--17544009221.CAcd81.617
Date: Tue, 5 Aug 2025 13:35:22 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247640

            Bug ID: 1247640
           Summary: Xfce4 wayland session invokes amixer with non-existing device 'pulse'
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: tiwai-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The labwc configuration included in xfce4-session-wayland-experimental cont=
ains
the key binding for amixer invocation, but it invokes like
  amixer -D pulse sset Master 5%-
and this results in the breakage, because there is no "pulse" device defined
when the system is running with pipewire without alsa-plugin-pulse.

The straightforward fix would be just to run amixer without "-D xxx" option.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17544009221.CAcd81.617
Date: Tue, 5 Aug 2025 13:35:22 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247640

          Summary
          Xfce4 wayland session invokes amixer with non-existing device=
 'pulse'

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Xfce

          Assignee
          bnc-team-xfce@forge.provo.novell.com

          Reporter
          tiwai@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The labwc configuration included in xfce4-session-wayland-ex=
perimental contains
the key binding for amixer invocation, but it invokes like
  amixer -D pulse sset Master 5%-
and this results in the breakage, because there is no "pulse" dev=
ice defined
when the system is running with pipewire without alsa-plugin-pulse.

The straightforward fix would be just to run amixer without "-D xxx&qu=
ot; option.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17544009221.CAcd81.617--


--17544200102.a79CA69.1810
Date: Tue, 5 Aug 2025 18:53:30 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247661

            Bug ID: 1247661
           Summary: VUL-0: CVE-2025-54874: chromium: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of-bounds heap
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/466682/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: camila.matos-at-suse.com, security-team-at-suse.de
            Blocks: 1247649
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1247649 +++

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG 2.5.3 and earlier, a
call to opj_jp2_read_header may lead to OOB heap memory write when the data
stream p_stream is too short and p_image is not initialized.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-54874
https://www.cve.org/CVERecord?id=3DCVE-2025-54874
https://github.com/uclouvain/openjpeg/commit/f809b80c67717c152a5ad30bf06774=
f00da4fd2d
https://github.com/uclouvain/openjpeg/pull/1573
https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV
https://bugzilla.redhat.com/show_bug.cgi?id=3D2386543
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/54xxx/CVE-2025=
-54874.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17544200102.a79CA69.1810
Date: Tue, 5 Aug 2025 18:53:30 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247661

          Summary
          VUL-0: CVE-2025-54874: chromium: openjpeg: missing error chec=
k can lead to the use of an uninitialized pointer and cause an out-of-bound=
s heap

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/466682/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          camila.matos@suse.com, security-team@suse.de

          Blocks
          1247649

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1247649 +++

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG 2.5.3 and earlier, a
call to opj_jp2_read_header may lead to OOB heap memory write when the data
stream p_stream is too short and p_image is not initialized.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-54874
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-54874
https://github.com/uclouvain/openjpeg/commit/f809b80=
c67717c152a5ad30bf06774f00da4fd2d
https://github.=
com/uclouvain/openjpeg/pull/1573
=
https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2386543
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/54xxx/CVE-2025-54874.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17544200102.a79CA69.1810--


body:
--17544215130.a9aeD.1855
Date: Tue, 5 Aug 2025 19:18:33 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247664

            Bug ID: 1247664
           Summary: VUL-0: chromium: 139.0.7258.66
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Fixed in Chromium 139.0.7258.66=20

References:
https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-des=
ktop.html

CVE-2025-8576: Use after free in Extensions
CVE-2025-8577: Inappropriate implementation in Picture In Picture
CVE-2025-8578: Use after free in Cast
CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
CVE-2025-8580: Inappropriate implementation in Filesystems
CVE-2025-8581: Inappropriate implementation in Extensions
CVE-2025-8582: Insufficient validation of untrusted input in DOM
CVE-2025-8583: Inappropriate implementation in Permissions
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17544215130.a9aeD.1855
Date: Tue, 5 Aug 2025 19:18:33 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247664

          Summary
          VUL-0: chromium: 139.0.7258.66

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Fixed in Chromium 139.0.7258.66=20

References:
https://chromereleases.googleblog.com/2025/08/stable-=
channel-update-for-desktop.html

CVE-2025-8576: Use after free in Extensions
CVE-2025-8577: Inappropriate implementation in Picture In Picture
CVE-2025-8578: Use after free in Cast
CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
CVE-2025-8580: Inappropriate implementation in Filesystems
CVE-2025-8581: Inappropriate implementation in Extensions
CVE-2025-8582: Insufficient validation of untrusted input in DOM
CVE-2025-8583: Inappropriate implementation in Permissions

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17544215130.a9aeD.1855--

summary: VUL-0: chromium: 139.0.7258.66


body:
Gecko/20100101
Firefox/141.0
Build Identifier:=20

On a Thinkpad X1 Yoga gen 6, I can't get Aeon to install because of=20

```
genrsa: Can't open
"/var/lib/tik/encrypt/mnt/var/lib/sdbootutil/measure-pcr-private.pem&q=
uot; for
writing, No such file or directory
[/usr/lib/tik/modules/post/15-encrypt][20250806-19:50:47][LOG] [pkexec][1]
openssl genrsa -out
/var/lib/tik/encrypt/mnt/var/lib/sdbootutil/measure-pcr-private.pem 4096
[/usr/lib/tik/modules/post/15-encrypt][20250806-19:50:47][ERROR] Command
<tt>openssl genrsa -out
/var/lib/tik/encrypt/mnt/var/lib/sdbootutil/measure-pcr-private.pem 4096&lt=
;/tt>
FAILED
```

Reproducible: Always

Steps to Reproduce:
1. Install Aeon
Actual Results:=20=20
Unable to install

Expected Results:=20=20
Able to Install

Laptop has tested working (in Windows) full TPM 2.0 support

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17545102700.755eD.1829--

summary: Missing sdbootutil folder causing openssl tpm failing install


body:
--17545389184.DCCC1b3.2213
Date: Thu, 7 Aug 2025 03:55:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247726

            Bug ID: 1247726
           Summary: btrfs: log tree replay failure
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: jslaby-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://www.phoronix.com/news/Btrfs-Log-Tree-Corruption-Fix

commit 0a32e4f0025a74c70dcab4478e9b29c22f5ecf2f
Author: Filipe Manana <fdmanana-at-suse.com>
Date:   Wed Jul 30 19:18:37 2025 +0100

    btrfs: fix log tree replay failure due to file with 0 links and extents
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17545389184.DCCC1b3.2213
Date: Thu, 7 Aug 2025 03:55:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247726

