The pesign fix is also in Factory now. https://build.opensuse.org/request/show/1063715 Reassign the bug to the security team.