openSUSE-SU-2026:21266-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21266-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21266-1

Upstream

CVE (3)

Related

CVE (3)

Published

2026-07-06T21:23:10Z

Modified

2026-07-09T10:00:12Z

Summary

Security update for openQA, os-autoinst

Details

This update for openQA, os-autoinst fixes the following issues:

Changes in openQA:

Update to version 5.1783076943.6691832d:
- test: Stabilize t/05-scheduler-full.t
Clarify resolution of three CVEs
- The following CVEs have been fixed (see previous changelog entries that mentioned only the according Bugzilla tickets):
  - bsc#1259005 - CVE-2026-27904
  - bsc#1264376 - CVE-2026-6321
  - bsc#1258632 - CVE-2026-26996
Update to version 5.1782995932.ffeb09be:
- feat: throw 404 for nonexistent groups in overview
- feat: Avoid logwarn notifications for non-critical auth error
- chore(deps): Dependency cron 2026-07-02
- git subrepo pull (merge) external/os-autoinst-common
- fix: Check also hidden files in checklist plugin
- test: Enable faster re-connects in full scheduler test consistently
- test: Avoid silent daemons in verbose mode
- test: Allow running t/43-…-scalability.t in parallel
- test: Allow running t/05-scheduler-full.t in parallel
- test: Avoid race condition when generating ports in 25-cache.t
- test: Avoid wasting seconds in 40-script_load_dump_templates.t
- refactor: Remove disabled code in openqa-load-templates
- test: Avoid race condition when generating ports in many tests
- chore(deps): Dependency cron 2026-07-01
- fix(ci): format inline comments in workflows to pass yamllint
- test: Avoid running into "Address already in use" in fullstack test
- feat(ci): pin GitHub Actions by commit hash

Changes in os-autoinst:

Update to version 5.1783082953.c3cb41d:
- test: Disable unstable t/28-signalblocker.t on ppc64le OBS builds
- fix: Check also hidden files in checklist plugin
- feat(ci): disable Mergify interactive queue controls in PR comments
- test: assert pipe size adjustment dynamically
- test: assert terminal session boundary safety
- refactor: support pretty markers in script_sudo and become_root
- fix: mmapi test failures and infinite loop hangs
- test: simplify Level 3 pretty marker detection
- fix: exclude virt-firmware on all older Leap archs
Update to version 5.1782917048.dcc97e9:
- fix: Check also hidden files in checklist plugin
- feat(ci): disable Mergify interactive queue controls in PR comments
- fix(ci): format inline comments in workflows to pass yamllint
- feat(ci): pin GitHub Actions by commit hash
- test: assert pipe size adjustment dynamically
- test: assert terminal session boundary safety
- refactor: support pretty markers in script_sudo and become_root
- fix: mmapi test failures and infinite loop hangs
- test: simplify Level 3 pretty marker detection
- fix: exclude virt-firmware on all older Leap archs

References

Affected packages

openSUSE:Leap 16.0 / openQA

Package

Name: openQA
Purl: pkg:rpm/opensuse/openQA&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.1783076943.6691832d-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "openQA":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-auto-update":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-bootstrap":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-client":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-client-bash-completion":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-client-zsh-completion":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-common":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-continuous-update":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-devel":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-doc":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-llm-server":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-local-db":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-mcp":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-munin":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-python-scripts":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-single-instance":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-single-instance-nginx":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-worker":  "5.1783076943.6691832d-bp160.1.1",
            "os-autoinst":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-devel":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-ipmi-deps":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-openvswitch":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-qemu-kvm":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-qemu-x86":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-s390-deps":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-swtpm":  "5.1783082953.c3cb41d-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21266-1.json"

openSUSE:Leap 16.0 / os-autoinst

Package

Name: os-autoinst
Purl: pkg:rpm/opensuse/os-autoinst&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.1783082953.c3cb41d-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "openQA":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-auto-update":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-bootstrap":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-client":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-client-bash-completion":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-client-zsh-completion":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-common":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-continuous-update":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-devel":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-doc":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-llm-server":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-local-db":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-mcp":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-munin":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-python-scripts":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-single-instance":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-single-instance-nginx":  "5.1783076943.6691832d-bp160.1.1",
            "openQA-worker":  "5.1783076943.6691832d-bp160.1.1",
            "os-autoinst":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-devel":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-ipmi-deps":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-openvswitch":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-qemu-kvm":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-qemu-x86":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-s390-deps":  "5.1783082953.c3cb41d-bp160.1.1",
            "os-autoinst-swtpm":  "5.1783082953.c3cb41d-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21266-1.json"