          Summary
          btrfs: log tree replay failure

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          jslaby@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://www.phoronix.com/news/Btrfs-Log-Tree-Corruption-Fix

commit 0a32e4f0025a74c70dcab4478e9b29c22f5ecf2f
Author: Filipe Manana <fdmanana=
@suse.com>
Date:   Wed Jul 30 19:18:37 2025 +0100

    btrfs: fix log tree replay failure due to file with 0 links and extents=

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17545389184.DCCC1b3.2213--

summary: btrfs: log tree replay failure


body:
--17545761680.A233c6BD.4199
Date: Thu, 7 Aug 2025 14:16:08 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247781

            Bug ID: 1247781
           Summary: AUDIT-0: OpenSMTPD: setuid/setgid bit
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: mislav.bozicevic-at-suse.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

For my package found in OBS in server:mail/OpenSMTPD
(https://build.opensuse.org/package/show/server:mail/OpenSMTPD) I would lik=
e a
whitelisting for the following rpmlint error:

OpenSMTPD.$ARCH: W: permissions-file-setuid-bit /usr/lib/opensmtpd/lockspoo=
l is
packaged with setuid/setgid bits (04555)
OpenSMTPD.$ARCH: W: permissions-file-setuid-bit /usr/sbin/smtpctl is packag=
ed
with setuid/setgid bits (02555)

Additionally, please note that rpmlint emits messages regarding permissions,
e.g.:
OpenSMTPD.$ARCH: W: permissions-missing-requires missing 'permissions' in
PreReq

The package itself has only one set of permission configurations and that is
the one provided by the 'make install' with one exception via %attr. Theref=
ore,
it does not drop profiles in %{_sysconfdir}/permissions.d. During the revie=
w of
the SUID/SGID binaries, would you be so kind to also check if the
permissions-related rpmlint messages are false positives, or there is somet=
hing
mandatory or highly recommended that I might have missed.

Thank you in advance for effort.

Kind regards,
Mislav
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17545761680.A233c6BD.4199
Date: Thu, 7 Aug 2025 14:16:08 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247781

          Summary
          AUDIT-0: OpenSMTPD: setuid/setgid bit

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          mislav.bozicevic@suse.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

For my package found in OBS in server:mail/OpenSMTPD
(=
https://build.opensuse.org/package/show/server:mail/OpenSMTPD) I would =
like a
whitelisting for the following rpmlint error:

OpenSMTPD.$ARCH: W: permissions-file-setuid-bit /usr/lib/opensmtpd/lockspoo=
l is
packaged with setuid/setgid bits (04555)
OpenSMTPD.$ARCH: W: permissions-file-setuid-bit /usr/sbin/smtpctl is packag=
ed
with setuid/setgid bits (02555)

Additionally, please note that rpmlint emits messages regarding permissions,
e.g.:
OpenSMTPD.$ARCH: W: permissions-missing-requires missing 'permissions' in
PreReq

The package itself has only one set of permission configurations and that is
the one provided by the 'make install' with one exception via %attr. Theref=
ore,
it does not drop profiles in %{_sysconfdir}/permissions.d. During the revie=
w of
the SUID/SGID binaries, would you be so kind to also check if the
permissions-related rpmlint messages are false positives, or there is somet=
hing
mandatory or highly recommended that I might have missed.

Thank you in advance for effort.

Kind regards,
Mislav

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17545761680.A233c6BD.4199--

summary: AUDIT-0: OpenSMTPD: setuid/setgid bit


body:
--17545822994.c9da4Eb2c.4948
Date: Thu, 7 Aug 2025 15:58:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247788

            Bug ID: 1247788
           Summary: VUL-0: CVE-2025-54798: python-bqplot: tmp: arbitrary temporary file/directory write via symbolic link dir parameter
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/467019/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-54798:2.5:(AV:L/AC:H/PR:L/UI:N/
                    S:U/C:N/I:L/A:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: python-maintainers-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1247787
  Target Milestone: ---
          Found By: ---
           Blocker: ---

tmp is a temporary file and directory creator for node.js. In versions 0.2.3
and below, tmp is vulnerable to an arbitrary temporary file / directory wri=
te
via symbolic link dir parameter. This is fixed in version 0.2.4.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-54798
https://www.cve.org/CVERecord?id=3DCVE-2025-54798
https://github.com/raszi/node-tmp/commit/188b25e529496e37adaf1a1d9dccb40019=
a08b1b
https://github.com/raszi/node-tmp/issues/207
https://github.com/raszi/node-tmp/security/advisories/GHSA-52f5-9888-hmc6
https://bugzilla.redhat.com/show_bug.cgi?id=3D2386976
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17545822994.c9da4Eb2c.4948
Date: Thu, 7 Aug 2025 15:58:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247788

          Summary
          VUL-0: CVE-2025-54798: python-bqplot: tmp: arbitrary temporar=
y file/directory write via symbolic link dir parameter

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/467019/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-54798:2.5:(AV:L/AC:H/PR:L/UI:N/S:U/C:N=
/I:L/A:N)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          python-maintainers@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1247787

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

tmp is a temporary file and directory creator for node.js. I=
n versions 0.2.3
and below, tmp is vulnerable to an arbitrary temporary file / directory wri=
te
via symbolic link dir parameter. This is fixed in version 0.2.4.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-54798
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-54798
https://github.com/raszi/node-tmp/commit/188b25e529496e3=
7adaf1a1d9dccb40019a08b1b
https://github.com=
/raszi/node-tmp/issues/207
https://github.com/raszi/node-tmp/security/advisories/GHSA-52f5-=
9888-hmc6
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2386976

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17545822994.c9da4Eb2c.4948--

pkgs: python-bqplot python-nbdime


--17546043400.e3c4D8D3.5695
Date: Thu, 7 Aug 2025 22:05:40 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247812

            Bug ID: 1247812
           Summary: aardvark-dns upstream tests make dnsmasq dump core
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: rbranco-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

dnsmasq version: dnsmasq-2.91-1.1
openSUSE Tumbleweed 20250806

This is seen on all tested architectures:
- aarch64: https://openqa.opensuse.org/tests/5227283=20
- x86_64: https://openqa.opensuse.org/tests/5226275

The linked openQA jobs contain multiple core files for dnsmasq in the Logs &
Assets tab.

