SUSE-SU-2026:20244-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-202620244-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20244-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:20244-1

Upstream

CVE (6)

Related

CVE (6)

Published

2026-01-15T11:08:38Z

Modified

2026-03-11T07:31:24Z

Summary

Security update for elemental-toolkit, elemental-operator

Details

This update for elemental-toolkit, elemental-operator fixes the following issues:

elemental-operator:

Update to version 1.6.10:
- Remove 'latest' tag as this overlaps with the latest branch
- Bump github.com/rancher-sandbox/go-tpm and its dependencies This bump includes fixes to some CVEs:
  - bsc#1241826 (CVE-2025-22872)
  - bsc#1241857 (CVE-2025-22872)
  - bsc#1251511 (CVE-2025-47911)
  - bsc#1251679 (CVE-2025-58190)

elemental-toolkit:

Update to version 2.1.5:
- Update headers for new year 2026
- Disable selinux in installer media
Update to version 2.1.4:
- Remove leftovers in installer integration test
- Bump to build against go 1.24
- Bump golang.org/x/crypto library This bump includes fixes to some CVEs:
  - bsc#1241826 (CVE-2025-22872)
  - bsc#1241857 (CVE-2025-22872)
  - bsc#1251511 (CVE-2025-47911)
  - bsc#1251679 (CVE-2025-58190)
  - bsc#1253581 (CVE-2025-47913)
  - bsc#1253901 (CVE-2025-58181)
  - bsc#1254079 (CVE-2025-47914)

References

Affected packages

SUSE:Linux Micro 6.0 / elemental-operator

Package

Name: elemental-operator
Purl: pkg:rpm/suse/elemental-operator&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.6.10-1.1

Ecosystem specific

{
    "binaries":  [
        {
            "elemental-register":  "1.6.10-1.1",
            "elemental-support":  "1.6.10-1.1",
            "elemental-toolkit":  "2.1.5-1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20244-1.json"

SUSE:Linux Micro 6.0 / elemental-toolkit

Package

Name: elemental-toolkit
Purl: pkg:rpm/suse/elemental-toolkit&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.1.5-1.1

Ecosystem specific

{
    "binaries":  [
        {
            "elemental-register":  "1.6.10-1.1",
            "elemental-support":  "1.6.10-1.1",
            "elemental-toolkit":  "2.1.5-1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20244-1.json"