{"affected":[{"ecosystem_specific":{"binaries":[{"openQA":"5.1771422749.560a3b26-bp160.1.1","openQA-auto-update":"5.1771422749.560a3b26-bp160.1.1","openQA-bootstrap":"5.1771422749.560a3b26-bp160.1.1","openQA-client":"5.1771422749.560a3b26-bp160.1.1","openQA-common":"5.1771422749.560a3b26-bp160.1.1","openQA-continuous-update":"5.1771422749.560a3b26-bp160.1.1","openQA-devel":"5.1771422749.560a3b26-bp160.1.1","openQA-doc":"5.1771422749.560a3b26-bp160.1.1","openQA-local-db":"5.1771422749.560a3b26-bp160.1.1","openQA-mcp":"5.1771422749.560a3b26-bp160.1.1","openQA-munin":"5.1771422749.560a3b26-bp160.1.1","openQA-python-scripts":"5.1771422749.560a3b26-bp160.1.1","openQA-single-instance":"5.1771422749.560a3b26-bp160.1.1","openQA-single-instance-nginx":"5.1771422749.560a3b26-bp160.1.1","openQA-worker":"5.1771422749.560a3b26-bp160.1.1","os-autoinst":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-devel":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-ipmi-deps":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-openvswitch":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-qemu-kvm":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-qemu-x86":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-s390-deps":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-swtpm":"5.1771353921.c8005c9-bp160.1.1"}]},"package":{"ecosystem":"openSUSE:Leap 16.0","name":"openQA","purl":"pkg:rpm/opensuse/openQA&distro=openSUSE%20Leap%2016.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.1771422749.560a3b26-bp160.1.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openQA":"5.1771422749.560a3b26-bp160.1.1","openQA-auto-update":"5.1771422749.560a3b26-bp160.1.1","openQA-bootstrap":"5.1771422749.560a3b26-bp160.1.1","openQA-client":"5.1771422749.560a3b26-bp160.1.1","openQA-common":"5.1771422749.560a3b26-bp160.1.1","openQA-continuous-update":"5.1771422749.560a3b26-bp160.1.1","openQA-devel":"5.1771422749.560a3b26-bp160.1.1","openQA-doc":"5.1771422749.560a3b26-bp160.1.1","openQA-local-db":"5.1771422749.560a3b26-bp160.1.1","openQA-mcp":"5.1771422749.560a3b26-bp160.1.1","openQA-munin":"5.1771422749.560a3b26-bp160.1.1","openQA-python-scripts":"5.1771422749.560a3b26-bp160.1.1","openQA-single-instance":"5.1771422749.560a3b26-bp160.1.1","openQA-single-instance-nginx":"5.1771422749.560a3b26-bp160.1.1","openQA-worker":"5.1771422749.560a3b26-bp160.1.1","os-autoinst":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-devel":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-ipmi-deps":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-openvswitch":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-qemu-kvm":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-qemu-x86":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-s390-deps":"5.1771353921.c8005c9-bp160.1.1","os-autoinst-swtpm":"5.1771353921.c8005c9-bp160.1.1"}]},"package":{"ecosystem":"openSUSE:Leap 16.0","name":"os-autoinst","purl":"pkg:rpm/opensuse/os-autoinst&distro=openSUSE%20Leap%2016.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.1771353921.c8005c9-bp160.1.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for openQA, os-autoinst, openQA-devel-container fixes the following issues:\n\nChanges in openQA:\n\n- Update to version 5.1771422749.560a3b26:\n  * fix(mcp): set navbar check expression to read-only\n  * feat: support inverted result filters in /tests/overview\n  * fix(test): Enable helm install-chart test again\n  * git subrepo pull (merge) --force external/os-autoinst-common\n  * feat: Make allowed hosts for SCENARIO_DEFINITIONS_YAML_FILE configurable\n  * test: Consider everything under `lib/OpenQA/Shared/` covered\n  * fix: Provide specific error message if job was removed `enqueue_…_track`\n  * refactor: Remove useless error message in `enqueue_and_keep_track`\n  * test: Cover case of successful executing in `enqueue_and_keep_track`\n  * refactor: Simplify error handling of `enqueue_and_keep_track`\n  * test: Cover error handling of `enqueue_and_keep_track`\n  * test: Consider shared session controller fully covered\n  * refactor: Avoid duplications in sessions controller\n  * refactor: Use signatures in session controller code\n  * test: Cover error handling in case of a bad CRSF token\n  * test: Cover test route for session\n  * fix(worker): reject jobs explicitly when worker is stopping\n  * feat: Remove workaround for codecov and gpg\n  * feat: Switch to Leap 16 in Helm charts\n  * feat: Switch to Leap 16.0 in openqa_data