Notes:
- The jobs are green because we're currently ignoring the results of some t=
ests
when we established the baseline for the upstream tests.
- Issue not seen on SLES 16.0 maybe due to different aardvark-dns version w=
ith
different tests.
- This issue hasn't been catched before because the coredump detection was
added recently.

To reproduce:

zypper -n install aardvark-dns bats firewalld iproute2 jq netavark podman
dbus-1-daemon
mkdir -p /etc/containers/containers.conf.d
zypper addrepo http://download.opensuse.org/tumbleweed/repo/non-oss/ non-oss
zypper --gpg-auto-import-keys -n install ncat
ln -sf /usr/bin/ncat /usr/bin/nc
mkdir -p /etc/systemd/system/user@.service.d/
echo -e "[Service]\nDelegate=3Dcpu cpuset io memory pids" >
/etc/systemd/system/user@.service.d/60-delegate.conf
reboot
cd /var/tmp/
git clone https://github.com/containers/aardvark-dns.git
cd /var/tmp/aardvark-dns
git checkout v1.15.0
mkdir -p /var/tmp/test.dlECK3
env AARDVARK=3D/usr/libexec/podman/aardvark-dns BATS_TMPDIR=3D/var/tmp/test=
.dlECK3
NETAVARK=3D/usr/libexec/podman/netavark PATH=3D/usr/local/bin:$PATH:/usr/sb=
in:/sbin
bats --tap -T test | tee -a aardvark.tap
rm -rf /var/tmp/test.dlECK3
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17546043400.e3c4D8D3.5695
Date: Thu, 7 Aug 2025 22:05:40 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247812

          Summary
          aardvark-dns upstream tests make dnsmasq dump core

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Network

          Assignee
          screening-team-bugs@suse.de

          Reporter
          rbranco@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

dnsmasq version: dnsmasq-2.91-1.1
openSUSE Tumbleweed 20250806

This is seen on all tested architectures:
- aarch64: https://op=
enqa.opensuse.org/tests/5227283=20
- x86_64: https://ope=
nqa.opensuse.org/tests/5226275

The linked openQA jobs contain multiple core files for dnsmasq in the Logs =
&
Assets tab.

Notes:
- The jobs are green because we're currently ignoring the results of some t=
ests
when we established the baseline for the upstream tests.
- Issue not seen on SLES 16.0 maybe due to different aardvark-dns version w=
ith
different tests.
- This issue hasn't been catched before because the coredump detection was
added recently.

To reproduce:

zypper -n install aardvark-dns bats firewalld iproute2 jq netavark podman
dbus-1-daemon
mkdir -p /etc/containers/containers.conf.d
zypper addrepo http://download.opensuse.org/tumbleweed/repo/non-oss/ non-oss
zypper --gpg-auto-import-keys -n install ncat
ln -sf /usr/bin/ncat /usr/bin/nc
mkdir -p /etc/systemd/system/user@.service.d/
echo -e "[Service]\nDelegate=3Dcpu cpuset io memory pids" >
/etc/systemd/system/user@.service.d/60-delegate.conf
reboot
cd /var/tmp/
git clone https:=
//github.com/containers/aardvark-dns.git
cd /var/tmp/aardvark-dns
git checkout v1.15.0
mkdir -p /var/tmp/test.dlECK3
env AARDVARK=3D/usr/libexec/podman/aardvark-dns BATS_TMPDIR=3D/var/tmp/test=
.dlECK3
NETAVARK=3D/usr/libexec/podman/netavark PATH=3D/usr/local/bin:$PATH:/usr/sb=
in:/sbin
bats --tap -T test | tee -a aardvark.tap
rm -rf /var/tmp/test.dlECK3

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17546043400.e3c4D8D3.5695--


--17546239773.2688d2E05.5920
Date: Fri, 8 Aug 2025 03:32:57 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247816

            Bug ID: 1247816
           Summary: go1.21,go1.22,go1.23: go1.x toolchain packages shorten bootstrap chain to go1.21 bootstrapped with gccgo
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

go1.x toolchain packages are built in OBS using an earlier go1.x package for
the bootstrap phase. Over time this leads to long bootstrap chains, in some
cases back to go1.4, the last C based Go. Make packaging and prjconf change=
s as
needed to bootstrap a recent go1.x using the gccgo compiler included with g=
cc.

This is a tracking issue that will remain open long-term while distributions
opt-in at a time convenient to shorten the go1.x bootstrap chain.

Reference this issue in packaging changes, prjconf configuration changes, a=
nd
any related artifacts.

gcc13, gcc14, gcc15 all have gccgo supporting language level go1.18. The la=
test
go1.x which can bootstrap at language level go1.18 is go1.21.

There is no announced plan for a future version of gccgo to support a newer
language level. go1.21 will be the initial version of Go in the bootstrap c=
hain
until that changes.

Per https://go.dev/doc/install/source#go14 The minimum version of Go requir=
ed
to bootstrap depends on the target version of Go:

- go1.20 <=3D go1.21: a Go 1.17 compiler.

- go1.22 <=3D go1.23: a Go 1.20 compiler.

- Going forward, Go version 1.N will require a Go 1.M compiler, where M is =
N-2
rounded down to an even number. Example: Go 1.24 and 1.25 require Go 1.22.

go1.21 packaging has recently been enabled for opt-in gccgo bootstrapping of
just that package. %bcond_with gccgo_go121 to a version unique name, former=
ly
%bcond_with gccgo which would attempt to bootstrap all go1.x in a project w=
ith
gccgo. Due to gccgo currently supporting only language level go1.18,
bootstrapping all go1.x with gccgo is not workable. OBS prjconf does not
support a conditional%_with configuration to match just one package. Use a
unique name that is defined only in go1.21 packaging.

Bootstrap go1.21 with gcc-go by adding the following to prjconf:

    Macros:
    %_with_gccgo_go121 1
    :Macros
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17546239773.2688d2E05.5920
Date: Fri, 8 Aug 2025 03:32:57 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247816

          Summary
          go1.21,go1.22,go1.23: go1.x toolchain packages shorten bootst=
rap chain to go1.21 bootstrapped with gccgo

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jkowalczyk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

go1.x toolchain packages are built in OBS using an earlier g=
o1.x package for
the bootstrap phase. Over time this leads to long bootstrap chains, in some
cases back to go1.4, the last C based Go. Make packaging and prjconf change=
s as
needed to bootstrap a recent go1.x using the gccgo compiler included with g=
cc.

