--17594059335.A0051Da12.13567
Date: Thu, 2 Oct 2025 11:52:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250893

            Bug ID: 1250893
           Summary: AUDIT-WHITELIST: systemd: v258 systemd-machined D-Bus&/Polkit changes
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: matthias.gerstner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: fbui-at-suse.com, security-team-at-suse.de
            Blocks: 1247556
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1247556

Split-off bug to help better tracking the whitelisting changes.

This is for systemd-machined where we found the local root exploit in the
register-machine method. This has been fixed by now.

This daemon only triggers the following rpmlint warning:

systemd-container.x86_64: E: polkit-untracked-privilege (Badness: 10)
org.freedesktop.machine1.register-machine
(auth_admin:auth_admin:auth_admin_keep)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17594059335.A0051Da12.13567
Date: Thu, 2 Oct 2025 11:52:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250893

          Summary
          AUDIT-WHITELIST: systemd: v258 systemd-machined D-Bus&/Po=
lkit changes

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          matthias.gerstner@suse.com

          Reporter
          matthias.gerstner@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          fbui@suse.com, security-team@suse.de

          Blocks
          1247556

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1247556

Split-off bug to help better tracking the whitelisting changes.

This is for systemd-machined where we found the local root exploit in the
register-machine method. This has been fixed by now.

This daemon only triggers the following rpmlint warning:

systemd-container.x86_64: E: polkit-untracked-privilege (Badness: 10)
org.freedesktop.machine1.register-machine
(auth_admin:auth_admin:auth_admin_keep)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17594059335.A0051Da12.13567--


--17594059692.b6abC62.13573
Date: Thu, 2 Oct 2025 11:52:49 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250894

            Bug ID: 1250894
           Summary: [Build 20251001] openQA test fails in network_bonding
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5357723/modules/netw
                    ork_bonding/steps/562
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-x86_64-microos_bonding_ping@uefi fails in
[network_bonding](https://openqa.opensuse.org/tests/5357723/modules/network=
_bonding/steps/562)

## Test suite description
Maintainer: Volodymyr Katkalov <volodymyr.katkalov-at-suse.com>

## Reproducible

Fails since (at least) Build
[20251001](https://openqa.opensuse.org/tests/5356435)

## Expected result

Last good: [20250930](https://openqa.opensuse.org/tests/5354888) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dmi=
croos&flavor=3DMicroOS-Image&machine=3Duefi&test=3Dmicroos_bonding_ping&ver=
sion=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17594059692.b6abC62.13573
Date: Thu, 2 Oct 2025 11:52:49 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250894

          Summary
          [Build 20251001] openQA test fails in network_bonding

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5357723/modules/network_bon=
ding/steps/562

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-x86_64-microos_bonding_ping@uefi fails=
 in
[network_bonding](https://openqa.opensuse.org/tests/5357723/mo=
dules/network_bonding/steps/562)

## Test suite description
Maintainer: Volodymyr Katkalov <volodymyr.katkalov@suse.com>

## Reproducible

Fails since (at least) Build
[20251001](https://op=
enqa.opensuse.org/tests/5356435)

## Expected result

Last good: [20250930](https://openqa.opensuse.org/tests/5354888) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.o=
rg/tests/latest?arch=3Dx86_64&distri=3Dmicroos&flavor=3DMicroOS-Ima=
ge&machine=3Duefi&test=3Dmicroos_bonding_ping&version=3DTumblew=
eed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17594059692.b6abC62.13573--


--17594128684.e11cAFfD2.14119
Date: Thu, 2 Oct 2025 13:47:48 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250946

            Bug ID: 1250946
           Summary: kernel-source 6.17.0 does not build without debug
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: jslaby-at-suse.com
          Reporter: bwiedemann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kernel-bugs-at-opensuse.org
  Target Milestone: ---
          Found By: Development
           Blocker: ---

While working on reproducible builds for openSUSE, I found that
our kernel-source package started to fail=20
with SR 1308292 that brought 6.17.0

This was still working with previous 6.16.x kernels.

Steps to Reproduce:
osc co openSUSE:Factory/kernel-source && cd $_
osc build  --disable-debuginfo -M=3Dkernel-default --vm-type=3Dkvm --noserv=
ice
standard

Actual Results:
[   22s] Changes after running `make oldconfig':
[   22s] -# CONFIG_CFI_CLANG is not set
[   22s] -# CONFIG_DEBUG_INFO is not set
[   22s] -# CONFIG_DEBUG_INFO_COMPRESSED_ZLIB is not set
[   22s] -# CONFIG_DEBUG_INFO_COMPRESSED_ZSTD is not set
[   22s] -# CONFIG_DEBUG_INFO_REDUCED is not set
[   22s] -# CONFIG_DEBUG_INFO_SPLIT is not set
[   22s] -# CONFIG_GCC_PLUGIN_LATENT_ENTROPY is not set
[   22s] -# CONFIG_GCC_PLUGIN_STACKLEAK is not set
[   22s] -# CONFIG_GDB_SCRIPTS is not set
[   22s] -# CONFIG_GENDWARFKSYMS is not set
[   22s] -# CONFIG_KSTACK_ERASE is not set
[   22s] -# CONFIG_RANDSTRUCT_FULL is not set
[   22s] -# CONFIG_RANDSTRUCT_PERFORMANCE is not set
[   22s] +# CONFIG_SCHED_PROXY_EXEC is not set
[   22s] -# CONFIG_SUSE_HAVE_STABLE_KABI is not set
[   22s] -CONFIG_DEBUG_INFO_BTF=3Dy=20=20
[   22s] -CONFIG_DEBUG_INFO_BTF_MODULES=3Dy
[   22s] -CONFIG_DEBUG_INFO_COMPRESSED_NONE=3Dy
[   22s] -CONFIG_EXT_GROUP_SCHED=3Dy=20
[   22s] -CONFIG_FUNCTION_TRACE_ARGS=3Dy
[   22s] -CONFIG_GCC_PLUGINS=3Dy
[   22s] -CONFIG_HAVE_CFI_ICALL_NORMALIZE_INTEGERS_CLANG=3Dy
[   22s] -CONFIG_NET_SCH_BPF=3Dy
[   22s] -CONFIG_PROBE_EVENTS_BTF_ARGS=3Dy
[   22s] -CONFIG_SCHED_CLASS_EXT=3Dy
[   22s]
[   22s] error: Bad exit status from /var/tmp/rpm-tmp.duOPRo (%prep)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17594128684.e11cAFfD2.14119
Date: Thu, 2 Oct 2025 13:47:48 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250946

