SUSE-IU-2026:8174-1: Security update of suse/sl-micro/6.2/kvm-os-container
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Fri Oct 23 09:05:30 UTC 2026
SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:8174-1
Image Tags : suse/sl-micro/6.2/kvm-os-container:2.3.2 , suse/sl-micro/6.2/kvm-os-container:2.3.2-9.1 , suse/sl-micro/6.2/kvm-os-container:latest
Image Release : 9.1
Severity : important
Type : security
References : 1117217 1181400 1254266 1261840 1267212 1272340 1273197 1273385
1281946 1282326 CVE-2026-16461 CVE-2026-94640
-----------------------------------------------------------------
The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: 1031
Released: Mon Jun 22 16:34:40 2026
Summary: Security update for rpcbind
Type: security
Severity: moderate
References: 1117217,1181400,1267212
This update for rpcbind fixes the following issues
- Update to rpcbind 1.2.9 (bsc#1267212)
https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/
* rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist()
* rpcbind: Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode
* rpcbind: fix memory leak in read_warmstart()
* rpcbind: fix memory leaks in network_init()
* rpcbind: fix memory leak in init_transport()
* Added -v (print version and compile flags)
* rpcinfo: Removed a number of 'old-style function definition' warnings
* man/rpcbind: Update list of options
* Comment out ListenStream=@/run/rpcbind.sock
* [nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
* systemd/rpcbind.service.in: Add various hardenings options
* man/rpcbind: Add Files section to manpage
* Moved rpcbind.lock and default configs to /run instead of /var/run
-----------------------------------------------------------------
Advisory ID: 1533
Released: Sun Aug 30 15:11:40 2026
Summary: Recommended update for nfs-utils
Type: recommended
Severity: moderate
References: 1273197
This update for nfs-utils fixes the following issues:
- nfs-client: make the rpcctl util executable (bsc#1273197)
-----------------------------------------------------------------
Advisory ID: 1613
Released: Sun Sep 6 18:45:15 2026
Summary: Security update for rpcbind
Type: security
Severity: moderate
References: 1272340,CVE-2026-16461
This update for rpcbind fixes the following issue:
- CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
-----------------------------------------------------------------
Advisory ID: 1784
Released: Tue Sep 29 18:14:17 2026
Summary: Security update for rpcbind
Type: security
Severity: important
References: 1282326,CVE-2026-94640
This update for rpcbind fixes the following issue:
- CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service
(bsc#1282326).
-----------------------------------------------------------------
Advisory ID: 746
Released: Mon Oct 19 11:42:32 2026
Summary: Recommended update for google-guest-configs
Type: recommended
Severity: important
References: 1254266,1261840,1273385,1281946
This update for google-guest-configs fixes the following issues:
Changes in google-guest-configs:
- Update to version 20260918.01 (bsc#1281946):
* Update SR-IOV udev rule for idpf network devices.
- from version 20260916.00:
* nic-naming: Fix IDPF VF device rename
- from version 20260915.00:
* Remove build.sh file
- from version 20260914.00:
* set_multiqueue: stop setting XPS at all on a4x/a5x
- from version 20260911.00:
* No public description
- from version 20260910.00:
* set_multiqueue: fix awk parsing for idpf ring len
- from version 20260819.00:
* set_multiqueue: Set IDPF ring length to 4096 by default
- from version 20260804.00:
* nic-naming: improve handling of BM IRDMA devices
- Update to version 20260729.00 (bsc#1273385):
* set_multiqueue: extend x4-specific configs to future x series
- Update to version 20260707.00:
* add nic naming support for CX-9 with VR200
- from version 20260623.00:
* Avoid eval in google-dhclient-script
- from version 20260617.00:
* Enable SR-IOV for specific Intel PCI devices.
- from version 20260521.00:
* Set max queue count for IDPF devices; remove broken virtio logic
- Update to version 20260428.00:
* gce-nic-naming: optimize runtime performance
- from version 20260401.00
* set_multiqueue: Consider c4n a 'multinic accelerator'
- Update to version 20260306.00:
* gce-nic-naming: fix divide-by-zero error
- from version 20260305.00:
* set_multiqueue: detect IRDMA devices using their `infiniband/` directory
- from version 20260303.00:
* set_multiqueue: Special tunes for x4 machine family
- from version 20260223.00:
* gce-nic-naming: restore fallback to hardcoded `ip` paths
- from version 20260121.00:
* set_multiqueue: set a4x-max ring len before irq affinity
- Install NetworkManager disptacher for SLE 16 and newer only
- Add NetworkManager-devel to BuildRequires
- Install NetworkManager dispatcher script (bsc#1254266)
The following package changes have been done:
- keyutils-1.6.3-160000.3.2 added
- libevent-2_1-7-2.1.12-160000.2.2 added
- libnfnetlink0-1.0.2-160000.3.2 added
- libnfsidmap1-1.0-160000.4.1 added
- libnftnl11-1.2.9-160000.2.2 added
- libtirpc-netconfig-1.3.6-160000.2.2 added
- system-user-nobody-20170617-160000.2.2 added
- libnetfilter_conntrack3-1.1.0-160000.2.2 added
- libtirpc3-1.3.6-160000.2.2 added
- xtables-plugins-1.8.11-160000.2.2 added
- rpcbind-1.2.9-160000.3.1 added
- iptables-1.8.11-160000.2.2 added
- nfs-client-2.8.2-160000.4.1 added
- libmnl0-1.0.5-160000.2.2 added
- libxtables12-1.8.11-160000.2.2 added
- libwrap0-7.6-160000.2.2 added
More information about the sle-container-updates
mailing list