This is a tracking issue that will remain open long-term while distributions
opt-in at a time convenient to shorten the go1.x bootstrap chain.

Reference this issue in packaging changes, prjconf configuration changes, a=
nd
any related artifacts.

gcc13, gcc14, gcc15 all have gccgo supporting language level go1.18. The la=
test
go1.x which can bootstrap at language level go1.18 is go1.21.

There is no announced plan for a future version of gccgo to support a newer
language level. go1.21 will be the initial version of Go in the bootstrap c=
hain
until that changes.

Per https://go.dev/doc/i=
nstall/source#go14 The minimum version of Go required
to bootstrap depends on the target version of Go:

- go1.20 <=3D go1.21: a Go 1.17 compiler.

- go1.22 <=3D go1.23: a Go 1.20 compiler.

- Going forward, Go version 1.N will require a Go 1.M compiler, where M is =
N-2
rounded down to an even number. Example: Go 1.24 and 1.25 require Go 1.22.

go1.21 packaging has recently been enabled for opt-in gccgo bootstrapping of
just that package. %bcond_with gccgo_go121 to a version unique name, former=
ly
%bcond_with gccgo which would attempt to bootstrap all go1.x in a project w=
ith
gccgo. Due to gccgo currently supporting only language level go1.18,
bootstrapping all go1.x with gccgo is not workable. OBS prjconf does not
support a conditional%_with configuration to match just one package. Use a
unique name that is defined only in go1.21 packaging.

Bootstrap go1.21 with gcc-go by adding the following to prjconf:

    Macros:
    %_with_gccgo_go121 1
    :Macros

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17546239773.2688d2E05.5920--


--17549074960.9bE3.10205
Date: Mon, 11 Aug 2025 10:18:16 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247895

            Bug ID: 1247895
           Summary: Kernel 6.15.7 and newer looses USB devices on warm reset
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: mrueckert-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

going back to kernel 6.15.6 or Jiri Slaby's 6.16 with the=20
2521106fc732b0b75fd3555c689b1ed1d29d273c in linus' tree disabled fixes the
issue for me.

```
Jul 31 19:53:02 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:02 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:03 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:03 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:03 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:04 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:04 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:04 kernel: usb 1-2: Device not responding to setup address.
Jul 31 19:53:04 kernel: usb 1-2: Device not responding to setup address.
Jul 31 19:53:04 kernel: usb 1-2: device not accepting address 50, error -71
Jul 31 19:53:04 kernel: usb 1-2: WARN: invalid context state for evaluate
context command.
Jul 31 19:53:04 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:05 kernel: xhci_hcd 0000:0e:00.0: ERROR unknown event type 2
Jul 31 19:53:05 kernel: usb 1-2: Device not responding to setup address.
Jul 31 19:53:06 kernel: xhci_hcd 0000:0e:00.0: ERROR unknown event type 2
Jul 31 19:54:03 systemd-udevd[1345]: 1-2: Worker [664534] processing
SEQNUM=3D10116 is taking a long time
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: Abort failed to stop command
ring: -110
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: xHCI host controller not
responding, assume dead
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: HC died; cleaning up
Jul 31 19:55:05 kernel: usb 1-1: USB disconnect, device number 30
Jul 31 19:55:05 kernel: usb 2-3: USB disconnect, device number 8
Jul 31 19:55:05 kernel: usb 2-3.2: USB disconnect, device number 9
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: Timeout while waiting for se=
tup
device command
Jul 31 19:55:05 pcscd[15573]: 99999999 ../src/ccid_usb.c:961:WriteUSB() wri=
te
failed (1/48): LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 pcscd[15573]: 00000008 ../src/ccid_usb.c:1574:InterruptRead=
()
libusb_submit_transfer failed: LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 kernel: usb 1-2: device not accepting address 50, error -62
Jul 31 19:55:05 kernel: usb 1-2: USB disconnect, device number 50
Jul 31 19:55:05 pcscd[15573]: 00400082 ../src/ccid_usb.c:961:WriteUSB() wri=
te
failed (1/48): LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 pcscd[15573]: 00000015 ../src/ccid_usb.c:1574:InterruptRead=
()
libusb_submit_transfer failed: LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 kernel: usb 1-3: USB disconnect, device number 43
Jul 31 19:55:05 kernel: usb 1-3.2: USB disconnect, device number 45
Jul 31 19:55:05 kernel: usb 1-3.2.1: USB disconnect, device number 48
Jul 31 19:55:05 kernel: usb 1-3.3: USB disconnect, device number 51
Jul 31 19:55:05 kernel: usb 1-4: USB disconnect, device number 46
Jul 31 19:55:05 pipewire[626740]: spa.alsa: front:2p: snd_pcm_drop: No such
device
Jul 31 19:55:05 kernel: usb 1-5: USB disconnect, device number 44
Jul 31 19:55:05 pipewire[626740]: spa.alsa: front:2p: close failed: No such
device
Jul 31 19:55:05 kernel: usb 1-7: USB disconnect, device number 9
```
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17549074960.9bE3.10205
Date: Mon, 11 Aug 2025 10:18:16 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247895