          Summary
          kernel-source 6.17.0 does not build without debug

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          All

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          jslaby@suse.com

          Reporter
          bwiedemann@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          kernel-bugs@opensuse.org

          Target Milestone
          ---

          Found By
          Development

          Blocker
          ---

While working on reproducible builds for openSUSE, I found t=
hat
our kernel-source package started to fail=20
with SR 1308292 that brought 6.17.0

This was still working with previous 6.16.x kernels.

Steps to Reproduce:
osc co openSUSE:Factory/kernel-source && cd $_
osc build  --disable-debuginfo -M=3Dkernel-default --vm-type=3Dkvm --noserv=
ice
standard

Actual Results:
[   22s] Changes after running `make oldconfig':
[   22s] -# CONFIG_CFI_CLANG is not set
[   22s] -# CONFIG_DEBUG_INFO is not set
[   22s] -# CONFIG_DEBUG_INFO_COMPRESSED_ZLIB is not set
[   22s] -# CONFIG_DEBUG_INFO_COMPRESSED_ZSTD is not set
[   22s] -# CONFIG_DEBUG_INFO_REDUCED is not set
[   22s] -# CONFIG_DEBUG_INFO_SPLIT is not set
[   22s] -# CONFIG_GCC_PLUGIN_LATENT_ENTROPY is not set
[   22s] -# CONFIG_GCC_PLUGIN_STACKLEAK is not set
[   22s] -# CONFIG_GDB_SCRIPTS is not set
[   22s] -# CONFIG_GENDWARFKSYMS is not set
[   22s] -# CONFIG_KSTACK_ERASE is not set
[   22s] -# CONFIG_RANDSTRUCT_FULL is not set
[   22s] -# CONFIG_RANDSTRUCT_PERFORMANCE is not set
[   22s] +# CONFIG_SCHED_PROXY_EXEC is not set
[   22s] -# CONFIG_SUSE_HAVE_STABLE_KABI is not set
[   22s] -CONFIG_DEBUG_INFO_BTF=3Dy=20=20
[   22s] -CONFIG_DEBUG_INFO_BTF_MODULES=3Dy
[   22s] -CONFIG_DEBUG_INFO_COMPRESSED_NONE=3Dy
[   22s] -CONFIG_EXT_GROUP_SCHED=3Dy=20
[   22s] -CONFIG_FUNCTION_TRACE_ARGS=3Dy
[   22s] -CONFIG_GCC_PLUGINS=3Dy
[   22s] -CONFIG_HAVE_CFI_ICALL_NORMALIZE_INTEGERS_CLANG=3Dy
[   22s] -CONFIG_NET_SCH_BPF=3Dy
[   22s] -CONFIG_PROBE_EVENTS_BTF_ARGS=3Dy
[   22s] -CONFIG_SCHED_CLASS_EXT=3Dy
[   22s]
[   22s] error: Bad exit status from /var/tmp/rpm-tmp.duOPRo (%prep)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17594128684.e11cAFfD2.14119--


--17594898910.7679e0D.15438
Date: Fri, 3 Oct 2025 11:11:30 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250974

            Bug ID: 1250974
           Summary: using /bin/alts for /bin/ksh symlink breaks logging in
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: ek-at-research.att.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

it looks like /bin/alts is used for the /bin/ksh symlink on tumbleweed (and
slowroll).
that causes a 'Permission denied' when trying to login into the system.
I think it's because the security context isn't right for a shell:

# ls -Zl /bin/ksh
lrwxrwxrwx. 1 root root system_u:object_r:bin_t:s0 4 Sep 24 14:21 /bin/ksh =
->
alts
# ls -ZlL /bin/alts
-rwxr-xr-x. 1 root root system_u:object_r:alts_exec_t:s0 22632 Mar 28  2025
/bin/alts

while /bin/bash is just the real binary and has shell_exec_t:

# ls -Zl /bin/bash
-rwxr-xr-x. 1 root root system_u:object_r:shell_exec_t:s0 941256 Aug  1 09:=
00
/bin/bash

to reproduce, set up a user (ek in the command below) with /bin/ksh as its
shell and try to log in.

