SUSE-CU-2026:311-1: Security update of rancher/seedimage-builder

sle-container-updates at lists.suse.com sle-container-updates at lists.suse.com
Tue Jan 20 08:05:14 UTC 2026


SUSE Container Update Advisory: rancher/seedimage-builder
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:311-1
Container Tags        : rancher/seedimage-builder:1.6.10 , rancher/seedimage-builder:1.6.10-9.1
Container Release     : 9.1
Severity              : important
Type                  : security
References            : 1159103 1211721 1219038 1221763 1224386 1227117 1241826 1241857
                        1244449 1245551 1246197 1246934 1248356 1248501 1249191 1249348
                        1249367 1249584 1250232 1251511 1251679 1253581 1253741 1253757
                        1253901 1254079 1254157 1254158 1254159 1254160 1254441 1254480
                        1254563 1255731 1255732 1255733 1255734 1256341 CVE-2025-10148
                        CVE-2025-10158 CVE-2025-11563 CVE-2025-13151 CVE-2025-14524 CVE-2025-14819
                        CVE-2025-15079 CVE-2025-15224 CVE-2025-22872 CVE-2025-47911 CVE-2025-47913
                        CVE-2025-47914 CVE-2025-58181 CVE-2025-58190 CVE-2025-59375 CVE-2025-64505
                        CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 CVE-2025-9086
                        CVE-2025-9230 
-----------------------------------------------------------------

The container rancher/seedimage-builder was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 477
Released:    Thu Sep 25 12:52:04 2025
Summary:     Security update for curl
Type:        security
Severity:    important
References:  1246197,1249191,1249348,1249367,CVE-2025-10148,CVE-2025-9086
This update for curl fixes the following issues:

- CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191)
- CVE-2025-10148: Predictable WebSocket mask (bsc#1249348)
- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]

- Updated to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Bugfixes:
    - asyn-thrdd: fix cleanup when RR fails due to OOM
    - ftp: fix teardown of DATA connection in done
    - http: fail early when rewind of input failed when following redirects
    - multi: fix add_handle resizing
    - tls BIOs: handle BIO_CTRL_EOF correctly
    - tool_getparam: make --no-anyauth not be accepted
    - wolfssl: fix sending of early data
    - ws: handle blocked sends better
    - ws: tests and fixes

- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.

- Update to 8.14.0:
  
  * Changes:
    - mqtt: send ping at upkeep interval
    - schannel: handle pkcs12 client certificates containing CA certificates
    - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
    - vquic: ngtcp2 + openssl support
    - wcurl: import v2025.04.20 script + docs
    - websocket: add option to disable auto-pong reply
  
  * Bugfixes:
    - asny-thrdd: fix detach from running thread
    - async-threaded resolver: use ref counter
    - async: DoH improvements
    - build: enable gcc-12/13+, clang-10+ picky warnings
    - build: enable gcc-15 picky warnings
    - certs: drop unused `default_bits` from `.prm` files
    - cf-https-connect: use the passed in dns struct pointer
    - cf-socket: fix FTP accept connect
    - cfilters: remove assert
    - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
    - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
    - cmake: revert `CURL_LTO` behavior for multi-config generators
    - configure: fix --disable-rt
    - CONTRIBUTE: add project guidelines for AI use
    - cpool/cshutdown: force close connections under pressure
    - curl: fix memory leak when -h is used in config file
    - curl_get_line: handle lines ending on the buffer boundary
    - headers: enforce a max number of response header to accept
    - http: fix HTTP/2 handling of TE request header using 'trailers'
    - lib: include files using known path
    - lib: unify conversions to/from hex
    - libssh: add NULL check for Curl_meta_get()
    - libssh: fix memory leak
    - mqtt: use conn/easy meta hash
    - multi: do transfer book keeping using mid
    - multi: init_do(): check result
    - netrc: avoid NULL deref on weird input
    - netrc: avoid strdup NULL
    - netrc: deal with null token better
    - openssl-quic: avoid potential `-Wnull-dereference`, add assert
    - openssl-quic: fix shutdown when stream not open
    - openssl: enable builds for *both* engines and providers
    - openssl: set the cipher string before doing private cert
    - progress: avoid integer overflow when gathering total transfer size
    - rand: update comment on Curl_rand_bytes weak random
    - rustls: make max size of cert and key reasonable
    - smb: avoid integer overflow on weird input date
    - urlapi: redirecting to '' is considered fine

