1
0

Compare commits

..

1 Commits

3 changed files with 19 additions and 5 deletions

View File

@@ -1,10 +1,9 @@
# Use this as .gitea/workflows/patchinfo_numberator.yaml in all products/* repos
name: Patchinfo incident numbering
on:
workflow_dispatch:
push:
branches:
- 'leap-*'
workflow_dispatch:
env:
REPO_PATH: /workspace/${{ gitea.repository }}
@@ -19,7 +18,7 @@ jobs:
run: |
test -n "${{ env.REPO_PATH }}" && rm -rfv "${{ env.REPO_PATH }}"/*
git config --global --add safe.directory ${{ env.REPO_PATH }}
git clone -b ${{ gitea.ref_name }} --single-branch ${{ env.REPO_URL }} ${{ env.REPO_PATH }}
git clone ${{ env.REPO_URL }} ${{ env.REPO_PATH }}
- name: Update all new _patchinfo files
uses: https://src.opensuse.org/actions/patchinfo-numbering-action@v0

View File

@@ -0,0 +1,15 @@
<patchinfo>
<issue tracker="bnc" id="1259154">VUL-0: CVE-2026-27932: python-joserfc: unbounded PBKDF2 iteration count can lead to a denial of service</issue>
<issue tracker="cve" id="2026-27932"/>
<packager>nkrapp</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for python-joserfc</summary>
<description>This update for python-joserfc fixes the following issues:
Changes in python-joserfc:
- CVE-2026-27932: unbounded PBKDF2 iteration count can lead to a denial of service (bsc#1259154)
</description>
<package>python-joserfc</package>
</patchinfo>