# su - ek
su: failed to execute /bin/ksh: Permission denied

tracing it shows that it gets an EACCES error

# strace -f -o /tmp/root su - ek=20
su: failed to execute /bin/ksh: Permission denied

...
206295 execve("/bin/ksh", ["-ksh"], 0x55f570cd61d0 /* 6 vars */) =3D -1 EAC=
CES
(Permission denied)
...
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17594898910.7679e0D.15438
Date: Fri, 3 Oct 2025 11:11:31 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250974

          Summary
          using /bin/alts for /bin/ksh symlink breaks logging in

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          ek@research.att.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

it looks like /bin/alts is used for the /bin/ksh symlink on =
tumbleweed (and
slowroll).
that causes a 'Permission denied' when trying to login into the system.
I think it's because the security context isn't right for a shell:

# ls -Zl /bin/ksh
lrwxrwxrwx. 1 root root system_u:object_r:bin_t:s0 4 Sep 24 14:21 /bin/ksh =
->
alts
# ls -ZlL /bin/alts
-rwxr-xr-x. 1 root root system_u:object_r:alts_exec_t:s0 22632 Mar 28  2025
/bin/alts

while /bin/bash is just the real binary and has shell_exec_t:

# ls -Zl /bin/bash
-rwxr-xr-x. 1 root root system_u:object_r:shell_exec_t:s0 941256 Aug  1 09:=
00
/bin/bash

to reproduce, set up a user (ek in the command below) with /bin/ksh as its
shell and try to log in.

# su - ek
su: failed to execute /bin/ksh: Permission denied

tracing it shows that it gets an EACCES error

# strace -f -o /tmp/root su - ek=20
su: failed to execute /bin/ksh: Permission denied

...
206295 execve("/bin/ksh", ["-ksh"], 0x55f570cd61d0 /* 6=
 vars */) =3D -1 EACCES
(Permission denied)
...

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17594898910.7679e0D.15438--


--17595235810.a4fea3efC.16226
Date: Fri, 3 Oct 2025 20:33:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1250995

            Bug ID: 1250995
           Summary: VUL-0: CVE-2025-49844,CVE-2025-46817,CVE-2025-46818,CVE-2025- 46819: valkey: multiple LUA issues
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: antonio.teixeira-at-suse.com
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: antonio.teixeira-at-suse.com, danilo.spinella-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://github.com/valkey-io/valkey/releases/tag/7.2.11
https://github.com/valkey-io/valkey/releases/tag/8.1.4

Security fixes

    (CVE-2025-49844) A Lua script may lead to remote code execution
    (CVE-2025-46817) A Lua script may lead to integer overflow and potential
RCE
    (CVE-2025-46818) A Lua script can be executed in the context of another
user
    (CVE-2025-46819) LUA out-of-bound read
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17595235810.a4fea3efC.16226
Date: Fri, 3 Oct 2025 20:33:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1250995

          Summary
          VUL-0: CVE-2025-49844,CVE-2025-46817,CVE-2025-46818,CVE-2025-=
46819: valkey: multiple LUA issues

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          antonio.teixeira@suse.com

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          security-team@suse.de

          CC
          antonio.teixeira@suse.com, danilo.spinella@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://github.com/valkey-io/valkey/releases/tag/7.2.11
https://=
github.com/valkey-io/valkey/releases/tag/8.1.4

Security fixes

    (CVE-2025-49844) A Lua script may lead to remote code execution
    (CVE-2025-46817) A Lua script may lead to integer overflow and potential
RCE
    (CVE-2025-46818) A Lua script can be executed in the context of another
user
    (CVE-2025-46819) LUA out-of-bound read

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17595235810.a4fea3efC.16226--


--17597415354.5feb9Da40.17577
Date: Mon, 6 Oct 2025 09:05:35 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251048

            Bug ID: 1251048
           Summary: Archiving:Backup/borgbackup test_directory_timestamps2 sometimes fails with ENOTTY
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

According to the job history, it looks like this was introduced with kernel
6.17 in factory (starting 1 Oct).

The test just creates a file and tries to ioctl(FS_IOC_SETFLAGS, FS_NODUMP_=
FL)
on it. And that _sometimes_ fails:
> 2782  newfstatat(AT_FDCWD, "/tmp/tmpwsa22bk4/input", {st_mode=3DS_IFDIR|0=
777, st_size=3D4096, ...}, 0) =3D 0
> 2782  openat(AT_FDCWD, "/tmp/tmpwsa22bk4/input/file3", O_WRONLY|O_CREAT|O=
_TRUNC|O_CLOEXEC, 0666) =3D 12
> 2782  fstat(12, {st_mode=3DS_IFREG|0600, st_size=3D0, ...}) =3D 0
> 2782  ioctl(12, TCGETS2, 0x7ffcdd3c9a20) =3D -1 ENOTTY (Inappropriate ioc=
tl for device)
> 2782  lseek(12, 0, SEEK_CUR)            =3D 0
> 2782  write(12, "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"..., 81920) =3D 81920
> 2782  close(12)                         =3D 0
> 2782  newfstatat(AT_FDCWD, "/tmp/tmpwsa22bk4/input/file3", {st_mode=3DS_I=
FREG|0600, st_size=3D81920, ...}, AT_SYMLINK_NOFOLLOW) =3D 0
> 2782  openat(AT_FDCWD, "/tmp/tmpwsa22bk4/input/file3", O_RDONLY|O_NONBLOC=
K|O_NOFOLLOW|O_CLOEXEC) =3D 12
> 2782  ioctl(12, FS_IOC_SETFLAGS, [FS_NODUMP_FL]) =3D -1 ENOTTY (Inappropr=
iate ioctl for device)
> 2782  close(12)                         =3D 0

Here it is 'file3', but it fails with 'flagfile' too. So it is really
transient. The test has to be run in parallel with others, otherwise it does
not happen.

