SUSE-CU-2026:9764-1: Security update of rancher/elemental-operator

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: rancher/elemental-operator
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:9764-1
Container Tags        : rancher/elemental-operator:1.8.2 , rancher/elemental-operator:1.8.2-6.9
Container Release     : 6.9
Severity              : moderate
Type                  : security
References            : 1263656 1263658 CVE-2026-5435 CVE-2026-6238 
-----------------------------------------------------------------

The container rancher/elemental-operator was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1157
Released:    Fri Jul  3 15:19:16 2026
Summary:     Security update for glibc
Type:        security
Severity:    moderate
References:  1263656,1263658,CVE-2026-5435,CVE-2026-6238
This update for glibc fixes the following issues

- CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656).
- CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure
  (bsc#1263658).


The following package changes have been done:

- compat-usrmerge-tools-84.87-160000.2.2 updated
- elemental-operator-1.8.2-160000.2.9 updated
- system-user-root-20190513-160000.2.2 updated
- filesystem-84.87-160000.2.2 updated
- glibc-2.40-160000.6.1 updated
- terminfo-base-6.5.20250531-160000.3.1 updated
- libncurses6-6.5.20250531-160000.3.1 updated
- libtasn1-6-4.21.0-160000.1.1 updated
- libpcre2-8-0-10.45-160000.3.1 updated
- libgmp10-6.3.0-160000.2.2 updated
- libffi8-3.4.6-160000.2.2 updated
- libcap2-2.73-160000.3.1 updated
- libattr1-2.5.2-160000.2.2 updated
- libacl1-2.3.2-160000.2.2 updated
- libreadline8-8.2.13-160000.2.2 updated
- libselinux1-3.8.1-160000.4.1 updated
- libp11-kit0-0.25.5-160000.2.2 updated
- bash-5.2.37-160000.2.2 updated
- bash-sh-5.2.37-160000.2.2 updated
- p11-kit-0.25.5-160000.2.2 updated
- p11-kit-tools-0.25.5-160000.2.2 updated
- coreutils-9.6-160000.2.2 updated
- ca-certificates-2+git20240805.fd24d50-160000.2.2 updated
- ca-certificates-mozilla-2.84-160000.1.1 updated
- container:bci-bci-base-16.0-ad95af6d4b236fa9854b30fc156984456c83dc7dd51684e200844e721861f542-0 added
- container:suse-toolbox-image-1.0.0-5.102 removed
- libgcc_s1-14.3.0+git11799-slfo.1.1_1.1 removed
- libstdc++6-14.3.0+git11799-slfo.1.1_1.1 removed