SUSE-CU-2026:9767-1: Security update of rancher/seedimage-builder
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Wed Sep 9 07:07:48 UTC 2026
SUSE Container Update Advisory: rancher/seedimage-builder
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:9767-1
Container Tags : rancher/seedimage-builder:1.7.5 , rancher/seedimage-builder:1.7.5-6.20
Container Release : 6.20
Severity : important
Type : security
References : 1252752 1262225 1262226 1262227 1262228 1262232 1271045 CVE-2025-14813
CVE-2025-62725 CVE-2026-0636 CVE-2026-3505 CVE-2026-50811 CVE-2026-5588
CVE-2026-5598
-----------------------------------------------------------------
The container rancher/seedimage-builder was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: 643
Released: Fri Apr 24 17:29:58 2026
Summary: Security update for bouncycastle
Type: security
Severity: important
References: 1252752,1262225,1262226,1262227,1262228,1262232,1271045,CVE-2025-14813,CVE-2025-62725,CVE-2026-0636,CVE-2026-3505,CVE-2026-50811,CVE-2026-5588,CVE-2026-5598
This update for bouncycastle fixes the following issues:
- Update to version 1.84:
- CVE-2025-14813: GOSTCTR implementation unable to process more than 255 blocks correctly (bsc#1262225).
- CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java (bsc#1262226).
- CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (bsc#1262232).
- CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature sequence as valid (bsc#1262228).
- CVE-2026-5598: Non-constant time comparisons risk private key leakage in FrodoKEM (bsc#1262227).
The following package changes have been done:
- boost-license1_84_0-1.84.0-slfo.1.1_1.4 updated
- btrfsprogs-udev-rules-6.8.1-slfo.1.1_1.2 updated
- compat-usrmerge-tools-84.87-slfo.1.1_1.5 updated
- crypto-policies-20230920.570ea89-slfo.1.1_2.1 updated
- elemental-httpfy-1.7.5-slfo.1.1_1.1 updated
- elemental-seedimage-hooks-1.7.5-slfo.1.1_1.1 updated
- libsemanage-conf-3.5-slfo.1.1_1.3 updated
- libssh-config-0.10.6-slfo.1.1_6.1 added
- pkgconf-m4-1.8.0-slfo.1.1_1.5 updated
- system-user-root-20190513-slfo.1.1_1.2 updated
- filesystem-84.87-slfo.1.1_1.2 updated
- glibc-2.38-slfo.1.1_9.1 updated
- libzstd1-1.5.5-slfo.1.1_1.4 updated
- libz1-1.2.13-slfo.1.1_2.1 updated
- libxxhash0-0.8.1-slfo.1.1_2.1 updated
- libverto1-0.3.2-slfo.1.1_1.2 added
- libuuid1-2.40.4-slfo.1.1_7.1 updated
- liburcu8-0.14.0-slfo.1.1_1.3 updated
- libunistring5-1.1-slfo.1.1_1.2 updated
- libtextstyle0-0.21.1-slfo.1.1_2.1 updated
- libtasn1-6-4.19.0-slfo.1.1_3.1 updated
- libsmartcols1-2.40.4-slfo.1.1_7.1 updated
- libsepol2-3.5-slfo.1.1_1.3 updated
- libseccomp2-2.5.4-slfo.1.1_1.4 updated
- libsasl2-3-2.1.28-slfo.1.1_1.2 added
- libpopt0-1.19-slfo.1.1_1.3 updated
- libpkgconf3-1.8.0-slfo.1.1_1.5 updated
- libpcre2-8-0-10.42-slfo.1.1_1.4 updated
- libparted-fs-resize0-3.5-slfo.1.1_1.2 updated
- libnss_usrfiles2-2.27-slfo.1.1_1.3 updated
- libnghttp2-14-1.52.0-slfo.1.1_3.1 updated
- liblzo2-2-2.10-slfo.1.1_1.3 updated
- liblzma5-5.4.3-slfo.1.1_3.1 updated