The question is why the fs core returns an error in the first place?

Note the test machinery checks for 'if error_number !=3D errno.EOPNOTSUPP:'=
, but
EOPNOTSUPP is no longer returned, likely after:
commit 474b155adf3927d2c944423045757b54aa1ca4de
Author: Andrey Albershteyn <aalbersh-at-redhat.com>
Date:   Mon Jun 30 18:20:14 2025 +0200

    fs: make vfs_fileattr_[get|set] return -EOPNOTSUPP

Is that another bug?
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17597415354.5feb9Da40.17577
Date: Mon, 6 Oct 2025 09:05:35 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251048

          Summary
          Archiving:Backup/borgbackup test_directory_timestamps2 someti=
mes fails with ENOTTY

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          jslaby@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

According to the job history, it looks like this was introdu=
ced with kernel
6.17 in factory (starting 1 Oct).

The test just creates a file and tries to ioctl(FS_IOC_SETFLAGS, FS_NODUMP_=
FL)
on it. And that _sometimes_ fails:
> 2782  newfstatat(AT_FDCWD, "/tmp/tmpwsa22bk=
4/input", {st_mode=3DS_IFDIR|0777, st_size=3D4096, ...}, 0) =3D 0
> 2782  openat(AT_FDCWD, "/tmp/tmpwsa22bk4/input/file3", O_WRO=
NLY|O_CREAT|O_TRUNC|O_CLOEXEC, 0666) =3D 12
> 2782  fstat(12, {st_mode=3DS_IFREG|0600, st_size=3D0, ...}) =3D 0
> 2782  ioctl(12, TCGETS2, 0x7ffcdd3c9a20) =3D -1 ENOTTY (Inappropriate =
ioctl for device)
> 2782  lseek(12, 0, SEEK_CUR)            =3D 0
> 2782  write(12, "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"..., 81920=
) =3D 81920
> 2782  close(12)                         =3D 0
> 2782  newfstatat(AT_FDCWD, "/tmp/tmpwsa22bk4/input/file3", {=
st_mode=3DS_IFREG|0600, st_size=3D81920, ...}, AT_SYMLINK_NOFOLLOW) =3D 0
> 2782  openat(AT_FDCWD, "/tmp/tmpwsa22bk4/input/file3", O_RDO=
NLY|O_NONBLOCK|O_NOFOLLOW|O_CLOEXEC) =3D 12
> 2782  ioctl(12, FS_IOC_SETFLAGS, [FS_NODUMP_FL]) =3D -1 ENOTTY (Inappr=
opriate ioctl for device)
> 2782  close(12)                         =3D 0

Here it is 'file3', but it fails with 'flagfile' too. So it is really
transient. The test has to be run in parallel with others, otherwise it does
not happen.

The question is why the fs core returns an error in the first place?

Note the test machinery checks for 'if error_number !=3D errno.EOPNOTSUPP:'=
, but
EOPNOTSUPP is no longer returned, likely after:
commit 474b155adf3927d2c944423045757b54aa1ca4de
Author: Andrey Albershteyn <a=
albersh@redhat.com>
Date:   Mon Jun 30 18:20:14 2025 +0200

    fs: make vfs_fileattr_[get|set] return -EOPNOTSUPP

Is that another bug?

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17597415354.5feb9Da40.17577--


body:
--17598285081.2bb64Dc0.19979
Date: Tue, 7 Oct 2025 09:15:08 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251213

            Bug ID: 1251213
           Summary: gdb terminated by signal SIGSEGV
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: matwey.kornilov-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hello,

I am running Leap 16.0 with gdb-16.3-160000.2.2.x86_64
And I found that it crashes while loading a core dump.

The issue is reproduced as the following:

> gdb rs_scope core.rs_scope.477.a000174ff328485d858d981f1e78347a.1037.1759=
284219000000
GNU gdb (GDB; SUSE Linux 16) 16.3
Copyright (C) 2024 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.htm=
l>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-suse-linux".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://bugs.opensuse.org/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from rs_scope...
(No debugging symbols found in rs_scope)

warning: Can't open file /lib/ld-2.26.so during file-backed mapping note
processing

warning: Can't open file /usr/lib/libstdc++.so.6.0.28 during file-backed
mapping note processing

warning: Can't open file /lib/libm-2.26.so during file-backed mapping note
processing

warning: Can't open file /lib/libgcc_s.so.1 during file-backed mapping note
processing

warning: Can't open file /lib/libpthread-2.26.so during file-backed mapping
note processing

warning: Can't open file /lib/libc-2.26.so during file-backed mapping note
processing

warning: Can't open file /dev/video0 during file-backed mapping note proces=
sing

warning: exec file is newer than core file.

