SUSE-RU-2026:24702-1: important: Recommended update for az-cli-cmd, aws-cli-cmd, flake-pilot

SLE-UPDATES null at suse.de
Thu Nov 12 21:00:52 UTC 2026 

# Recommended update for az-cli-cmd, aws-cli-cmd, flake-pilot

Announcement ID: SUSE-RU-2026:24702-1  
Release Date: 2026-11-05T14:08:06Z  
Rating: important  
References:

  * bsc#1274855
  * bsc#1277029
  * bsc#1282900
  * bsc#1285040

  
Affected Products:

  * SUSE Linux Enterprise Server for NVIDIA 16.1

  
  
An update that has four fixes can now be installed.

## Description:

This update for az-cli-cmd, aws-cli-cmd, flake-pilot fixes the following issues:

Changes in az-cli-cmd:

  * Allow to skip missing host volume sharing paths (bsc#1274855)

Changes in aws-cli-cmd:

  * Allow to skip missing host volume sharing paths (bsc#1274855) Changes in
    flake-pilot:

  * Fix: aws and az do not work on the immutable flavor (bsc#1282900)

  * Update to version 3.2.10:
    * Make sure bubblewrap holds no host mounts
  * Update to version 3.2.9:
    * Differentiate stderr and stdout channels
    * Fix EOF wait in firecracker-pilot
    * Fix handling of resume and force_vsock options
    * Fix race condition
    * Fix firecracker exit code handling
    * Fix bwrap lookup in bubblewrwap-pilot
    * Use the which crate to lookup a binary in PATH
  * Update to version 3.2.8:
    * No color output by default flake-pilot no longer prints color by default. This change affects the messages as well as any progress information. Applied the change on the documentation side as well. (bsc#1285040)
  * Update to version 3.2.7:
    * Update user guide: Fix gcloud example
  * Update to version 3.2.6:
    * Update user guide: Refactor the section how to build your own app images
    * Update user guide: reference Leap16 variant of claude image in the examples
    * Fix package name in claude image
  * Update to version 3.2.5:
    * Update claude image: Add backports repo which provides poetry
    * Allow to configure tmpfs size in bwrap sandbox
    * Detect and report squatted private meta data dirs
    * Add poetry to firecracker claude image
  * Update to version 3.2.4:
    * Allow install as documented
    * Refactor bubblewrap overlay and write area
  * Do not unconditionally pull newer or prune podman-pilot no longer asks the
    registry for a newer image or prunes images on every launch. Both are now
    opt-in pilot options, %pull_newer and %prune_images. They can be set in a
    registration's pilot_options or given at call time, like the existing
    options.
  * Update to version 3.2.3:
    * Fix indentation
    * Do not call systemfiles script as root
    * Document FLAKE_LOG_STYLE environment variable in user guide
  * Refactor running privileged applications
  * Update to version 3.2.2:
    * Volume export/release guest address from state
    * Close DHCP port on the host for VMs
    * Close DNS port on the host for VMs
    * Add locking to the firecracker network state file
    * Load kvm module in sci if present
    * sci accepted commands from any vsock peer
    * Add kiwi to claude firecracker image
    * Validate given names and paths in flake-ctl
    * Update documentation: Clearly state isolation limits
  * Update to version 3.2.1:
    * Delete OSS scanner metadata
    * Refactor firecracker networking per security scan
  * Update to version 3.2.0:
    * Fix bubblewrap documentation and code comments
    * Drop sci injection
    * Drop include feature from flake-pilot.
    * Update troubleshooting section
    * Create the metadata directory in init
    * Get rid of some sudo restrictions
    * Add privileges documentation chapter
    * Use absolute paths for every sudo target
  * Update to version 3.1.79:
    * Use sysctl to enable IP forwarding
    * Export NFS volumes strictly to one app
    * Update firecracker appstore images: drop insecure settings with regards to sudo and ssh
    * Drop runas registration option
  * Update to version 3.1.78:
    * Sign up for Anthropics OSS scanner
    * Leap16 requires NetworkManager
    * Move claude firecracker image to Leap16
    * Cleanup unused code
  * Update to version 3.1.77:
    * Add support for direct OCI export
    * Fix spec file
  * Update to version 3.1.76:
    * Switch hardcoded paths in spec to macros
    * Add /etc/flakes/APP.d drop-in directory
    * Add license statement for the logo
    * Add a logo to the project
  * Update to version 3.1.75:
    * Add app store URLs to user guide
  * Update to version 3.1.74:
    * Add missing %post for tmpfiles
  * Update to version 3.1.73:
    * Fix Makefile
  * Update to version 3.1.72:
    * Move system wide flake podman storage to var
    * Drop rootless_storage_path from config
    * Update state file handling
  * Update to version 3.1.71:
    * Improve write performance onoverlay
    * Update to latest version of pi for deepseek
    * Fix sudoers setup for firecracker images
    * Add deepseek(pi) firecracker image
  * Update to version 3.1.70:
    * Auto select outgoing interface
    * Check if storage path really exists
    * Drop the garbage collector from firecracker-pilot
    * Make sure firecracker-pilot gets HOME from userdb