- Update to 8.13.0:
  
  * Changes:
    - curl: add write-out variable 'tls_earlydata'
    - curl: make --url support a file with URLs
    - gnutls: set priority via --ciphers
    - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
    - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
    - OpenSSL/quictls: add support for TLSv1.3 early data
    - rustls: add support for CERTINFO
    - rustls: add support for SSLKEYLOGFILE
    - rustls: support ECH w/ DoH lookup for config
    - rustls: support native platform verifier
    - var: add a '64dec' function that can base64 decode a string
  
  * Bugfixes:
    - conn: fix connection reuse when SSL is optional
    - hash: use single linked list for entries
    - http2: detect session being closed on ingress handling
    - http2: reset stream on response header error
    - http: remove a HTTP method size restriction
    - http: version negotiation
    - httpsrr: fix port detection
    - libssh: fix freeing of resources in disconnect
    - libssh: fix scp large file upload for 32-bit size_t systems
    - openssl-quic: do not iterate over multi handles
    - openssl: check return value of X509_get0_pubkey
    - openssl: drop support for old OpenSSL/LibreSSL versions
    - openssl: fix crash on missing cert password
    - openssl: fix pkcs11 URI checking for key files.
    - openssl: remove bad `goto`s into other scope
    - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
    - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
    - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
    - sshserver: fix excluding obsolete client config lines
    - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
    - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
    - tool_operate: fail SSH transfers without server auth
    - url: call protocol handler's disconnect in Curl_conn_free
    - urlapi: remove percent encoded dot sequences from the URL path
    - urldata: remove 'hostname' from struct Curl_async

- Update to 8.12.1:
  
  * Bugfixes:
    - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
    - asyn-thread: fix HTTPS RR crash
    - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
    - asyn-thread: survive a c-ares channel set to NULL
    - cmake: always reference OpenSSL and ZLIB via imported targets
    - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
    - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
    - content_encoding: #error on too old zlib
    - imap: TLS upgrade fix
    - ldap: drop support for legacy Novell LDAP SDK
    - libssh2: comparison is always true because rc <= -1
    - libssh2: raise lowest supported version to 1.2.8
    - libssh: drop support for libssh older than 0.9.0
    - openssl-quic: ignore ciphers for h3
    - pop3: TLS upgrade fix
    - runtests: fix the disabling of the memory tracking
    - runtests: quote commands to support paths with spaces
    - scache: add magic checks
    - smb: silence '-Warray-bounds' with gcc 13+
    - smtp: TLS upgrade fix
    - tool_cfgable: sort struct fields by size, use bitfields for booleans
    - tool_getparam: add 'TLS required' flag for each such option
    - vtls: fix multissl-init
    - wakeup_write: make sure the eventfd write sends eight bytes

- Update to 8.12.0:
  
  * Changes:
    - curl: add byte range support to --variable reading from file
    - curl: make --etag-save acknowledge --create-dirs
    - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
    - getinfo: provide info which auth was used for HTTP and proxy
    - hyper: drop support
    - openssl: add support to use keys and certificates from PKCS#11 provider
    - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
    - vtls: feature ssls-export for SSL session im-/export
  