Fatal signal: Segmentation fault
---

summary: gdb terminated by signal SIGSEGV


--17598425120.E9f5Eda8d.21341
Date: Tue, 7 Oct 2025 13:08:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251231

            Bug ID: 1251231
           Summary: VUL-0:  CVE-2025-61672: matrix-synapse: lack of validation for device keys allows registered attacker to break outbound federation to other homeservers
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mrueckert-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Lack of validation for device keys in Synapse before 1.139.1 allows an atta=
cker
registered on the victim homeserver to degrade federation functionality,
unpredictably breaking outbound federation to other homeservers.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17598425120.E9f5Eda8d.21341
Date: Tue, 7 Oct 2025 13:08:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251231

          Summary
          VUL-0:  CVE-2025-61672: matrix-synapse: lack of validation fo=
r device keys allows registered attacker to break outbound federation to ot=
her homeservers

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          mrueckert@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Lack of validation for device keys in Synapse before 1.139.1=
 allows an attacker
registered on the victim homeserver to degrade federation functionality,
unpredictably breaking outbound federation to other homeservers.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17598425120.E9f5Eda8d.21341--


body:
--17599252015.c8Ff4dF4B.25552
Date: Wed, 8 Oct 2025 12:06:41 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251334

            Bug ID: 1251334
           Summary: VUL-0: chromium: release 141.0.7390.65
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: security-team-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in 141.0.7390.65:

CVE-2025-11458: Heap buffer overflow in Sync
CVE-2025-11460: Use after free in Storage
CVE-2025-11211: Out of bounds read in WebCodecs

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-des=
ktop.html

Note that CVE-2025-11211 is already mentioned in bug 1250780
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599252015.c8Ff4dF4B.25552
Date: Wed, 8 Oct 2025 12:06:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251334

          Summary
          VUL-0: chromium: release 141.0.7390.65

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          security-team@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in 141.0.7390.65:

CVE-2025-11458: Heap buffer overflow in Sync
CVE-2025-11460: Use after free in Storage
CVE-2025-11211: Out of bounds read in WebCodecs

https://chromereleases.googleblog.com/2025/10/stable-=
channel-update-for-desktop.html

Note that CVE-2025-11211 is already mentioned in bug 1250780

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599252015.c8Ff4dF4B.25552--

summary: VUL-0: chromium: release 141.0.7390.65


--17599279386.f4F12E.25693
Date: Wed, 8 Oct 2025 12:52:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251404

            Bug ID: 1251404
           Summary: VUL-0: CVE-2025-47911: v2ray-core: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476312/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: hillwoodroc-at-gmail.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251308
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilities in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue https://go.dev/issue/75682.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599279386.f4F12E.25693
Date: Wed, 8 Oct 2025 12:52:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251404

          Summary
          VUL-0: CVE-2025-47911: v2ray-core: golang.org/x/net/html: var=
ious algorithms with quadratic complexity when parsing HTML documents

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476312/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          hillwoodroc@gmail.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251308

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilitie=
s in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue =
https://go.dev/issue/75682.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599279386.f4F12E.25693--


--17599280191.30c3f8.25723
Date: Wed, 8 Oct 2025 12:53:39 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251461

            Bug ID: 1251461
           Summary: VUL-0: CVE-2025-47911: go-sendxmpp: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476312/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mvetter-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251308
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilities in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue https://go.dev/issue/75682.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599280191.30c3f8.25723
Date: Wed, 8 Oct 2025 12:53:39 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251461

          Summary
          VUL-0: CVE-2025-47911: go-sendxmpp: golang.org/x/net/html: va=
rious algorithms with quadratic complexity when parsing HTML documents

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476312/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          mvetter@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251308

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilitie=
s in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue =
https://go.dev/issue/75682.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599280191.30c3f8.25723--


--17599280186.9f36.25723
Date: Wed, 8 Oct 2025 12:53:38 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251463

            Bug ID: 1251463
           Summary: VUL-0: CVE-2025-47911: git-bug: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476312/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251308
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilities in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue https://go.dev/issue/75682.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599280186.9f36.25723
Date: Wed, 8 Oct 2025 12:53:38 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251463

          Summary
          VUL-0: CVE-2025-47911: git-bug: golang.org/x/net/html: variou=
s algorithms with quadratic complexity when parsing HTML documents

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476312/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          mcepl@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251308

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilitie=
s in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue =
https://go.dev/issue/75682.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599280186.9f36.25723--


--17599280351.ECCA.25729
Date: Wed, 8 Oct 2025 12:53:55 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251472

            Bug ID: 1251472
           Summary: VUL-0: CVE-2025-47911: forgejo-longterm: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476312/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: rrahl0-at-opensuse.org
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251308
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilities in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue https://go.dev/issue/75682.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599280351.ECCA.25729
Date: Wed, 8 Oct 2025 12:53:55 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251472

          Summary
          VUL-0: CVE-2025-47911: forgejo-longterm: golang.org/x/net/htm=
l: various algorithms with quadratic complexity when parsing HTML documents

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476312/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          rrahl0@opensuse.org

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251308

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilitie=
s in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue =
https://go.dev/issue/75682.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599280351.ECCA.25729--


--17599281130.4e2e061.25753
Date: Wed, 8 Oct 2025 12:55:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251516

            Bug ID: 1251516
           Summary: VUL-0: CVE-2025-47911: hauler: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476312/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251308
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilities in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue https://go.dev/issue/75682.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599281130.4e2e061.25753
Date: Wed, 8 Oct 2025 12:55:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251516

          Summary
          VUL-0: CVE-2025-47911: hauler: golang.org/x/net/html: various=
 algorithms with quadratic complexity when parsing HTML documents

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476312/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-47911:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-47911:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251308

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes two vulnerabilitie=
s in the
golang.org/x/net/html package which could result in calls to Parse (and
associated functions) executing unexpectedly slowly relative to the size of=
 the
input or never returning when encountering specific inputs.

These vulnerabilities affect programs which parse untrusted HTML documents.

