1
0

Compare commits

..

6 Commits

Author SHA256 Message Date
AutoGits PR Review Bot
fcd84cdd9e auto-created for doomsday
This commit was autocreated by AutoGits PR Review Bot

referencing PRs:
 PR: pool/doomsday!1
2026-01-26 20:38:32 +00:00
AutoGits PR Review Bot
1f3dfccb23 auto-created for doomsday
This commit was autocreated by AutoGits PR Review Bot

referencing PRs:
 PR: pool/doomsday!1
2026-01-26 20:34:29 +00:00
7bcb6af772 Add doomsday 2026-01-26 20:57:47 +01:00
ce46c687b7 Update patchinfo incident numbers [skip actions] 2026-01-20 23:32:38 +00:00
AutoGits PR Review Bot
913979831f Merging
PR: products/PackageHub!338
2026-01-20 23:32:15 +00:00
201936805e Update submodules from pool/python-weasyprint#1 and create patchinfo.20260120143234408409.93181000773252/_patchinfo 2026-01-20 15:33:11 +01:00
7 changed files with 34 additions and 61 deletions

4
.gitmodules vendored
View File

@@ -26242,3 +26242,7 @@
path = openQA-devel-container
url = ../../pool/openQA-devel-container
branch = leap-16.0
[submodule "doomsday"]
path = doomsday
url = ../../pool/doomsday
branch = leap-16.0

1
doomsday Submodule

Submodule doomsday added at f0e517b74f

View File

@@ -0,0 +1,15 @@
<patchinfo incident="packagehub-86">
<issue tracker="cve" id="2025-68616">VUL-0: CVE-2025-68616: python-weasyprint: server-side request forgery (SSRF) protection bypass via HTTP redirects allows access to internal network resources</issue>
<issue tracker="bnc" id="1256936">VUL-0: CVE-2025-68616: python-weasyprint: server-side request forgery (SSRF) protection bypass via HTTP redirects allows access to internal network resources</issue>
<packager>dgarcia</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for python-weasyprint</summary>
<description>This update for python-weasyprint fixes the following issues:
Changes in python-weasyprint:
- CVE-2025-68616: Fixed a server-side request forgery in default fetcher (boo#1256936).
</description>
<package>python-weasyprint</package>
</patchinfo>

View File

@@ -1,59 +0,0 @@
<patchinfo>
<packager>dimstar</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for vlc</summary>
<description>This update for vlc fixes the following issues:
Changes in vlc:
- Update to version 3.0.23:
+ Codecs:
* Fix WebVTT line positioning
* Expose additional audio codec information (notably for Flac 24bit)
+ Demuxers:
* fix some JPEG files wih JFIF headers
+ Security:
* Fix null deref in libass, undefined shift in theora and cc-708, integer overflow in daala,
Infinite loop in h264 parsing, buffer overflow in png and multiple format-overflows
+ Misc:
* Prepare compatibility for taglib 2.0, Qt6, FFmpeg8, mingw-w64 v13 and newer versions of
libplacebo and pupnp
- Update to version 3.0.22:
+ Core: Assume subpictures are in SDR by default
+ Decoders:
* Fix Opus channel mapping
* Fix hardware decoding with VideoToolbox of XVID MPEG-4 video
* Add dav1d-all-layers option
* Fix DVD CEA-608 captions parsing
* Fix ProRes 4:4:4:4
* Disable decoding using libdca, libmpeg2 and liba52 by default in favor of libavcodec
+ Demuxers:
* Add support for DMX audio music (MUS) files
* Handle mkv-use-chapter-codec option
* Add A_ATRAC/AT1 support in matroska
* Prevent FLAC seeking logic get stuck
* Handle pictures in FLAC
* Fix VOB/AOB LPCM/MLP detection failing occasionally
* Cut QNap title on first invalid character
* Fix display of certain JPEG files
* Fix playback of very short ASF files (duration less than 1s)
* Multiple fixes in MPEG-TS
* Fix crashes in multiple demuxers (reported by rub.de, oss-fuzz and others)
+ Input: Fix SFTP seeking for large files on 32-bit OS
+ Interface:
* Qt: Add option to use dark palette
* Qt: Add compilation support for newer versions of Qt5
* Qt: Fix scrolling on volume slider
* KDE: fix MPRIS state when started from file
+ Service Discovery: UPnP: remove SAT&gt;IP channel list fallback
+ Video Output:
* Use a better stretch mode in wingdi
* Fetch missing device information when running in UWP
+ Video Filter:
* Add AMD GPU Frame Rate Doubler (Direct3D11)
* Improve visualization of low frequencies in spectrogram
</description>
<package>vlc</package>
</patchinfo>

View File

@@ -0,0 +1,12 @@
<patchinfo>
<packager>eroca</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for doomsday</summary>
<description>This update for doomsday fixes the following issues:
Introduces doomsday.
</description>
<package>doomsday</package>
</patchinfo>

2
vlc

Submodule vlc updated: d235eba065...cc43f90749