  * Bugfixes:
    - altsvc: avoid integer overflow in expire calculation
    - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
    - asyn-ares: fix memory leak
    - asyn-ares: initial HTTPS resolve support
    - asyn-thread: use c-ares to resolve HTTPS RR
    - async-thread: avoid closing eventfd twice
    - cd2nroff: do not insist on quoted <> within backticks
    - cd2nroff: support 'none' as a TLS backend
    - conncache: count shutdowns against host and max limits
    - content_encoding: drop support for zlib before 1.2.0.4
    - content_encoding: namespace GZIP flag constants
    - content_encoding: put the decomp buffers into the writer structs
    - content_encoding: support use of custom libzstd memory functions
    - cookie: cap expire times to 400 days
    - cookie: parse only the exact expire date
    - curl: return error if etag options are used with multiple URLs
    - curl_multi_fdset: include the shutdown connections in the set
    - curl_sha512_256: rename symbols to the curl namespace
    - curl_url_set.md: adjust the added-in to 7.62.0
    - doh: send HTTPS RR requests for all HTTP(S) transfers
    - easy: allow connect-only handle reuse with easy_perform
    - easy: make curl_easy_perform() return error if connection still there
    - easy_lock: use Sleep(1) for thread yield on old Windows
    - ECH: update APIs to those agreed with OpenSSL maintainers
    - GnuTLS: fix 'time_appconnect' for early data
    - HTTP/2: strip TE request header
    - http2: fix data_pending check
    - http2: fix value stored to 'result' is never read
    - http: ignore invalid Retry-After times
    - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
    - https-connect: start next immediately on failure
    - lib: redirect handling by protocol handler
    - multi: fix curl_multi_waitfds reporting of fd_count
    - netrc: 'default' with no credentials is not a match
    - netrc: fix password-only entries
    - netrc: restore _netrc fallback logic
    - ngtcp2: fix memory leak on connect failure
    - openssl: define `HAVE_KEYLOG_CALLBACK` before use
    - openssl: fix ECH logic
    - osslq: use SSL_poll to determine writeability of QUIC streams
    - sectransp: free certificate on error
    - select: avoid a NULL deref in cwfds_add_sock
    - src: omit hugehelp and ca-embed from libcurltool
    - ssl session cache: change cache dimensions
    - system.h: add 64-bit curl_off_t definitions for NonStop
    - telnet: handle single-byte input option
    - TLS: check connection for SSL use, not handler
    - tool_formparse.c: make curlx_uztoso a static in here
    - tool_formparse: accept digits in --form type= strings
    - tool_getparam: ECH param parsing refix
    - tool_getparam: fail --hostpubsha256 if libssh2 is not used
    - tool_getparam: fix 'Ignored Return Value'
    - tool_getparam: fix memory leak on error in parse_ech
    - tool_getparam: fix the ECH parser
    - tool_operate: make --etag-compare always accept a non-existing file
    - transfer: fix CURLOPT_CURLU override logic
    - urlapi: fix redirect to a new fragment or query (only)
    - vquic: make vquic_send_packets not return without setting psent
    - vtls: fix default SSL backend as a fallback
    - vtls: only remember the expiry timestamp in session cache
    - websocket: fix message send corruption
    - x509asn1: add parse recursion limit

-----------------------------------------------------------------
Advisory ID: 485
Released:    Thu Oct  9 16:42:20 2025
Summary:     Security update for aaa_base
Type:        security
Severity:    moderate
References:  1159103,1211721,1219038,1221763,1227117
This update for aaa_base fixes the following issues:

Update to version 84.87+git20240906.742565b:

  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)

Update to version 84.87+git20240821.fbabe1d:

  * Add helper service for soft-reboot

Update to version 84.87+git20240809.5d13eb4:

  * cleanup aaa_base.post and fold back into specfile

Update to version 84.87+git20240805.7513b28:

  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]

Update to version 84.87+git20240801.75f05dd:

  * sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)

Update to version 84.87+git20240620.57ee9e1:

  * Remove legacy-actions support [jsc#PED-264]

Update to version 84.87+git20240617.f5ff27f:

  * add /usr/bin/nu to etc/shells for nushell

Update to version 84.87+git20240614.332933e:

  * Do not save/restore cursor for foot at status line
  * Add tmux and others to DIR_COLORS (Issue #116)
  * Remove kernel.pid_max limit (bsc#1219038)
  * Add subpackge to enable ptrace

Update to version 84.87+git20240523.10a5692:

  * Add tmpfiles.d/soft-reboot-cleanup.conf

Update to version 84.87+git20240415.e6815bf:

  * drop obsolete 50-default-s390.conf (bsc#1211721)
  * fix typo in alljava.csh and drop stderr redirection

