SUSE-SU-2026:20357-1

Update to v1.7.4:
- Bump github.com/rancher-sandbox/go-tpm and its dependencies This bump includes few CVE fixes: * bsc#1241826 (CVE-2025-22872) * bsc#1241857 (CVE-2025-22872) * bsc#1251511 (CVE-2025-47911) * bsc#1251679 (CVE-2025-58190)
- Install yip config files in before-install step
- Revert "Do not delete ManagedOSVersions by default"
- Set default channel variable names consistent with OS version
- Do not delete ManagedOSVersions by default
- Include -channel suffix to channel names
- OS channel: enable baremetal channel by default

elemental-toolkit:

Update to v2.2.7:
- Bump toolkit build to go 1.24
- Bump golang.org/x/crypto library This bumg includes few CVE fixes: * bsc#1241826 (CVE-2025-22872) * bsc#1241857 (CVE-2025-22872) * bsc#1251511 (CVE-2025-47911) * bsc#1251679 (CVE-2025-58190) * bsc#1253581 (CVE-2025-47913) * bsc#1253901 (CVE-2025-58181) * bsc#1254079 (CVE-2025-47914)
Update to v2.2.5:
- Permissive mode for green selinux
- Adapt code and unit tests
- Minor change to lookup devices using blkid

References

Affected packages

SUSE:Linux Micro 6.1 / elemental-operator

Package

Name: elemental-operator
Purl: pkg:rpm/suse/elemental-operator&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.7.4-slfo.1.1_1.1

Ecosystem specific

{
    "binaries":  [
        {
            "elemental-register":  "1.7.4-slfo.1.1_1.1",
            "elemental-support":  "1.7.4-slfo.1.1_1.1",
            "elemental-toolkit":  "2.2.7-slfo.1.1_1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20357-1.json"

SUSE:Linux Micro 6.1 / elemental-toolkit

Package

Name: elemental-toolkit
Purl: pkg:rpm/suse/elemental-toolkit&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.2.7-slfo.1.1_1.1

Ecosystem specific

{
    "binaries":  [
        {
            "elemental-register":  "1.7.4-slfo.1.1_1.1",
            "elemental-support":  "1.7.4-slfo.1.1_1.1",
            "elemental-toolkit":  "2.2.7-slfo.1.1_1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20357-1.json"