The parser implements the HTML specification, which contains a number of
algorithms which are quadratic in complexity by design. This causes the
processing time to scale non-linearly with respect to the size of the input=
 for
some HTML documents. We have imposed a depth limit of 512 for nested HTML t=
ags,
which should be high enough for the vast majority of valid HTML documents, =
to
address this.

Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently repor=
ting
this issue.

This is CVE-2025-47911 and Go issue =
https://go.dev/issue/75682.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599281130.4e2e061.25753--


--17599317072.f4aCf.25975
Date: Wed, 8 Oct 2025 13:55:07 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251664

            Bug ID: 1251664
           Summary: VUL-0: CVE-2025-58190: git-bug: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476313/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251309
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser misimplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue https://go.dev/issue/70179.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599317072.f4aCf.25975
Date: Wed, 8 Oct 2025 13:55:07 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-58190: git-bug: golang.org/x/net/html: ex=
cessive memory consumption by `html.ParseFragment` when processing speciall=
y crafted input"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1251664">1251664

          Summary
          VUL-0: CVE-2025-58190: git-bug: golang.org/x/net/html: excess=
ive memory consumption by `html.ParseFragment` when processing specially cr=
afted input

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476313/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          mcepl@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251309

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser mi=
simplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue =
https://go.dev/issue/70179.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599317072.f4aCf.25975--


--17599317155.df9616.25978
Date: Wed, 8 Oct 2025 13:55:15 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251668

            Bug ID: 1251668
           Summary: VUL-0: CVE-2025-58190: forgejo-longterm: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476313/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: rrahl0-at-opensuse.org
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251309
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser misimplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue https://go.dev/issue/70179.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599317155.df9616.25978
Date: Wed, 8 Oct 2025 13:55:15 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-58190: forgejo-longterm: golang.org/x/net=
/html: excessive memory consumption by `html.ParseFragment` when processing=
 specially crafted input"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1251668">1251668

          Summary
          VUL-0: CVE-2025-58190: forgejo-longterm: golang.org/x/net/htm=
l: excessive memory consumption by `html.ParseFragment` when processing spe=
cially crafted input

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476313/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          rrahl0@opensuse.org

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251309

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser mi=
simplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue =
https://go.dev/issue/70179.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599317155.df9616.25978--


--17599317134.d7336dCa3.25978
Date: Wed, 8 Oct 2025 13:55:13 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251677

            Bug ID: 1251677
           Summary: VUL-0: CVE-2025-58190: go-sendxmpp: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476313/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mvetter-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251309
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser misimplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue https://go.dev/issue/70179.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599317134.d7336dCa3.25978
Date: Wed, 8 Oct 2025 13:55:13 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-58190: go-sendxmpp: golang.org/x/net/html=
: excessive memory consumption by `html.ParseFragment` when processing spec=
ially crafted input"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1251677">1251677

          Summary
          VUL-0: CVE-2025-58190: go-sendxmpp: golang.org/x/net/html: ex=
cessive memory consumption by `html.ParseFragment` when processing speciall=
y crafted input

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476313/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          mvetter@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251309

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser mi=
simplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue =
https://go.dev/issue/70179.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599317134.d7336dCa3.25978--


--17599316812.F79b.25966
Date: Wed, 8 Oct 2025 13:54:41 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251651

            Bug ID: 1251651
           Summary: VUL-0: CVE-2025-58190: hauler: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/476313/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
                    CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI
                    :N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: security-team-at-suse.de
            Blocks: 1251309
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser misimplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue https://go.dev/issue/70179.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599316812.F79b.25966
Date: Wed, 8 Oct 2025 13:54:41 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          <a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - VUL-0: CVE-2025-58190: hauler: golang.org/x/net/html: exc=
essive memory consumption by `html.ParseFragment` when processing specially=
 crafted input"
   href=3D"https://bugzilla.suse.com/show_bug.cgi?id=3D1251651">1251651

          Summary
          VUL-0: CVE-2025-58190: hauler: golang.org/x/net/html: excessi=
ve memory consumption by `html.ParseFragment` when processing specially cra=
fted input

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/476313/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58190:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L) CVSSv4:SUSE:CVE-2025-58190:6.9:(AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:=
N/VA:L/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          security-team@suse.de

          Blocks
          1251309

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Version v0.45.0 of golang.org/x/net fixes the HTML parser mi=
simplementing a
portion of the HTML specification for table related tags. This could cause =
the
parser to enter an infinite loop when encountering specific combinations of
tags.

Thanks to Guido Vranken for reporting this issue.

This is CVE-2025-58190 and Go issue =
https://go.dev/issue/70179.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599316812.F79b.25966--


body:
--17599532820.3Ddf62Bda.26802
Date: Wed, 8 Oct 2025 19:54:42 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251789

            Bug ID: 1251789
           Summary: Subject [SELinux] virt-manager, kvm, qemu missing lots of selinux permissions
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: jmscdba-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 886192
  --> https://bugzilla.suse.com/attachment.cgi?id=3D886192&action=3Dedit
software versions

Summary

    Lots of selinux audit records are created when starting/stopping
    kvm virtual machines

    The are all allowed because ( permissive=3D1 ) the following types are
    running in permissive mode:

        virtqemud_t
        virtstoraged_t

    Can selinux be configured so that the appropriate permissions are allow=
ed
    and those types do not need to run in permissive mode so the system is =
more
    secure ?