Update to version 84.87+git20240402.16596d1:

  * add alacritty to DIR_COLORS
  * Make sure tput it present before resetting TERM
  * Add mc helpers for both tcsh and bash resources
  * Do not overwrite escape sequences for xterm like
  * Check for valid TERM

Update to version 84.87+git20240202.9526d46:

  * properly shorten the variable when setting JAVA_HOME and JRE_HOME
  * silence output of alljava
  * Restrict ptrace with Yama LSM by default
  * patch alljava.sh and alljava.csh, use the links from update alternatives

Update to version 84.87+git20231023.f347d36:

  * Remove %ghost lastlog entry, lastlog is long gone
  * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)


-----------------------------------------------------------------
Advisory ID: 496
Released:    Mon Oct 20 18:12:21 2025
Summary:     Security update for openssl-3
Type:        security
Severity:    moderate
References:  1250232,CVE-2025-9230
This update for openssl-3 fixes the following issues:

- CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232)
- Disable LTO for userspace livepatching [jsc#PED-13245]


-----------------------------------------------------------------
Advisory ID: 500
Released:    Wed Oct 22 14:00:46 2025
Summary:     Security update for expat
Type:        security
Severity:    important
References:  1249584,CVE-2025-59375
This update for expat fixes the following issues:

- CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations
  by submitting crafted XML input (bsc#1249584).

-----------------------------------------------------------------
Advisory ID: 509
Released:    Mon Nov  3 08:22:32 2025
Summary:     Recommended update for libgcrypt
Type:        recommended
Severity:    moderate
References:  1246934
This update for libgcrypt fixes the following issues:

- Fix running the test suite in FIPS mode (bsc#1246934)

-----------------------------------------------------------------
Advisory ID: 528
Released:    Mon Dec  1 09:45:21 2025
Summary:     Recommended update for kmod
Type:        recommended
Severity:    important
References:  1253741
This update for kmod fixes the following issues:

- Fix modprobe.d confusion on man page (bsc#1253741):
    * document the config file order handling

-----------------------------------------------------------------
Advisory ID: 529
Released:    Tue Dec  9 08:19:13 2025
Summary:     Security update for curl
Type:        security
Severity:    moderate
References:  1253757,CVE-2025-11563
This update for curl fixes the following issues:

- CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757).

-----------------------------------------------------------------
Advisory ID: 536
Released:    Tue Dec 16 09:31:52 2025
Summary:     Security update for libpng16
Type:        security
Severity:    important
References:  1254157,1254158,1254159,1254160,1254480,CVE-2025-64505,CVE-2025-64506,CVE-2025-64720,CVE-2025-65018,CVE-2025-66293
This update for libpng16 fixes the following issues:

- CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480).
- CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157).
- CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158).
- CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159).
- CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160).

-----------------------------------------------------------------
Advisory ID: 537
Released:    Tue Dec 16 16:38:50 2025
Summary:     Recommended update for systemd
Type:        recommended
Severity:    important
References:  1224386,1244449,1245551,1248356,1248501,1254563
This update for systemd fixes the following issues:

- timer: rebase last_trigger timestamp if needed
- timer: rebase the next elapse timestamp only if timer didn't already run
- timer: don't run service immediately after restart of a timer (bsc#1254563)
- test: check the next elapse timer timestamp after deserialization
- test: restarting elapsed timer shouldn't trigger the corresponding service
- units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
- units: add dep on systemd-logind.service by user at .service
- detect-virt: add bare-metal support for GCE (bsc#1244449)
- Sync systemd-update-helper with the version shipped in Base:System
- systemd-update-helper: do not stop or disable services when they are migrated
  to other packages. This can occur during package renaming or splitting.
- systemd-update-helper: Fix invalid use of 'break' in case statement
- systemd-update-helper: fix regression introduced when support for package
  renaming/splitting was added (bsc#1245551)
- systemd-update-helper:
     * Since user at .service has `Type=notify-reload` and reloading implies reexecuting 
       with `ReloadSignal=RTMIN+25`, reexecuting user managers synchronously 
       can be achieved with `systemctl reload user@*.service' now.
- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre (bsc#1248501)
- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)

-----------------------------------------------------------------
Advisory ID: 546
Released:    Thu Jan  8 16:18:54 2026
Summary:     Security update for curl
Type:        security
Severity:    moderate
References:  1255731,1255732,1255733,1255734,CVE-2025-14524,CVE-2025-14819,CVE-2025-15079,CVE-2025-15224
This update for curl fixes the following issues:

- CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731).
- CVE-2025-14819: libssh global knownhost override (bsc#1255732).
- CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733).
- CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).