          Summary
          Kernel 6.15.7 and newer looses USB devices on warm reset

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          mrueckert@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

going back to kernel 6.15.6 or Jiri Slaby's 6.16 with the=20
2521106fc732b0b75fd3555c689b1ed1d29d273c in linus' tree disabled fixes the
issue for me.

```
Jul 31 19:53:02 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:02 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:03 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:03 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:03 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:04 kernel: usb 1-2: device descriptor read/64, error -71
Jul 31 19:53:04 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:04 kernel: usb 1-2: Device not responding to setup address.
Jul 31 19:53:04 kernel: usb 1-2: Device not responding to setup address.
Jul 31 19:53:04 kernel: usb 1-2: device not accepting address 50, error -71
Jul 31 19:53:04 kernel: usb 1-2: WARN: invalid context state for evaluate
context command.
Jul 31 19:53:04 kernel: usb 1-2: reset full-speed USB device number 50 using
xhci_hcd
Jul 31 19:53:05 kernel: xhci_hcd 0000:0e:00.0: ERROR unknown event type 2
Jul 31 19:53:05 kernel: usb 1-2: Device not responding to setup address.
Jul 31 19:53:06 kernel: xhci_hcd 0000:0e:00.0: ERROR unknown event type 2
Jul 31 19:54:03 systemd-udevd[1345]: 1-2: Worker [664534] processing
SEQNUM=3D10116 is taking a long time
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: Abort failed to stop command
ring: -110
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: xHCI host controller not
responding, assume dead
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: HC died; cleaning up
Jul 31 19:55:05 kernel: usb 1-1: USB disconnect, device number 30
Jul 31 19:55:05 kernel: usb 2-3: USB disconnect, device number 8
Jul 31 19:55:05 kernel: usb 2-3.2: USB disconnect, device number 9
Jul 31 19:55:05 kernel: xhci_hcd 0000:0e:00.0: Timeout while waiting for se=
tup
device command
Jul 31 19:55:05 pcscd[15573]: 99999999 ../src/ccid_usb.c:961:WriteUSB() wri=
te
failed (1/48): LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 pcscd[15573]: 00000008 ../src/ccid_usb.c:1574:InterruptRead=
()
libusb_submit_transfer failed: LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 kernel: usb 1-2: device not accepting address 50, error -62
Jul 31 19:55:05 kernel: usb 1-2: USB disconnect, device number 50
Jul 31 19:55:05 pcscd[15573]: 00400082 ../src/ccid_usb.c:961:WriteUSB() wri=
te
failed (1/48): LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 pcscd[15573]: 00000015 ../src/ccid_usb.c:1574:InterruptRead=
()
libusb_submit_transfer failed: LIBUSB_ERROR_NO_DEVICE
Jul 31 19:55:05 kernel: usb 1-3: USB disconnect, device number 43
Jul 31 19:55:05 kernel: usb 1-3.2: USB disconnect, device number 45
Jul 31 19:55:05 kernel: usb 1-3.2.1: USB disconnect, device number 48
Jul 31 19:55:05 kernel: usb 1-3.3: USB disconnect, device number 51
Jul 31 19:55:05 kernel: usb 1-4: USB disconnect, device number 46
Jul 31 19:55:05 pipewire[626740]: spa.alsa: front:2p: snd_pcm_drop: No such
device
Jul 31 19:55:05 kernel: usb 1-5: USB disconnect, device number 44
Jul 31 19:55:05 pipewire[626740]: spa.alsa: front:2p: close failed: No such
device
Jul 31 19:55:05 kernel: usb 1-7: USB disconnect, device number 9
```

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17549074960.9bE3.10205--


--17549156030.cCaB7A6a.10727
Date: Mon, 11 Aug 2025 12:33:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247907

            Bug ID: 1247907
           Summary: Update nvidia driver to version > 570.172.08
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 3rd Party Driver
          Assignee: gfx-bugs-at-suse.de
          Reporter: sndirsch-at-suse.com
        QA Contact: sndirsch-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Update nvidia driver to version > 570.172.08
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17549156030.cCaB7A6a.10727
Date: Mon, 11 Aug 2025 12:33:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247907

          Summary
          Update nvidia driver to version > 570.172.08

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 3rd Party Driver

          Assignee
          gfx-bugs@suse.de

          Reporter
          sndirsch@suse.com

          QA Contact
          sndirsch@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Update nvidia driver to version > 570.172.08

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17549156030.cCaB7A6a.10727--


--17550098300.cAF22cFe.13324
Date: Tue, 12 Aug 2025 14:43:50 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247970

            Bug ID: 1247970
           Summary: VUL-0: CVE-2025-49090: matrix-synapse: high severity protocol vulnerability
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: abergmann-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://github.com/element-hq/synapse/releases/tag/v1.136.0

Synapse 1.136.0rc2 (2025-08-11)

This is the Synapse portion of the Matrix coordinated security release. This
release includes support for room version 12 which fixes a number of securi=
ty
vulnerabilities, including CVE-2025-49090.

The default room version is not changed. Not all clients will support room
version 12 immediately, and not all users will be using the latest version =
of
their clients. Large, public rooms are advised to wait a few weeks before
upgrading to room version 12 to allow users throughout the Matrix ecosystem=
 to
update their clients.

Note: release 1.135.1 was skipped due to issues discovered during the relea=
se
process.

Two patched Synapse releases are now available:

    1.135.2: stable release comprised of 1.135.0 + security patches
        Upgrade to this release if you are currently running 1.135.0 or bel=
ow.
    1.136.0rc2: unstable release candidate comprised of 1.136.0rc1 + securi=
ty
patches.
        Upgrade to this release only if you are on 1.136.0rc1.

Bugfixes

    Update MSC4293 redaction logic for room v12. (#80)

Internal Changes

    Add a parameter to upgrade_rooms(..) to allow auto join local users. (#=
83)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550098300.cAF22cFe.13324
Date: Tue, 12 Aug 2025 14:43:50 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247970

          Summary
          VUL-0: CVE-2025-49090: matrix-synapse: high severity protocol=
 vulnerability

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          abergmann@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://github.com/element-hq/synapse/releases/tag/v1.136.0

Synapse 1.136.0rc2 (2025-08-11)

This is the Synapse portion of the Matrix coordinated security release. This
release includes support for room version 12 which fixes a number of securi=
ty
vulnerabilities, including CVE-2025-49090.

The default room version is not changed. Not all clients will support room
version 12 immediately, and not all users will be using the latest version =
of
their clients. Large, public rooms are advised to wait a few weeks before
upgrading to room version 12 to allow users throughout the Matrix ecosystem=
 to
update their clients.

Note: release 1.135.1 was skipped due to issues discovered during the relea=
se
process.

Two patched Synapse releases are now available:

    1.135.2: stable release comprised of 1.135.0 + security patches
        Upgrade to this release if you are currently running 1.135.0 or bel=
ow.
    1.136.0rc2: unstable release candidate comprised of 1.136.0rc1 + securi=
ty
patches.
        Upgrade to this release only if you are on 1.136.0rc1.