- liblz4-1-1.9.4-slfo.1.1_1.2 updated
- liblua5_4-5-5.4.6-slfo.1.1_1.3 updated
- libkeyutils1-1.6.3-slfo.1.1_1.3 added
- libjson-c5-0.16-slfo.1.1_1.2 updated
- libjitterentropy3-3.4.1-slfo.1.1_1.3 updated
- libip4tc2-1.8.9-slfo.1.1_2.1 updated
- libgpg-error0-1.47-slfo.1.1_1.3 updated
- libgmp10-6.3.0-slfo.1.1_1.5 updated
- libgcc_s1-14.3.0+git11799-slfo.1.1_1.1 updated
- libfuse2-2.9.9-slfo.1.1_1.2 updated
- libffi8-3.4.6-slfo.1.1_1.4 updated
- libexpat1-2.7.1-slfo.1.1_5.1 updated
- libeconf0-0.7.2-slfo.1.1_1.3 updated
- libcrypt1-4.4.36-slfo.1.1_1.4 updated
- libcom_err2-1.47.0-slfo.1.1_1.2 updated
- libcap2-2.69-slfo.1.1_2.1 updated
- libcap-ng0-0.8.3-slfo.1.1_1.4 updated
- libbz2-1-1.0.8-slfo.1.1_2.1 updated
- libburn4-1.5.4-slfo.1.1_1.2 updated
- libbtrfsutil1-6.8.1-slfo.1.1_1.2 updated
- libbtrfs0-6.8.1-slfo.1.1_1.2 updated
- libbrotlicommon1-1.1.0-slfo.1.1_1.3 updated
- libaudit1-3.1.1-slfo.1.1_2.1 updated
- libattr1-2.5.1-slfo.1.1_1.3 updated
- libargon2-1-20190702-slfo.1.1_1.2 updated
- libalternatives1-1.2+30.a5431e9-slfo.1.1_1.3 updated
- libaio1-0.3.113-slfo.1.1_1.2 updated
- libacl1-2.3.1-slfo.1.1_1.3 updated
- fillup-1.42-slfo.1.1_2.2 updated
- dosfstools-4.2-slfo.1.1_1.2 updated
- diffutils-3.10-slfo.1.1_1.3 updated
- libpng16-16-1.6.58-slfo.1.1_1.1 updated
- libidn2-0-2.3.4-slfo.1.1_1.2 updated
- pkgconf-1.8.0-slfo.1.1_1.5 updated
- libselinux1-3.5-slfo.1.1_1.3 updated
- netcfg-11.6-slfo.1.1_1.2 updated
- libxml2-2-2.11.6-slfo.1.1_9.1 updated
- squashfs-4.6.1-slfo.1.1_1.2 updated
- libgcrypt20-1.10.3-slfo.1.1_4.1 updated
- libstdc++6-14.3.0+git11799-slfo.1.1_1.1 updated
- libp11-kit0-0.25.3-slfo.1.1_1.2 updated
- libblkid1-2.40.4-slfo.1.1_7.1 updated
- perl-base-5.38.2-slfo.1.1_3.1 updated
- libext2fs2-1.47.0-slfo.1.1_1.2 updated
- libudev1-254.27-slfo.1.1_5.1 updated
- chkstat-1600_20240206-slfo.1.1_1.5 updated
- libzio1-1.08-slfo.1.1_1.3 updated
- libjte2-1.22-slfo.1.1_1.2 updated
- libbrotlidec1-1.1.0-slfo.1.1_1.3 updated
- alts-1.2+30.a5431e9-slfo.1.1_1.3 updated
- libpsl5-0.21.2-slfo.1.1_1.2 updated
- sed-4.9-slfo.1.1_2.1 updated
- libsubid4-4.15.1-slfo.1.1_1.3 updated
- libsemanage2-3.5-slfo.1.1_1.3 updated
- findutils-4.9.0-slfo.1.1_2.1 updated
- libsystemd0-254.27-slfo.1.1_5.1 updated
- libncurses6-6.4.20240224-slfo.1.1_2.1 updated
- terminfo-base-6.4.20240224-slfo.1.1_2.1 updated
- libinih0-56-slfo.1.1_1.3 updated
- libboost_thread1_84_0-1.84.0-slfo.1.1_1.4 updated
- p11-kit-0.25.3-slfo.1.1_1.2 updated
- p11-kit-tools-0.25.3-slfo.1.1_1.2 updated
- libmount1-2.40.4-slfo.1.1_7.1 updated
- libfdisk1-2.40.4-slfo.1.1_7.1 updated
- libisofs6-1.5.4-slfo.1.1_1.2 updated
- libfreetype6-2.14.3-slfo.1.1_1.1 updated
- ncurses-utils-6.4.20240224-slfo.1.1_2.1 updated
- libreadline8-8.2-slfo.1.1_1.4 updated
- libedit0-20210910.3.1-slfo.1.1_1.3 updated
- gptfdisk-1.0.9-slfo.1.1_2.1 updated
- libisoburn1-1.5.4-slfo.1.1_1.2 updated
- bash-5.2.15-slfo.1.1_1.6 updated
- bash-sh-5.2.15-slfo.1.1_1.6 updated
- xz-5.4.3-slfo.1.1_3.1 updated
- systemd-default-settings-branding-openSUSE-0.7-slfo.1.1_1.2 updated