-----------------------------------------------------------------
Advisory ID: 551
Released:    Thu Jan  8 16:49:46 2026
Summary:     Security update for rsync
Type:        security
Severity:    moderate
References:  1254441,CVE-2025-10158
This update for rsync fixes the following issues:

- CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)

-----------------------------------------------------------------
Advisory ID: 558
Released:    Mon Jan 12 13:00:27 2026
Summary:     Security update for libtasn1
Type:        security
Severity:    moderate
References:  1256341,CVE-2025-13151
This update for libtasn1 fixes the following issues:

- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in
  `asn1_expend_octet_string` (bsc#1256341).

-----------------------------------------------------------------
Advisory ID: 561
Released:    Thu Jan 15 12:08:38 2026
Summary:     Security update for elemental-toolkit, elemental-operator
Type:        security
Severity:    important
References:  1241826,1241857,1251511,1251679,1253581,1253901,1254079,CVE-2025-22872,CVE-2025-47911,CVE-2025-47913,CVE-2025-47914,CVE-2025-58181,CVE-2025-58190
This update for elemental-toolkit, elemental-operator fixes the following issues:

elemental-operator:

  - Update to version 1.6.10:

    * Remove 'latest' tag as this overlaps with the latest branch
    * Bump github.com/rancher-sandbox/go-tpm and its dependencies
      This bump includes fixes to some CVEs:
      * bsc#1241826 (CVE-2025-22872)
      * bsc#1241857 (CVE-2025-22872)
      * bsc#1251511 (CVE-2025-47911)
      * bsc#1251679 (CVE-2025-58190)

elemental-toolkit:

  - Update to version 2.1.5:

    * Update headers for new year 2026
    * Disable selinux in installer media

  - Update to version 2.1.4:

    * Remove leftovers in installer integration test
    * Bump to build against go 1.24
    * Bump golang.org/x/crypto library
      This bump includes fixes to some CVEs:

      * bsc#1241826 (CVE-2025-22872)
      * bsc#1241857 (CVE-2025-22872)
      * bsc#1251511 (CVE-2025-47911)
      * bsc#1251679 (CVE-2025-58190)
      * bsc#1253581 (CVE-2025-47913)
      * bsc#1253901 (CVE-2025-58181)
      * bsc#1254079 (CVE-2025-47914)



The following package changes have been done:

- boost-license1_84_0-1.84.0-1.4 updated
- btrfsprogs-udev-rules-6.1.3-6.19 updated
- compat-usrmerge-tools-84.87-3.1 updated
- crypto-policies-20230920.570ea89-1.50 updated
- elemental-httpfy-1.6.10-1.1 updated
- elemental-seedimage-hooks-1.6.10-1.1 updated
- file-magic-5.44-4.151 added
- kbd-legacy-2.6.4-1.3 added
- libsemanage-conf-3.5-3.1 updated
- pkgconf-m4-1.8.0-2.205 updated
- system-user-root-20190513-2.208 updated
- filesystem-84.87-5.2 updated
- glibc-2.38-9.1 updated
- libzstd1-1.5.5-8.142 updated
- libz1-1.2.13-6.138 updated
- libxxhash0-0.8.1-2.194 updated
- libuuid1-2.39.3-3.1 updated
- liburcu8-0.14.0-2.8 updated
- libunistring5-1.1-3.1 updated
- libtextstyle0-0.21.1-6.1 updated
- libtasn1-6-4.19.0-5.1 updated
- libsmartcols1-2.39.3-3.1 updated
- libsepol2-3.5-3.1 updated
- libseccomp2-2.5.4-3.1 updated
- libpopt0-1.19-2.184 updated
- libpkgconf3-1.8.0-2.205 updated
- libpcre2-8-0-10.42-2.179 updated
- libparted-fs-resize0-3.5-2.11 updated
- libnss_usrfiles2-2.27-3.1 updated
- libnghttp2-14-1.52.0-5.1 updated
- liblzo2-2-2.10-3.1 updated
- liblzma5-5.4.3-5.1 updated
- liblz4-1-1.9.4-4.1 updated
- liblua5_4-5-5.4.6-1.68 updated
- libjson-c5-0.16-3.1 updated
- libjitterentropy3-3.4.1-3.1 updated
- libip4tc2-1.8.9-4.1 updated
- libgpg-error0-1.47-4.136 updated
- libgmp10-6.3.0-1.119 updated
- libgcc_s1-13.3.0+git8781-2.1 updated
- libfuse2-2.9.9-3.1 updated
- libffi8-3.4.4-3.1 updated
- libexpat1-2.7.1-3.1 updated
- libeconf0-0.6.1-1.13 updated
- libcrypt1-4.4.36-1.134 updated
- libcom_err2-1.47.0-3.1 updated
- libcap2-2.69-2.83 updated
- libcap-ng0-0.8.3-4.1 updated
- libbz2-1-1.0.8-3.1 updated
- libburn4-1.5.4-1.9 updated
- libbtrfsutil1-6.1.3-6.19 updated
- libbtrfs0-6.1.3-6.19 updated
- libbrotlicommon1-1.1.0-1.6 updated
- libblkid1-2.39.3-3.1 updated
- libaudit1-3.0.9-4.1 updated
- libattr1-2.5.1-3.1 updated
- libargon2-1-20190702-3.1 updated
- libalternatives1-1.2+30.a5431e9-3.1 updated
- libaio1-0.3.113-3.1 updated
- libacl1-2.3.1-3.1 updated
- fillup-1.42-3.1 updated
- dosfstools-4.2-2.9 updated
- diffutils-3.10-2.101 updated
- libpng16-16-1.6.43-2.1 updated
- libidn2-0-2.3.4-3.1 updated
- pkgconf-1.8.0-2.205 updated
- libselinux1-3.5-3.1 updated
- netcfg-11.6-4.42 updated
- libxml2-2-2.11.6-10.1 updated
- squashfs-4.6.1-3.7 updated
- libgcrypt20-1.10.3-3.1 updated
- libstdc++6-13.3.0+git8781-2.1 updated
- libp11-kit0-0.25.3-1.6 updated
- perl-base-5.38.2-4.1 updated
- libext2fs2-1.47.0-3.1 updated
- libudev1-254.27-2.1 updated
- chkstat-1600_20240206-1.8 updated
- libzio1-1.08-3.1 updated
- libmagic1-5.44-4.151 added
- libjte2-1.22-1.8 updated
- libbrotlidec1-1.1.0-1.6 updated
- libfdisk1-2.39.3-3.1 updated
- alts-1.2+30.a5431e9-3.1 updated
- libpsl5-0.21.2-3.1 updated
- sed-4.9-2.9 updated
- libsubid4-4.15.1-1.1 updated
- libsemanage2-3.5-3.1 updated
- libmount1-2.39.3-3.1 updated
- findutils-4.9.0-4.1 updated
- libsystemd0-254.27-2.1 updated
- libncurses6-6.4.20240224-10.2 updated
- terminfo-base-6.4.20240224-10.2 updated
- libinih0-56-3.1 updated