Bugfixes

    Update MSC4293 redaction logic for room v12. (#80)

Internal Changes

    Add a parameter to upgrade_rooms(..) to allow auto join local users. (#=
83)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550098300.cAF22cFe.13324--


body:
--17550106203.Fc441eF.13384
Date: Tue, 12 Aug 2025 14:57:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247972

            Bug ID: 1247972
           Summary: qemu doesn't build with Python 3.13.6
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Other
          Assignee: virt-bugs-at-suse.de
          Reporter: mcepl-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I am not sure whether it is https://gitlab.com/qemu-project/qemu/-/issues/3=
062,
but I am not willing to suffer non-standard packaging process, so I will let
you find out whether
https://gitlab.com/-/project/11167699/uploads/0bc3ef428137940e7cdc31beae0d7=
594/qemu-10.0.3-pip-25.2-compat.patch
actually helps.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550106203.Fc441eF.13384
Date: Tue, 12 Aug 2025 14:57:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247972

          Summary
          qemu doesn't build with Python 3.13.6

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Virtualization:Other

          Assignee
          virt-bugs@suse.de

          Reporter
          mcepl@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I am not sure whether it is https://gitlab.com/qemu-project/qemu/-/issue=
s/3062,
but I am not willing to suffer non-standard packaging process, so I will let
you find out whether
https://gitlab.com/-/proj=
ect/11167699/uploads/0bc3ef428137940e7cdc31beae0d7594/qemu-10.0.3-pip-25.2-=
compat.patch
actually helps.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550106203.Fc441eF.13384--

summary: qemu doesn't build with Python 3.13.6


body:
--17550306422.B2116.14811
Date: Tue, 12 Aug 2025 20:30:42 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247981

            Bug ID: 1247981
           Summary: VUL-0: chromium: release 139.0.7258.127
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.0
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: Andreas.Stieger-at-gmx.de
        QA Contact: qa-bugs-at-suse.de
                CC: ro-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-des=
ktop_12.html

Fixed in Chromium 139.0.7258.127:
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550306422.B2116.14811
Date: Tue, 12 Aug 2025 20:30:42 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247981

          Summary
          VUL-0: chromium: release 139.0.7258.127

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.0

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          Andreas.Stieger@gmx.de

          QA Contact
          qa-bugs@suse.de

          CC
          ro@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

https://chromereleases.googleblog.c=
om/2025/08/stable-channel-update-for-desktop_12.html

Fixed in Chromium 139.0.7258.127:
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550306422.B2116.14811--

summary: VUL-0: chromium: release 139.0.7258.127


--17550919221.Db0DEE7.16824
Date: Wed, 13 Aug 2025 13:32:02 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247996

            Bug ID: 1247996
           Summary: [Build 20250812] Linux kernel 6.16 fips mode enabledment fails (tcrypt.ko missing)
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5239758/modules/fips
                    _setup/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

Tumbleweed has been updated to Kernel 6.16

While testing the fips-enablement (of course TW is not certified, but we do
test it), the system fails to reboot, stating:

FATAL: module tcrypt not found

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-x86_64-microos_fips@64bit fails in
[fips_setup](https://openqa.opensuse.org/tests/5239758/modules/fips_setup/s=
teps/18)

## Test suite description
microos FIPS enablement and some FIPS specific tests.=20

## Reproducible

Fails since (at least) Build
[20250812](https://openqa.opensuse.org/tests/5239758) (current job)

## Expected result

Last good: [20250811](https://openqa.opensuse.org/tests/5236525) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dmi=
croos&flavor=3DMicroOS-Image&machine=3D64bit&test=3Dmicroos_fips&version=3D=
Tumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550919221.Db0DEE7.16824
Date: Wed, 13 Aug 2025 13:32:02 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247996

          Summary
          [Build 20250812] Linux kernel 6.16 fips mode enabledment fail=
s (tcrypt.ko missing)

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5239758/modules/fips_setup/=
steps/18

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

Tumbleweed has been updated to Kernel 6.16

While testing the fips-enablement (of course TW is not certified, but we do
test it), the system fails to reboot, stating:

FATAL: module tcrypt not found

openQA test in scenario
microos-Tumbleweed-MicroOS-Image-x86_64-microos_fips@64bit fails in
[fips_setup](https://openqa.opensuse.org/tests/5239758/modules/fips_=
setup/steps/18)

## Test suite description
microos FIPS enablement and some FIPS specific tests.=20

## Reproducible

Fails since (at least) Build
[20250812](https://op=
enqa.opensuse.org/tests/5239758) (current job)

## Expected result

Last good: [20250811](https://openqa.opensuse.org/tests/5236525) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/test=
s/latest?arch=3Dx86_64&distri=3Dmicroos&flavor=3DMicroOS-Image&=
machine=3D64bit&test=3Dmicroos_fips&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550919221.Db0DEE7.16824--


--17550926762.E1Dbda5C4.16884
Date: Wed, 13 Aug 2025 13:44:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1247998

            Bug ID: 1247998
           Summary: [Build 20250812] openQA test fails in Sysctl
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5239963/modules/Sysc
                    tl/steps/18
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

sysctl tries to query /proc/sys/crypto/fips_enabled to check if it's on or =
off
Since kernel 6.16, this no longer returns '0' in case it's off, but rather

# Test messages # Sysctl_crypto_fips_enabled
# failure:=20

1 - sysctl: cannot stat /proc/sys/crypto/fips_enabled: No such file or
directory

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-sys-param-check@64bit
fails in
[Sysctl](https://openqa.opensuse.org/tests/5239963/modules/Sysctl/steps/18)

## Test suite description
RAM size is set to 2048, some kernel parameters change with total RAM
https://github.com/openSUSE/sys-param-check

## Reproducible

Fails since (at least) Build
[20250812](https://openqa.opensuse.org/tests/5239449)

## Expected result

Last good: [20250811](https://openqa.opensuse.org/tests/5236216) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3D64bit&test=3Dsys-param-check&version=3DTumble=
weed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550926762.E1Dbda5C4.16884
Date: Wed, 13 Aug 2025 13:44:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1247998

          Summary
          [Build 20250812] openQA test fails in Sysctl

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5239963/modules/Sysctl/step=
s/18

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

sysctl tries to query /proc/sys/crypto/fips_enabled to check if it's on or =
off
Since kernel 6.16, this no longer returns '0' in case it's off, but rather