container\n  * feat: Replace all Leap 15.6 with 16.0 in docs and scripts\n  * test: Cover showing special image when backend has terminated\n  * fix: Use new apachectl command\n  * Update openQA containers to Leap 16.0\n  * test: Extend tests for controller handling live view\n  * refactor: Move throttling into its own function\n  * feat(throttling): throttle jobs resources based on parameters size\n  * refactor: Avoid repeated use of `$t->app->minion` in gru tasks tests\n  * feat: Allow archiving jobs with infinite important storage durations\n  * feat: Flag jobs without results as archived for consistency\n  * feat: Remove one corner case preventing jobs from being archived\n\n- Update to version 5.1770718745.ce2072d3:\n  * feat(ui): use clickable test overview summary counts for quick filtering\n  * build(Makefile): fix uninterruptable tests\n  * docs: Mention caveats of `…_cleanup_max_free_percentage` setting\n  * test(25-cache-service): fix race conditions\n  * test(ui/21-admin-needles): properly wait for modal dialog and deletion\n  * test(ui/13-admin): properly wait for API key deletion\n  * test(40-openqa-clone-job): properly isolate from system config\n  * test(15-asset): bump timeout to current runtime\n  * chore: fix CVE-2026-25547 (boo#1257852) by overriding minimatch\n  * build(deps-dev): bump @eslint from 9.36.0 to 9.38.0\n  * fix(eslint): correct style to be eslint-9.38 compliant\n  * build(deps-dev): bump @eslint-community/regexpp from 4.12.1 to 4.12.2\n  * build(deps-dev): bump @eslint/config-array from 0.21.0 to 0.21.1\n  * build(deps-dev): bump @eslint/object-schema from 2.1.6 to 2.1.7\n  * refactor: Improve variable names in function to determine expired jobs\n  * test: Improve name of subtest for archiving\n  * test: Verify that archiving works regardless of logs/results present\n  * Dependency cron 2026-02-06\n  * Bump js-yaml from 4.1.0 to 4.1.1\n  * build(deps): bump ace-builds from 1.43.3 to 1.43.4\n\n- Update to version 5.1770308102.12dfd0e4:\n  * fix: Configure sudoers correctly in Leap 16\n  * Also use devel:openQA/16.0 in dependency bot workflow\n  * test: Consider all controller code covered\n  * refactor: Remove unused \"group connect\" endpoints\n  * test: Cover `openqa_jobs_by_worker` field of InfluxDB endpoint\n  * test: Cover all cases of search of audit log table\n  * refactor: Simplify function to render audit log index page\n  * test: Add test for `eventid` parameter of audit log page\n  * test: Cover remaining lines of `Asset.pm`\n\n- Update to version 5.1769644379.ef069e9d:\n\nChanges in os-autoinst:\n\n- Update to version 5.1771353921.c8005c9:\n  * git subrepo pull (merge) --force external/os-autoinst-common\n  * style: Fix crop.py style issues\n  * workaround: Remove \"get_mempolicy\" warning from qemu-img output\n  * parse_extra_log: Allow passing additional args to upload_logs\n  * refactor: Distinguish tests by the script path in `loadtest`\n  * refactor: Simplify approach for avoiding redefine warnings\n\n- Update to version 5.1770715824.6a80a85:\n  * style: Fix crop.py style issues\n  * workaround: Remove \"get_mempolicy\" warning from qemu-img output\n  * parse_extra_log: Allow passing additional args to upload_logs\n  * refactor: Distinguish tests by the script path in `loadtest`\n  * refactor: Simplify approach for avoiding redefine warnings\n  * test: Allow running tests with `Test::Warnings<0.033`\n  * test: Format test of `loadtestdir` in a more compact way\n\n- Update to version 5.1770127521.c249fe9:\n  * refactor: Distinguish tests by the script path in `loadtest`\n  * refactor: Simplify approach for avoiding redefine warnings\n  * test: Allow running tests with `Test::Warnings<0.033`\n  * test: Format test of `loadtestdir` in a more compact way\n  * test: Use `ENABLE_MODERN_PERL_FEATURES=1` in test suite\n  * feat: Allow enabling strict/warnings/signatures globally\n  * fix: Improve wrong comment about enablement of modern Perl features\n\nChanges in openQA-devel-container:\n\n- Update to version 5.1771422749.560a3b26b:\n  * Update to latest openQA version\n","id":"openSUSE-SU-2026:20261-1","modified":"2026-02-23T19:35:27Z","published":"2026-02-23T19:35:27Z","references":[{"type":"ADVISORY","url":null},{"type":"REPORT","url":"https://bugzilla.suse.com/1257852"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-25547"}],"related":["CVE-2026-25547"],"summary":"Security update for openQA, os-autoinst, openQA-devel-container","upstream":["CVE-2026-25547"]}