- libboost_thread1_84_0-1.84.0-1.4 updated
- p11-kit-0.25.3-1.6 updated
- p11-kit-tools-0.25.3-1.6 updated
- libisofs6-1.5.4-1.9 updated
- libfreetype6-2.13.3-1.1 updated
- ncurses-utils-6.4.20240224-10.2 updated
- libreadline8-8.2-2.180 updated
- libedit0-20210910.3.1-9.169 updated
- gptfdisk-1.0.9-4.1 updated
- libisoburn1-1.5.4-1.9 updated
- bash-5.2.15-3.1 updated
- bash-sh-5.2.15-3.1 updated
- xz-5.4.3-5.1 updated
- systemd-default-settings-branding-openSUSE-0.7-2.4 updated
- systemd-default-settings-0.7-2.4 updated
- pkgconf-pkg-config-1.8.0-2.205 updated
- login_defs-4.15.1-1.1 updated
- libdevmapper1_03-2.03.22_1.02.196-1.8 updated
- gzip-1.13-1.50 updated
- grep-3.11-4.8 updated
- gettext-runtime-0.21.1-6.1 updated
- coreutils-9.4-5.1 updated
- ALP-dummy-release-0.1-8.67 updated
- libparted2-3.5-2.11 updated
- libdevmapper-event1_03-2.03.22_1.02.196-1.8 updated
- info-7.0.3-4.1 updated
- xfsprogs-6.5.0-1.9 updated
- thin-provisioning-tools-0.9.0-2.10 updated
- systemd-rpm-macros-24-1.205 updated
- systemd-presets-common-SUSE-15-5.1 updated
- rpm-config-SUSE-20240214-1.1 updated
- rpm-4.18.0-7.1 updated
- permissions-config-1600_20240206-1.8 updated
- glibc-locale-base-2.38-9.1 updated
- e2fsprogs-1.47.0-3.1 updated
- ca-certificates-2+git20230406.2dae8b7-3.1 updated
- ca-certificates-mozilla-2.74-1.1 updated
- btrfsprogs-6.1.3-6.19 updated
- parted-3.5-2.11 updated
- liblvm2cmd2_03-2.03.22-1.8 updated
- xorriso-1.5.4-1.9 updated
- device-mapper-2.03.22_1.02.196-1.8 updated
- systemd-presets-branding-ALP-transactional-20230214-3.1 updated
- permissions-1600_20240206-1.8 updated
- mtools-4.0.43-4.9 updated
- libopenssl3-3.1.4-10.1 updated
- pam-1.6.0-5.1 updated
- grub2-2.12~rc1-7.1 updated
- grub2-i386-pc-2.12~rc1-7.1 updated
- suse-module-tools-16.0.43-1.1 updated
- kmod-30-11.1 updated
- rsync-3.2.7-5.1 updated
- libkmod2-30-11.1 updated
- libcurl-mini4-8.14.1-3.1 added
- libcryptsetup12-2.6.1-4.13 updated
- util-linux-2.39.3-3.1 updated
- shadow-4.15.1-1.1 updated
- pam-config-2.11-2.1 updated
- kbd-2.6.4-1.3 updated
- curl-8.14.1-3.1 updated
- libsnapper7-0.10.5-2.10 updated
- aaa_base-84.87+git20240906.742565b-1.1 updated
- dbus-1-daemon-1.14.10-1.11 updated
- dbus-1-tools-1.14.10-1.11 updated
- systemd-254.27-2.1 updated
- sysuser-shadow-3.1-2.197 updated
- dbus-1-common-1.14.10-1.11 updated
- libdbus-1-3-1.14.10-1.11 updated
- dbus-1-1.14.10-1.11 updated
- system-group-kvm-20170617-2.197 updated
- system-group-hardware-20170617-2.197 updated
- udev-254.27-2.1 updated
- snapper-0.10.5-2.10 updated
- lvm2-2.03.22-1.8 updated
- elemental-toolkit-2.1.5-1.1 updated
- container:suse-toolbox-image-1.0.0-9.60 updated
- krb5-1.21.3-slfo.1.1_2.1 removed
- libcurl4-8.14.1-slfo.1.1_5.1 removed
- libkeyutils1-1.6.3-slfo.1.1_1.3 removed
- libldap2-2.6.4-slfo.1.1_1.2 removed
- libsasl2-3-2.1.28-slfo.1.1_1.2 removed
- libssh-config-0.10.6-slfo.1.1_3.1 removed
- libssh4-0.10.6-slfo.1.1_3.1 removed
- libverto1-0.3.2-slfo.1.1_1.2 removed


More information about the sle-container-updates mailing list