Steps to Reproduce

    Note the vms are mostly linux distros and also a Win10 and Win11 vm

    Use virt-manager to
        Start all vms
        Open console window
        logon to the vm
        shutdown

    Review selinux audit log

TW build 20250826

Operating System: openSUSE Tumbleweed

sestatus

    SELinux status:                 enabled
    SELinuxfs mount:                /sys/fs/selinux
    SELinux root directory:         /etc/selinux
    Loaded policy name:             targeted
    Current mode:                   enforcing
    Mode from config file:          enforcing
    Policy MLS status:              enabled
    Policy deny_unknown status:     allowed
    Memory protection checking:     actual (secure)
    Max kernel policy version:      34

zypper info selinux-policy

    Information for package selinux-policy:
    ---------------------------------------
    Repository     : openSUSE-Tumbleweed-Oss (20250826)
    Name           : selinux-policy
    Version        : 20250812-1.1
    Arch           : noarch
    Vendor         : openSUSE
    Installed Size : 25.0 KiB
    Installed      : Yes (automatically)
    Status         : up-to-date
    Source package : selinux-policy-20250812-1.1.src
    Upstream URL   : https://github.com/openSUSE/selinux-policy
    Summary        : SELinux policy configuration
    Description    :
        A complete SELinux policy that can be used as the system policy for=
 a=20=20
        variety of systems and used as the basis for creating other policie=
s.

zypper search -s -i | grep -iE 'kvm|qemu|virt-manager'

    Output is attached as zypper.sw.versions.log

selinux audit log

    ausearch -ts boot -m avc,user_avc,selinux_err,user_selinux_err

    Output is attached as audit.log
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599532820.3Ddf62Bda.26802
Date: Wed, 8 Oct 2025 19:54:42 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251789

          Summary
          Subject [SELinux] virt-manager, kvm, qemu missing lots of sel=
inux permissions

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          jmscdba@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment 886192 [details]
software versions

Summary

    Lots of selinux audit records are created when starting/stopping
    kvm virtual machines

    The are all allowed because ( permissive=3D1 ) the following types are
    running in permissive mode:

        virtqemud_t
        virtstoraged_t

    Can selinux be configured so that the appropriate permissions are allow=
ed
    and those types do not need to run in permissive mode so the system is =
more
    secure ?

Steps to Reproduce

    Note the vms are mostly linux distros and also a Win10 and Win11 vm

    Use virt-manager to
        Start all vms
        Open console window
        logon to the vm
        shutdown

    Review selinux audit log

TW build 20250826

Operating System: openSUSE Tumbleweed

sestatus

    SELinux status:                 enabled
    SELinuxfs mount:                /sys/fs/selinux
    SELinux root directory:         /etc/selinux
    Loaded policy name:             targeted
    Current mode:                   enforcing
    Mode from config file:          enforcing
    Policy MLS status:              enabled
    Policy deny_unknown status:     allowed
    Memory protection checking:     actual (secure)
    Max kernel policy version:      34

zypper info selinux-policy

    Information for package selinux-policy:
    ---------------------------------------
    Repository     : openSUSE-Tumbleweed-Oss (20250826)
    Name           : selinux-policy
    Version        : 20250812-1.1
    Arch           : noarch
    Vendor         : openSUSE
    Installed Size : 25.0 KiB
    Installed      : Yes (automatically)
    Status         : up-to-date
    Source package : selinux-policy-20250812-1.1.src
    Upstream URL   : https://github.com/openSUSE/selinux-policy
    Summary        : SELinux policy configuration
    Description    :
        A complete SELinux policy that can be used as the system policy for=
 a=20=20
        variety of systems and used as the basis for creating other policie=
s.

zypper search -s -i | grep -iE 'kvm|qemu|virt-manager'

    Output is attached as zypper.sw.versions.log

selinux audit log

    ausearch -ts boot -m avc,user_avc,selinux_err,user_selinux_err

    Output is attached as audit.log

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599532820.3Ddf62Bda.26802--

pkgs: libvirt swtpm


--17599928980.Ba72.27240
Date: Thu, 9 Oct 2025 06:54:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251793

            Bug ID: 1251793
           Summary: [Build 20251008][SELinux] openQA test fails in setroubleshootd (00-grub)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5373450/modules/setr
                    oubleshootd/steps/16
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

openQA reports in one test:

Script:
sealert -l '*'

Check function (deparsed code):
{
    package setroubleshootd;
    no strict;
    /^$/;
}

Output:
SELinux is preventing 00-grub from execute access on the file
grub2-script-check.

That seems to correlate with the latest grub2 packaging change:
https://build.opensuse.org/package/rdiff/openSUSE:Factory/grub2?linkrev=3Db=
ase&rev=3D374

22-%{_libdir}/snapper/plugins/grub
23+%{_libdir}/snapper/plugins/00-grub

i.e that file used to be called 'grub' and is now called 00-grub

The issue itself manifests in other tests as the grub menu does not show
snapper snapshots, making this a critical bug (as it breaks snapper rollback
entirely)

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-selinux@uefi fails in
[setroubleshootd](https://openqa.opensuse.org/tests/5373450/modules/setroub=
leshootd/steps/16)

## Test suite description
Maintainer (Lily Zhao) llzhao-at-suse.com

## Reproducible

Fails since (at least) Build
[20251008](https://openqa.opensuse.org/tests/5373061)

## Expected result

Last good: [20251007](https://openqa.opensuse.org/tests/5370516) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3Duefi&test=3Dselinux&version=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17599928980.Ba72.27240
Date: Thu, 9 Oct 2025 06:54:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251793

          Summary
          [Build 20251008][SELinux] openQA test fails in setroubleshoot=
d (00-grub)

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5373450/modules/setroublesh=
ootd/steps/16

          OS
          Other

          Status
          NEW

          Severity
          Critical

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

openQA reports in one test:

Script:
sealert -l '*'

Check function (deparsed code):
{
    package setroubleshootd;
    no strict;
    /^$/;
}

Output:
SELinux is preventing 00-grub from execute access on the file
grub2-script-check.