# Test messages # Sysctl_crypto_fips_enabled
# failure:=20

1 - sysctl: cannot stat /proc/sys/crypto/fips_enabled: No such file or
directory

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-sys-param-check@=
64bit
fails in
[Sysctl](https://openqa.opensuse.org/tests/5239963/modules/Sysctl/steps/=
18)

## Test suite description
RAM size is set to 2048, some kernel parameters change with total RAM
https://github.com/=
openSUSE/sys-param-check

## Reproducible

Fails since (at least) Build
[20250812](https://op=
enqa.opensuse.org/tests/5239449)

## Expected result

Last good: [20250811](https://openqa.opensuse.org/tests/5236216) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/late=
st?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3D64bit=
&test=3Dsys-param-check&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550926762.E1Dbda5C4.16884--


--17550988603.c2f72C.17621
Date: Wed, 13 Aug 2025 15:27:40 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248010

            Bug ID: 1248010
           Summary: VUL-0: CVE-2025-55159: wicked2nm: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/467416/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/
                    S:U/C:L/I:L/A:H)
                    CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI
                    :P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: jorik.cronenberg-at-suse.com
          Reporter: andrea.mattiazzo-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248000
  Target Milestone: ---
          Found By: ---
           Blocker: ---

slab is a pre-allocated storage for a uniform data type. In version 0.4.10,=
 the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.cve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4a=
e96b8
https://github.com/tokio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
https://bugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/55xxx/CVE-2025=
-55159.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550988603.c2f72C.17621
Date: Wed, 13 Aug 2025 15:27:40 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248010

          Summary
          VUL-0: CVE-2025-55159: wicked2nm: slab: incorrect bounds chec=
k in get_disjoint_mut function can lead to undefined behavior or potential =
crash due to out-of-bounds access

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/467416/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/S:U/C:L=
/I:L/A:H) CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:=
L/VA:H/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          jorik.cronenberg@suse.com

          Reporter
          andrea.mattiazzo@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248000

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

slab is a pre-allocated storage for a uniform data type. In =
version 0.4.10, the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192=
bab212ddf3c1fcea4ae96b8
https://github.com/to=
kio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-83=
32-m4fv
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/55xxx/CVE-2025-55159.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550988603.c2f72C.17621--


--175509888011.aEaA.17621
Date: Wed, 13 Aug 2025 15:28:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248050

            Bug ID: 1248050
           Summary: VUL-0: CVE-2025-55159: fractal: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/467416/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/
                    S:U/C:L/I:L/A:H)
                    CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI
                    :P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: os.gnome.maintainers-at-gmail.com
          Reporter: andrea.mattiazzo-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248000
  Target Milestone: ---
          Found By: ---
           Blocker: ---

slab is a pre-allocated storage for a uniform data type. In version 0.4.10,=
 the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.cve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4a=
e96b8
https://github.com/tokio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
https://bugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/55xxx/CVE-2025=
-55159.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--175509888011.aEaA.17621
Date: Wed, 13 Aug 2025 15:28:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248050

          Summary
          VUL-0: CVE-2025-55159: fractal: slab: incorrect bounds check =
in get_disjoint_mut function can lead to undefined behavior or potential cr=
ash due to out-of-bounds access

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/467416/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/S:U/C:L=
/I:L/A:H) CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:=
L/VA:H/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          os.gnome.maintainers@gmail.com

          Reporter
          andrea.mattiazzo@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248000

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

slab is a pre-allocated storage for a uniform data type. In =
version 0.4.10, the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192=
bab212ddf3c1fcea4ae96b8
https://github.com/to=
kio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-83=
32-m4fv
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/55xxx/CVE-2025-55159.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--175509888011.aEaA.17621--


--17550988801.3Ec6aB.17621
Date: Wed, 13 Aug 2025 15:28:00 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248042

            Bug ID: 1248042
           Summary: VUL-0: CVE-2025-55159: subrandr: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/467416/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/
                    S:U/C:L/I:L/A:H)
                    CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI
                    :P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dleuenberger-at-suse.com
          Reporter: andrea.mattiazzo-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248000
  Target Milestone: ---
          Found By: ---
           Blocker: ---

slab is a pre-allocated storage for a uniform data type. In version 0.4.10,=
 the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.cve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4a=
e96b8
https://github.com/tokio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
https://bugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/55xxx/CVE-2025=
-55159.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550988801.3Ec6aB.17621
Date: Wed, 13 Aug 2025 15:28:00 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248042

          Summary
          VUL-0: CVE-2025-55159: subrandr: slab: incorrect bounds check=
 in get_disjoint_mut function can lead to undefined behavior or potential c=
rash due to out-of-bounds access

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/467416/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/S:U/C:L=
/I:L/A:H) CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:=
L/VA:H/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dleuenberger@suse.com

          Reporter
          andrea.mattiazzo@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248000

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

slab is a pre-allocated storage for a uniform data type. In =
version 0.4.10, the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192=
bab212ddf3c1fcea4ae96b8
https://github.com/to=
kio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-83=
32-m4fv
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/55xxx/CVE-2025-55159.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550988801.3Ec6aB.17621--


--175509888210.Eb63Bc.17621
Date: Wed, 13 Aug 2025 15:28:02 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248047

            Bug ID: 1248047
           Summary: VUL-0: CVE-2025-55159: forgejo-cli: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/467416/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/
                    S:U/C:L/I:L/A:H)
                    CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI
                    :P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: rrahl0-at-opensuse.org
          Reporter: andrea.mattiazzo-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248000
  Target Milestone: ---
          Found By: ---
           Blocker: ---

slab is a pre-allocated storage for a uniform data type. In version 0.4.10,=
 the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.cve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4a=
e96b8
https://github.com/tokio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
https://bugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/55xxx/CVE-2025=
-55159.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--175509888210.Eb63Bc.17621
Date: Wed, 13 Aug 2025 15:28:02 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248047

          Summary
          VUL-0: CVE-2025-55159: forgejo-cli: slab: incorrect bounds ch=
eck in get_disjoint_mut function can lead to undefined behavior or potentia=
l crash due to out-of-bounds access

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/467416/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/S:U/C:L=
/I:L/A:H) CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:=
L/VA:H/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          rrahl0@opensuse.org

          Reporter
          andrea.mattiazzo@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248000