- systemd-default-settings-0.7-slfo.1.1_1.2 updated
- pkgconf-pkg-config-1.8.0-slfo.1.1_1.5 updated
- login_defs-4.15.1-slfo.1.1_1.3 updated
- libdevmapper1_03-2.03.22_1.02.196-slfo.1.1_1.3 updated
- gzip-1.13-slfo.1.1_4.1 updated
- grep-3.11-slfo.1.1_1.2 updated
- gettext-runtime-0.21.1-slfo.1.1_2.1 updated
- coreutils-9.4-slfo.1.1_2.1 updated
- ALP-dummy-release-0.1-slfo.1.1_1.5 updated
- libparted2-3.5-slfo.1.1_1.2 updated
- libdevmapper-event1_03-2.03.22_1.02.196-slfo.1.1_1.3 updated
- info-7.0.3-slfo.1.1_1.3 updated
- xfsprogs-6.5.0-slfo.1.1_1.2 updated
- thin-provisioning-tools-0.9.0-slfo.1.1_1.4 updated
- systemd-rpm-macros-24-slfo.1.1_1.2 updated
- systemd-presets-common-SUSE-15-slfo.1.1_1.2 updated
- rpm-config-SUSE-20240214-slfo.1.1_1.2 updated
- rpm-4.18.0-slfo.1.1_3.1 updated
- permissions-config-1600_20240206-slfo.1.1_1.5 updated
- glibc-locale-base-2.38-slfo.1.1_9.1 updated
- e2fsprogs-1.47.0-slfo.1.1_1.2 updated
- ca-certificates-2+git20240805.fd24d50-slfo.1.1_1.2 updated
- ca-certificates-mozilla-2.84-slfo.1.1_1.1 updated
- btrfsprogs-6.8.1-slfo.1.1_1.2 updated
- parted-3.5-slfo.1.1_1.2 updated
- liblvm2cmd2_03-2.03.22-slfo.1.1_1.3 updated
- xorriso-1.5.4-slfo.1.1_1.2 updated
- device-mapper-2.03.22_1.02.196-slfo.1.1_1.3 updated
- systemd-presets-branding-ALP-transactional-20230214-slfo.1.1_1.2 updated
- permissions-1600_20240206-slfo.1.1_1.5 updated
- mtools-4.0.43-slfo.1.1_1.2 updated
- libopenssl3-3.1.4-slfo.1.1_13.1 updated
- pam-1.6.1-slfo.1.1_5.1 updated
- grub2-2.12-slfo.1.1_7.1 updated
- grub2-i386-pc-2.12-slfo.1.1_7.1 updated
- suse-module-tools-16.0.43-slfo.1.1_1.2 updated
- kmod-32-slfo.1.1_2.1 updated
- rsync-3.3.0-slfo.1.1_7.1 updated
- libldap2-2.6.4-slfo.1.1_1.2 added
- libkmod2-32-slfo.1.1_2.1 updated
- libcryptsetup12-2.6.1-slfo.1.1_2.1 updated
- krb5-1.21.3-slfo.1.1_5.1 added
- util-linux-2.40.4-slfo.1.1_7.1 updated
- shadow-4.15.1-slfo.1.1_1.3 updated
- pam-config-2.11+git.20240906-slfo.1.1_2.1 updated
- kbd-2.6.4-slfo.1.1_1.3 updated
- libssh4-0.10.6-slfo.1.1_6.1 added
- libsnapper7-0.11.2-slfo.1.1_1.2 updated
- aaa_base-84.87+git20250903.33e5ba4-slfo.1.1_1.1 updated
- libcurl4-8.14.1-slfo.1.1_10.1 added
- dbus-1-daemon-1.14.10-slfo.1.1_1.2 updated
- curl-8.14.1-slfo.1.1_10.1 updated
- dbus-1-tools-1.14.10-slfo.1.1_1.2 updated
- systemd-254.27-slfo.1.1_5.1 updated
- sysuser-shadow-3.1-slfo.1.1_1.2 updated
- dbus-1-common-1.14.10-slfo.1.1_1.2 updated
- libdbus-1-3-1.14.10-slfo.1.1_1.2 updated
- dbus-1-1.14.10-slfo.1.1_1.2 updated
- system-group-kvm-20170617-slfo.1.1_1.2 updated
- system-group-hardware-20170617-slfo.1.1_1.2 updated
- udev-254.27-slfo.1.1_5.1 updated
- snapper-0.11.2-slfo.1.1_1.2 updated
- lvm2-2.03.22-slfo.1.1_1.3 updated
- elemental-toolkit-2.2.9-slfo.1.1_1.1 updated
- container:suse-toolbox-image-1.0.0-5.102 updated
- file-magic-5.44-4.151 removed
- kbd-legacy-2.6.4-1.3 removed
- libcurl-mini4-8.14.1-8.1 removed
- libmagic1-5.44-4.151 removed
More information about the sle-container-updates
mailing list