Packages / openSUSE Tumbleweed / Development/Tools/Other / openQA-continuous-update

Package: openQA-continuous-update (5.1787055821.5de28100-1.1)

Continuously update packages from devel:openQA

Use this package to install and enable a systemd service for continuously upgrading the system if devel:openQA packages are stable and contain updates. It is complementary to auto-update which also reboots the system and does updates regardless of whether devel:openQA contains updates.

Other Packages Related to openQA-continuous-update:

dep: /bin/bash
Package not available
dep: /bin/sh
Package not available
dep: /bin/sh
Package not available
dep: [curl]
A Tool for Transferring Data from URLs
dep: [openQA-common]
The openQA common tools for web-frontend and workers

Download openQA-continuous-update

Architecture	Package size	Installed size	Files	Package
x86_64	215 KiB	1.5 KiB	list of files	Download

Package file paths (4)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/lib/systemd/system
/usr/lib/systemd/system/openqa-continuous-update.service
/usr/lib/systemd/system/openqa-continuous-update.timer
/usr/share/openqa/script/openqa-continuous-update

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browser Build an image that includes openQA-continuous-update

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
5.1787055821.5de28100-1.1	tumbleweed / oss	x86_64	openSUSE Tumbleweed · OSS · multi-architecture	215 KiB	1.5 KiB	x86_64/openQA-continuous-update-5.1787055821.5de28100-1.1.x86_64.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-26996] Published: Feb 18, 2026, 10:38:11 PM UTC minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a	High(8.7)	Unknown Details (1) `5.1787055821.5de28100-1.1` · x86_64 · tumbleweed Unknown · Fixed: `5.1782995932.ffeb09be-1.1` Version impact unknown nvd · openQA · opensuse · tumbleweed
[CVE-2026-25547] Published: Feb 4, 2026, 9:51:17 PM UTC node-brace-expansion: CVE-2026-25547	High(7.5)	Unknown Details (1) `5.1787055821.5de28100-1.1` · x86_64 · tumbleweed Unknown · Fixed: `5.1770718745.ce2072d3-1.1` Version impact unknown dsa · openQA · opensuse · tumbleweed

[CVE-2026-26996]

Published: Feb 18, 2026, 10:38:11 PM UTC

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a

High(8.7)

Unknown

Details (1)

5.1787055821.5de28100-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.1782995932.ffeb09be-1.1
Version impact unknown
nvd · openQA · opensuse · tumbleweed

[CVE-2026-25547]

Published: Feb 4, 2026, 9:51:17 PM UTC

node-brace-expansion: CVE-2026-25547

High(7.5)

Unknown

Details (1)

5.1787055821.5de28100-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.1770718745.ce2072d3-1.1
Version impact unknown
dsa · openQA · opensuse · tumbleweed

Last synced: Oct 28, 2026, 3:52:27 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

5.1787055821.5de28100-1.1 / x86_64Observed Sep 1, 2026sha512 46d255850673…131f7721Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 46d255850673cbdd9ab6409ed17bd101106bbfe708e7cc9773e7a07cb11f52ad78cf22dc78ba31955469f4bc360479c5aef283ee33ecc61d845d4941131f7721

Field source: openSUSE Tumbleweed OSS

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable