12437"/>
<issue tracker="cve" id="2025-12443"/>
<issue tracker="cve" id="2025-12430"/>
<issue tracker="cve" id="2025-12440"/>
<issue tracker="cve" id="2025-12445"/>
<issue tracker="cve" id="2025-12446"/>
<issue tracker="cve" id="2025-12432"/>
<issue tracker="cve" id="2025-12436"/>
<issue tracker="cve" id="2025-12434"/>
<issue tracker="cve" id="2025-54874">VUL-0: CVE-2025-54874: TRACKERBUG: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of-bounds heap</issue>
<issue tracker="cve" id="2025-12433"/>
<issue tracker="bnc" id="1252881">VUL-0: chromium: release 142.0.7444.59</issue>
<issue tracker="cve" id="2025-12439"/>
<issue tracker="cve" id="2025-12447"/>
<packager>AndreasStieger</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Chromium 142.0.7444.59, the stable channel promotion of 142.
Security fixes (boo#1252881):
* CVE-2025-12428: Type Confusion in V8
* CVE-2025-12429: Inappropriate implementation in V8
* CVE-2025-12430: Object lifecycle issue in Media
* CVE-2025-12431: Inappropriate implementation in Extensions
* CVE-2025-12432: Race in V8
* CVE-2025-12433: Inappropriate implementation in V8
* CVE-2025-12434: Race in Storage
* CVE-2025-12435: Incorrect security UI in Omnibox
* CVE-2025-12436: Policy bypass in Extensions
* CVE-2025-12437: Use after free in PageInfo
* CVE-2025-12438: Use after free in Ozone
* CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
* CVE-2025-12440: Inappropriate implementation in Autofill
* CVE-2025-12441: Out of bounds read in V8
* CVE-2025-12443: Out of bounds read in WebXR
* CVE-2025-12444: Incorrect security UI in Fullscreen UI
* CVE-2025-12445: Policy bypass in Extensions
* CVE-2025-12446: Incorrect security UI in SplitView
* CVE-2025-12447: Incorrect security UI in Omnibox
</description>
<package>chromium</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,24 @@
<patchinfo incident="packagehub-14">
<packager>adrianSuSE</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for product-composer</summary>
<description>This update for product-composer fixes the following issues:
Update to version 0.6.16:
- merge updateinfo's with same id into one
- error out on updateinfo with same id, but non-mergable content
Update to version 0.6.15:
* Support updateinfo handling in arch specific meta data
Update to version 0.6.14:
* option to disable joliet extensions on media
* no joliet extensions on source and debug media anymore
</description>
<package>product-composer</package>
<seperate_build_arch/>
</patchinfo>

25698
patchinfo.ga/_patchinfo Normal file

File diff suppressed because it is too large Load Diff

View File

@@ -1,4 +1,10 @@
{
"ObsProject": "openSUSE:Backports:SLE-16.0",
"StagingProject": "openSUSE:Backports:SLE-16.0:PullRequest"
"StagingProject": "openSUSE:Backports:SLE-16.0:PullRequest",
"QA": [
{
"Name": "Leap",
"Origin": "openSUSE:Leap:16.0:Products"
},
]
}

2
virtme

Submodule virtme updated: e68023567f...547b3766fe

View File

@@ -1,23 +1,74 @@
{
"Workflows": ["pr"],
"GitProjectName": "products/PackageHub#leap-16.0",
"Organization": "pool",
"Branch": "leap-16.0",
"ManualMergeProject": true,
"Reviewers": [
"+legaldb",
"-autogits_obs_staging_bot",
"*packagehub-review"
],
"ReviewGroups": [
{
"Name": "packagehub-review",
"Reviewers": [
"bigironman",
"lkocman-factory",
"maxlin_factory",
"smithfarm"
]
}
]
"Workflows": ["pr"],
"GitProjectName": "products/PackageHub#leap-16.0",
"Organization": "pool",
"Branch": "leap-16.0",
"ManualMergeProject": true,
"NoProjectGitPR": true,
"Reviewers": [
"-maintenance-release-review",
"*opensuse-review",
"+legaldb",
"-autogits_obs_staging_bot",
"-qam-openqa-review"
],
"ReviewGroups": [
{
"Name": "maintenance-release-review",
"Reviewers": [
"abergmann",
"amattiazzo",
"bfilho",
"cmatos",
"crazybyte",
"emanuelecappello",
"gsonnu",
"maintenance-robot",
"mauriziogalli",
"mbozicevic",
"mimi_vx",
"mschnitzer",
"msmeissn",
"pluskalm",
"rfrohl",
"slemke"
],
"Silent": true
},
{
"Name": "opensuse-review",
"Reviewers": [
"alarrosa",
"anag",
"atartamo",
"bigironman",
"darix",
"dimstar",
"dmach",
"eroca",
"jdsn",
"jengelh",
"mcalabkova",
"mstrigl",
"nkrapp",
"oertel",
"RBrownSUSE",
"simotek",
"smithfarm"
],
"Silent": true
},
{
"Name": "qam-openqa-review",
"Reviewers": [
"mimi_vx",
"mschnitzer",
"msmeissn",
"openqa-maintenance",
"foursixnine-openqa",
"szarate"
],
"Silent": true
}
]
}