SUSE-CU-2026:9761-1: Security update of rancher/elemental-operator

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: rancher/elemental-operator
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:9761-1
Container Tags        : rancher/elemental-operator:1.9.2 , rancher/elemental-operator:1.9.2-5.9 , rancher/elemental-operator:latest
Container Release     : 5.9
Severity              : moderate
Type                  : security
References            : 1263656 1263658 CVE-2026-5435 CVE-2026-6238 
-----------------------------------------------------------------

The container rancher/elemental-operator was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1157
Released:    Fri Jul  3 15:19:16 2026
Summary:     Security update for glibc
Type:        security
Severity:    moderate
References:  1263656,1263658,CVE-2026-5435,CVE-2026-6238
This update for glibc fixes the following issues

- CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656).
- CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure
  (bsc#1263658).


The following package changes have been done:

- elemental-operator1.9-1.9.2-160000.2.9 updated
- glibc-2.40-160000.6.1 updated
- container:bci-bci-base-16.0-ad95af6d4b236fa9854b30fc156984456c83dc7dd51684e200844e721861f542-0 updated