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

slab is a pre-allocated storage for a uniform data type. In =
version 0.4.10, the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192=
bab212ddf3c1fcea4ae96b8
https://github.com/to=
kio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-83=
32-m4fv
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/55xxx/CVE-2025-55159.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--175509888210.Eb63Bc.17621--


--17550988836.Ac7e.17621
Date: Wed, 13 Aug 2025 15:28:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248053

            Bug ID: 1248053
           Summary: VUL-0: CVE-2025-55159: gstreamer-devtools,gstreamer-plugins-rs: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/467416/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/
                    S:U/C:L/I:L/A:H)
                    CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI
                    :P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: bjorn.lie-at-gmail.com
          Reporter: andrea.mattiazzo-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1248000
  Target Milestone: ---
          Found By: ---
           Blocker: ---

slab is a pre-allocated storage for a uniform data type. In version 0.4.10,=
 the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.cve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4a=
e96b8
https://github.com/tokio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
https://bugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/55xxx/CVE-2025=
-55159.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17550988836.Ac7e.17621
Date: Wed, 13 Aug 2025 15:28:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248053

          Summary
          VUL-0: CVE-2025-55159: gstreamer-devtools,gstreamer-plugins-r=
s: slab: incorrect bounds check in get_disjoint_mut function can lead to un=
defined behavior or potential crash due to out-of-bounds access

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/467416/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-55159:5.8:(AV:L/AC:H/PR:N/UI:R/S:U/C:L=
/I:L/A:H) CVSSv4:SUSE:CVE-2025-55159:5.8:(AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:=
L/VA:H/SC:N/SI:N/SA:N)

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          bjorn.lie@gmail.com

          Reporter
          andrea.mattiazzo@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1248000

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

slab is a pre-allocated storage for a uniform data type. In =
version 0.4.10, the
get_disjoint_mut method incorrectly checked if indices were within the slab=
's
capacity instead of its length, allowing access to uninitialized memory. Th=
is
could lead to undefined behavior or potential crashes. This has been fixed =
in
slab 0.4.11. A workaround for this issue involves to avoid using
get_disjoint_mut with indices that might be beyond the slab's actual length.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-55159
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-55159
https://github.com/tokio-rs/slab/commit/2d65c514bc964b192=
bab212ddf3c1fcea4ae96b8
https://github.com/to=
kio-rs/slab/pull/152
https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-83=
32-m4fv
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2387745
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/55xxx/CVE-2025-55159.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17550988836.Ac7e.17621--


--17551229663.4Fe48C.18122
Date: Wed, 13 Aug 2025 22:09:26 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248082

            Bug ID: 1248082
           Summary: go1.22,go1.23, go1.24, go1.25: go1.x toolchain packages drop unused gccgo bootstrap code now used only by go1.21
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Development
          Assignee: screening-team-bugs-at-suse.de
          Reporter: jkowalczyk-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Remove gccgo conditional code from go1.x toolchain packages newer than go1.=
21.
The gccgo conditional blocks are now unused and removal will simplify packa=
ging
and allow us to drop a carried patch.

As described in boo#1247816 (go1.21,go1.22,go1.23: go1.x toolchain packages
shorten bootstrap chain to go1.21 bootstrapped with gccgo), go1.21 is the
latest and only go1.x version that can bootstrap using gccgo from gcc13, gc=
c14,
gcc15.

Currently, packaging for go1.22, go1.23, go1.24 and go1.25 can be simplifie=
d by
the removal.

go1.21 will be the initial bootstrap version until such time as gcc updates
gccgo from Go language level go1.18 to some newer version. If and when that
happens, reference this issue if restoring the gccgo conditional packaging =
code
to a future version of go1.x TBD.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17551229663.4Fe48C.18122
Date: Wed, 13 Aug 2025 22:09:26 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248082

          Summary
          go1.22,go1.23, go1.24, go1.25: go1.x toolchain packages drop =
unused gccgo bootstrap code now used only by go1.21

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Development

          Assignee
          screening-team-bugs@suse.de

          Reporter
          jkowalczyk@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Remove gccgo conditional code from go1.x toolchain packages =
newer than go1.21.
The gccgo conditional blocks are now unused and removal will simplify packa=
ging
and allow us to drop a carried patch.

As described in boo#1247816 (go1.21,go1.22,go1.23: go1.x toolchain packages
shorten bootstrap chain to go1.21 bootstrapped with gccgo), go1.21 is the
latest and only go1.x version that can bootstrap using gccgo from gcc13, gc=
c14,
gcc15.

Currently, packaging for go1.22, go1.23, go1.24 and go1.25 can be simplifie=
d by
the removal.

go1.21 will be the initial bootstrap version until such time as gcc updates
gccgo from Go language level go1.18 to some newer version. If and when that
happens, reference this issue if restoring the gccgo conditional packaging =
code
to a future version of go1.x TBD.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17551229663.4Fe48C.18122--


--17551742793.1f72e791.19721
Date: Thu, 14 Aug 2025 12:24:39 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1248109

            Bug ID: 1248109
           Summary: bcachefs: add warning regarding possible imminent removal from mainline kernel
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel:Filesystems
          Assignee: ddiss-at-suse.com
          Reporter: ddiss-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kernel-fs-at-suse.de, mhocko-at-suse.com
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Linus has publicly commented indicating that he may drop bcachefs from the
kernel:
https://lore.kernel.org/all/CAHk-=3Dwi+k8E4kWR8c-nREP0+EA4D+=3Drz5j0Hdk3N6c=
WgfE03-Q-at-mail.gmail.com/

We should notify Tumbleweed Bcachefs users of this, as it would heavily imp=
act
future supportability.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17551742793.1f72e791.19721
Date: Thu, 14 Aug 2025 12:24:39 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1248109

          Summary
          bcachefs: add warning regarding possible imminent removal fro=
m mainline kernel

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel:Filesystems

          Assignee
          ddiss@suse.com

          Reporter
          ddiss@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          kernel-fs@suse.de, mhocko@suse.com

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Linus has publicly commented indicating that he may drop bca=
chefs from the
kernel:
https://lore.kernel.org/all/CAHk-=
=3Dwi+k8E4kWR8c-nREP0+EA4D+=3Drz5j0Hdk3N6cWgfE03-Q@mail.gmail.com/

We should notify Tumbleweed Bcachefs users of this, as it would heavily imp=
act
future supportability.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17551742793.1f72e791.19721--