SUSE-CU-2026:12041-1: Security update of suse/hpc/warewulf4-x86_64/sle-hpc-node

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12041-1
Container Tags        : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.180 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
Container Release     : 20.8.180
Severity              : important
Type                  : security
References            : 1272340 1278729 1282326 CVE-2026-16461 CVE-2026-94640 
-----------------------------------------------------------------

The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4525-1
Released:    Tue Oct  6 08:25:53 2026
Summary:     Recommended update for grub2
Type:        recommended
Severity:    moderate
References:  1278729
This update for grub2 fixes the following issues:

- Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4568-1
Released:    Wed Oct  7 17:24:48 2026
Summary:     Security update for rpcbind
Type:        security
Severity:    important
References:  1272340,1282326,CVE-2026-16461,CVE-2026-94640
This update for rpcbind fixes the following issues:

- CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
- CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service
  (bsc#1282326).


The following package changes have been done:

- grub2-i386-pc-2.12-150700.19.37.1 updated
- grub2-x86_64-efi-2.12-150700.19.37.1 updated
- grub2-2.12-150700.19.37.1 updated
- rpcbind-0.2.3-150000.5.17.1 updated