    * Allow firecracker show on config without include
    * Fix size constraints
    * Add storage information to firecracker show
  * Update to version 3.1.69:
    * Fix setup of resolver link
  * Update to version 3.1.68:
    * firecracker-pilot should not delete storage
    * remount / to make it visible in the overlay
    * Leap16 uses NetworkManager
    * immediately write journal
    * Make sure overlay write mount is visible to /
    * fix overlay storage handling
  * Update to version 3.1.67:
    * Move to leap16 in the examples
    * Update claude firecracker app
    * Move firecracker images to ext4
    * Switch firecracker storage to ext4
  * Update to version 3.1.66:
    * Update main page: Add information on the main page to be more use case focused
    * Add sanity check for NFS server
  * Update to version 3.1.65:
    * Deduplicate podman code between pilot and ctl tool
    * Add new command flake-ctl podman reset
    * Move leap firecracker image to Leap 16
  * Update to version 3.1.64:
    * Update documentation: Add url to the flake store on s3, cloudfront
  * Update to version 3.1.63:
    * Use mount call with full path
    * Fix overlay dir creation for bubblewrap pilot
  * Update to version 3.1.62:
    * Fix overlay-src sorting in bubblewrap-pilot
    * bubblewrap pilot should create user overlay
    * Add sanity check for firecracker iptables rules
  * Update to version 3.1.61:
    * Update appstore URL: Now serving from cloudfront (https)
    * Make sure to set a User-Agent
  * Update to version 3.1.60:
    * Update appstore URL: Now serving from an S3 bucket and not from git LFS
    * Remove LFS
  * Update to version 3.1.59:
    * Check if the pilot template exists
    * Refactor registration file reading/writing
    * Add new pilot named bubblewrap-pilot
    * Refactor podman appstore: Add build category and a simple push script to automate building and push to an AWS ECR
  * Update to version 3.1.58:
    * Add flake-ctl firecracker/podman remove checks
    * Add tap device sanity check
  * Update to version 3.1.57:
    * Update appstore: Add openssl-devel to claude system
    * Add network and volume info to firecracker show
    * Adapt boxbuild options to kiwi v11
    * pull newer kiwi container
    * Update appstore: Added some useful software to the claude image
  * Update to version 3.1.56:
    * Update architecture diagram
    * Update appstore: Install latest version of claude
  * Update to version 3.1.55:
    * Add troubleshooting section regarding users
    * Add troubleshooting section for firewalld
  * Update to version 3.1.54:
    * Dynamically select private network
  * Update to version 3.1.53:
    * Fix overlay root (/) permission settings
    * Drop use of pivot_root
    * Fix default firecracker setup at registration time
    * Update appstore: Add an ai user to the claude image
    * Add handler for terminal resize over vsock
    * Update completion
  * Update to version 3.1.52:
    * Fix flake-pilot-firecracker-guestvm-tools spec
    * Add doc chapter about firecracker volumes
    * Implement firecracker NFS volume add/remove
    * Implement firecracker NFS volume handling
    * Add support for NFS mounts in sci
  * Update to version 3.1.51:
    * Fix UDS socket setup
    * Fix firecracker network setup
    * Update appstore: Make sure nfs-client exists in the firecracker images
  * Update to version 3.1.50:
    * Fix evaluation of %ignore_missing_volume_path
    * Add new pilot_options section to the flake config (bsc#1274855)
  * Update to version 3.1.49:
    * Fixed Makefile: ghpages target missing the setup
  * Update to version 3.1.48:
    * Fix bumpversion config
    * Refactor documentation: Create a user guide rather than a README
    * Fix CWE-59 / Privilege Escalation issues (bsc#1277029)
  * Update to version 3.1.47:
    * Fix --no-net firecracker registrations
    * Do not store network.yaml meta file in flakes dir
    * Update README: Rewrite networking chapter for firecracker
    * Delete unused documentation diagrams
    * Add flake-ctl firecracker network remove
    * Add flake-ctl firecracker network add
    * Add flake-ctl firecracker network init
    * Update README: Fix information about user vs. system wide flakes
    * Add support for Per-instance boot_args
    * Fix tap device setup
  * Update to version 3.1.46:
    * Drop --user flag

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server for NVIDIA 16.1  
    zypper in -t patch SUSE-SLES-NVIDIA-16.1-26

## Package List:

  * SUSE Linux Enterprise Server for NVIDIA 16.1 (noarch)
    * az-cli-cmd-1.37.1-160100.4.1
    * aws-cli-cmd-1.36.2-160100.4.1
  * SUSE Linux Enterprise Server for NVIDIA 16.1 (aarch64)
    * flake-pilot-3.2.10-160100.1.1
    * flake-pilot-podman-3.2.10-160100.1.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1274855
  * https://bugzilla.suse.com/show_bug.cgi?id=1277029
  * https://bugzilla.suse.com/show_bug.cgi?id=1282900
  * https://bugzilla.suse.com/show_bug.cgi?id=1285040

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20261112/325569e9/attachment.htm>

More information about the sle-updates mailing list