SUSE-CU-2026:10068-1: Security update of suse/kubectl

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/kubectl
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:10068-1
Container Tags        : suse/kubectl:1.35 , suse/kubectl:1.35.4 , suse/kubectl:1.35.4-2.61.2 , suse/kubectl:oldstable
Container Release     : 61.2
Severity              : important
Type                  : security
References            : 1251168 1262270 1265748 CVE-2026-33814 CVE-2026-35469 
-----------------------------------------------------------------

The container suse/kubectl was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2025:4510-1
Released:    Tue Dec 23 12:24:56 2025
Summary:     Recommended update for kubernetes
Type:        recommended
Severity:    moderate
References:  
This update for kubernetes fixes the following issues:

- Update to version 1.35.0:

  initial package for Kubernetes v1.35.0
  * Full changelog - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.35.md#v1350

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:74-1
Released:    Thu Jan  8 17:01:10 2026
Summary:     Recommended update for kubernetes
Type:        recommended
Severity:    moderate
References:  1251168
This update for kubernetes fixes the following issues:

- bump `diffutils` as `Requires` in the Kubernetes*-client package (bsc#1251168)
    * Adding as `Recommends` didn't work - recommends do not actually get respected in container builds,
      as container builds are configured to install with packages marked as required.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:325-1
Released:    Wed Jan 28 15:54:07 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current GO security release.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:572-1
Released:    Tue Feb 17 19:47:05 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current GO security release.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:917-1
Released:    Wed Mar 18 08:47:07 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current go 1.25 security release.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:1490-1
Released:    Mon Apr 20 17:54:45 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current go 1.25 security release.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:2342-1
Released:    Wed Jun 10 15:15:00 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  1262270,1265748,CVE-2026-33814,CVE-2026-35469
This update for kubernetes fixes the following issues

- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
  (bsc#1265748).
- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service
  (bsc#1262270).

Changes for kubernetes:

- Update to version 1.35.4:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:2942-1
Released:    Tue Jul 14 08:10:15 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current go security release.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3660-1
Released:    Thu Aug 20 20:17:13 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current go security release.

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3824-1
Released:    Wed Aug 26 13:07:49 2026
Summary:     Security update for kubernetes
Type:        security
Severity:    important
References:  

This update for kubernetes rebuilds it against the current go security release.


The following package changes have been done:

- kubernetes1.35-client-1.35.4-150600.13.40.1 added
- kubernetes1.35-client-common-1.35.4-150600.13.40.1 added
- container:suse-sle15-15.7-2cca9950fcbe26e5f70a49f9e6f035e27fd7bad46e0133996b8c557bcafe453b-0 updated
- kubernetes1.33-client-1.33.11-150600.13.38.1 removed
- kubernetes1.33-client-common-1.33.11-150600.13.38.1 removed