That seems to correlate with the latest grub2 packaging change:
https://build.opensuse.org/package/rdiff/open=
SUSE:Factory/grub2?linkrev=3Dbase&rev=3D374

22-%{_libdir}/snapper/plugins/grub
23+%{_libdir}/snapper/plugins/00-grub

i.e that file used to be called 'grub' and is now called 00-grub

The issue itself manifests in other tests as the grub menu does not show
snapper snapshots, making this a critical bug (as it breaks snapper rollback
entirely)

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-selinux@uefi fai=
ls in
[setroubleshootd](https://openqa.opensuse.org/tests/5373450/mod=
ules/setroubleshootd/steps/16)

## Test suite description
Maintainer (Lily Zhao) llzhao@su=
se.com

## Reproducible

Fails since (at least) Build
[20251008](https://op=
enqa.opensuse.org/tests/5373061)

## Expected result

Last good: [20251007](https://openqa.opensuse.org/tests/5370516) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=
=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3Duefi&tes=
t=3Dselinux&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17599928980.Ba72.27240--


--17601082927.C292A2c.2857
Date: Fri, 10 Oct 2025 14:58:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1251862

            Bug ID: 1251862
           Summary: [Build 20251009][SELinux] openQA failure in snapper_thin_lvm
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5375886/modules/snap
                    per_thin_lvm/steps/53
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

This is likely related to bug#1251793 - or a continuation thereof
We had grub2 move the snapper plugin to /usr/lib/snapper/plugins/00-grub
which resulted in the above mentioned bug.

A selinux-policy update was submitted, that seems to have addressed many - =
but
not all the issues seen

e.g the snapper_thin_lvm test fails - with a lot of AVCs like:

type=3DAVC msg=3Daudit(1760094200.737:414): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=3D"devtmpfs" ino=3D=
316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:415): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=3D"devtmpfs" ino=3D=
316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:416): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=3D"devtmpfs" ino=3D=
316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:417): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=3D"devtmpfs" ino=3D=
316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:418): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=3D"devtmpfs" ino=3D=
316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:419): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=3D"devtmpfs" ino=3D=
316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
(see https://openqa.opensuse.org/tests/5375886#step/snapper_thin_lvm/53)

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_filesystem@uefi fails in
[snapper_thin_lvm](https://openqa.opensuse.org/tests/5375886/modules/snappe=
r_thin_lvm/steps/53)

## Test suite description
Maintainer: QE Core

Filesystem related tests, for example snapper and btrfs features.

## Reproducible

Fails since (at least) Build
[20251008](https://openqa.opensuse.org/tests/5372879)

## Expected result

Last good: [20251007](https://openqa.opensuse.org/tests/5370334) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3Duefi&test=3Dextra_tests_filesystem&version=3D=
Tumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17601082927.C292A2c.2857
Date: Fri, 10 Oct 2025 14:58:12 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1251862

          Summary
          [Build 20251009][SELinux] openQA failure in snapper_thin_lvm

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5375886/modules/snapper_thi=
n_lvm/steps/53

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

This is likely related to bug#1251793 - or a continuation t=
hereof
We had grub2 move the snapper plugin to /usr/lib/snapper/plugins/00-grub
which resulted in the above mentioned bug.

A selinux-policy update was submitted, that seems to have addressed many - =
but
not all the issues seen

e.g the snapper_thin_lvm test fails - with a lot of AVCs like:

type=3DAVC msg=3Daudit(1760094200.737:414): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=
=3D"devtmpfs" ino=3D316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:415): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=
=3D"devtmpfs" ino=3D316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:416): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=
=3D"devtmpfs" ino=3D316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:417): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=
=3D"devtmpfs" ino=3D316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:418): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=
=3D"devtmpfs" ino=3D316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
type=3DAVC msg=3Daudit(1760094200.738:419): avc:  denied  { getattr } for=20
pid=3D59238 comm=3D"grub2-probe" path=3D"/dev/vda2" dev=
=3D"devtmpfs" ino=3D316
scontext=3Dsystem_u:system_r:snapper_grub_plugin_t:s0
tcontext=3Dsystem_u:object_r:fixed_disk_device_t:s0 tclass=3Dblk_file permi=
ssive=3D0
(see https://openqa.opensuse.org/tests/5375886#step/snapper_thin_lvm/53=
)

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_filesystem@uefi fails in
[snapper_thin_lvm](https://openqa.opensuse.org/tests/5375886/m=
odules/snapper_thin_lvm/steps/53)

## Test suite description
Maintainer: QE Core

Filesystem related tests, for example snapper and btrfs features.

## Reproducible

Fails since (at least) Build
[20251008](https://op=
enqa.opensuse.org/tests/5372879)

## Expected result

Last good: [20251007](https://openqa.opensuse.org/tests/5370334) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/test=
s/latest?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=
=3Duefi&test=3Dextra_tests_filesystem&version=3DTumbleweed)</pr=
e>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17601082927.C292A2c.2857--