SUSE-RU-2026:24143-1: moderate: Recommended update for vexctl

[SLE-UPDATES]

# Recommended update for vexctl

Announcement ID: SUSE-RU-2026:24143-1  
Release Date: 2026-10-05T12:29:06Z  
Rating: moderate  
References:

  
Affected Products:

  * SUSE Linux Enterprise Server 16.0
  * SUSE Linux Enterprise Server for SAP applications 16.0

  
  
An update that can now be installed.

## Description:

This update for vexctl fixes the following issues:

Changes in vexctl:

  * Update to version 0.4.4+git91.839fbf5.
  * Normalize document products once when attesting
  * Resolve image digests concurrently and honor context in attest
  * Preallocate slices and drop redundant stat before MkdirAll
  * Read SARIF report from stdin without a temp file
  * Index VEX statements by vulnerability when filtering SARIF reports

  * Update to version 0.4.4+git70.36f6f3a:

  * Fix Windows failures found by the OS test matrix
  * Modernize the release SBOM
  * Test on the stable Go release across operating systems
  * Drop the snapshot workflow
  * Update readme
  * Add e2e registry test
  * Fix image reference resolution
  * Attach attestations as OCI referrers and read both layouts
  * Move signing to sigstore bundles
  * Bump dep versions
  * Compute Go versions and run matrix tests
  * Do not dereference a missing document timestamp in ApplySingleVEX

  * Update to version 0.4.4+git44.d69ce1a:

  * Add OWNERS and aliases with new maintainers
  * fix: append package name to repository_url when normalizing oci purls

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server for SAP applications 16.0  
    zypper in -t patch SUSE-SLES-16.0-1828

  * SUSE Linux Enterprise Server 16.0  
    zypper in -t patch SUSE-SLES-16.0-1828

## Package List:

  * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64)
    * vexctl-0.4.4+git91.839fbf5-160000.1.1
    * vexctl-debuginfo-0.4.4+git91.839fbf5-160000.1.1
  * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
    * vexctl-0.4.4+git91.839fbf5-160000.1.1
    * vexctl-debuginfo-0.4.4+git91.839fbf5-160000.1.1

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20261015/9409aac0/attachment.htm>