Skip to content

2150.14.0

Choose a tag to compare

View all tags
@toanju toanju released this 02 Nov 20:33
· 57 commits to main since this release
2150.14.0
2445613
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

The following packages have been upgraded to address the mentioned CVEs:

  • Upgrade 'linux' from 6.18.56-1gl0~bp2150 to 6.18.59-1gl0~bp2150
  • Upgrade 'containerd' from 2.3.6 to 2.3.7
    • CVE-2026-95839
  • Upgrade 'systemd' from 259.9-1 to 259.10-1
  • Upgrade 'pyjwt' from 2.13.0-1gl0~bp2150 to 2.15.1-1
    • CVE-2026-102265
    • CVE-2026-101917
    • CVE-2026-101918
    • CVE-2026-102268
    • CVE-2026-102269
    • CVE-2026-102271
    • CVE-2026-102272
    • CVE-2026-102273
    • CVE-2026-102274
    • CVE-2026-102275
    • CVE-2026-102267
    • CVE-2026-102270
    • CVE-2026-102266
  • Upgrade 'cron' from 3.0pl1-206 to 3.0pl1-212
    • CVE-2017-9525
    • CVE-2019-9706
  • Upgrade 'unbound' from 1.24.2-1 to 1.26.1-1
    • CVE-2026-32792
    • CVE-2026-33278
    • CVE-2026-40622
    • CVE-2026-41292
    • CVE-2026-42534
    • CVE-2026-42923
    • CVE-2026-42944
    • CVE-2026-42959
    • CVE-2026-42960
    • CVE-2026-44390
    • CVE-2026-44608
    • CVE-2026-32665
    • CVE-2026-40691
    • CVE-2026-50248
    • CVE-2026-41637
    • CVE-2026-42955
    • CVE-2026-44621
    • CVE-2026-44687
    • CVE-2026-44690
    • CVE-2026-46582
    • CVE-2026-50045
    • CVE-2026-50046
    • CVE-2026-50243
    • CVE-2026-50251
    • CVE-2026-50252
    • CVE-2026-55717
    • CVE-2026-55973
    • CVE-2026-55990
    • CVE-2026-55991
    • CVE-2026-56416
    • CVE-2026-56444
    • CVE-2026-54478
    • CVE-2026-55708
    • CVE-2026-81642
    • CVE-2026-77860
    • CVE-2026-77955
    • CVE-2026-78227
    • CVE-2026-80225
    • CVE-2026-81634
    • CVE-2026-82717
    • CVE-2026-82720
    • CVE-2026-85501
    • CVE-2026-14586
  • Upgrade 'libssh' from 0.11.3-1+b1 to 0.12.2-1
    • CVE-2025-14821
    • CVE-2026-15370
    • CVE-2026-59849
  • Upgrade 'libpng' from 1.6.54 to 1.6.59-1
    • CVE-2026-25646
    • CVE-2026-33416
    • CVE-2026-33636
    • CVE-2026-34757
    • CVE-2026-3713
    • CVE-2026-46675
  • Upgrade 'libarchive' from 3.8.5-1 to 3.8.9-1
    • CVE-2026-4111
    • CVE-2026-14164
    • CVE-2026-15028
    • CVE-2026-16517
  • Upgrade 'dnsmasq' from 2.92-1 to 2.93-3
    • CVE-2026-6507
    • CVE-2026-12725
    • CVE-2026-12969
    • CVE-2026-4890
    • CVE-2026-4893
    • CVE-2026-4892
    • CVE-2026-5172
    • CVE-2026-2291
    • CVE-2026-4891
  • Upgrade 'capstone' from 5.0.6-1+b1 to 5.0.9-1
    • CVE-2025-67873
    • CVE-2025-68114
    • CVE-2026-47143
  • Upgrade 'openssl' from 3.5.5-1gl57 to 3.5.9
    • CVE-2026-35189
    • CVE-2026-35191
    • CVE-2026-42772
    • CVE-2026-54872
    • CVE-2026-54873
    • CVE-2026-54875
    • CVE-2026-77696
    • CVE-2026-72897
    • CVE-2026-75804
    • CVE-2026-75805
    • CVE-2026-75806
    • CVE-2026-84782
    • CVE-2026-84784
  • Upgrade 'openssh' from 10.4p1-4 to 10.6p1-1
    • CVE-2026-106585
    • CVE-2026-106584
    • CVE-2026-106586
    • CVE-2026-106552
    • CVE-2026-106553
    • CVE-2026-106555
    • CVE-2026-106582
    • CVE-2026-106587
    • CVE-2026-106583
    • CVE-2026-106588
    • CVE-2026-106589
    • CVE-2026-110925
    • CVE-2026-110926
    • CVE-2026-110923
  • Upgrade 'util-linux' from 2.42.2-1 to 2.42.4-1
    • CVE-2026-78408
    • CVE-2026-76642
    • CVE-2026-78410
    • CVE-2026-78409
  • Upgrade 'curl' from 8.22.0-2 to 8.23.0
    • CVE-2026-92392
    • CVE-2026-92389
    • CVE-2026-94265
    • CVE-2026-86414
    • CVE-2026-87862
    • CVE-2026-87861
    • CVE-2026-107929
    • CVE-2026-87865
    • CVE-2026-92388
    • CVE-2026-94266
    • CVE-2026-86412
    • CVE-2026-107928
    • CVE-2026-92386
    • CVE-2026-86410
    • CVE-2026-92387
    • CVE-2026-87863
    • CVE-2026-92390
    • CVE-2026-87866
    • CVE-2026-92391
    • CVE-2026-86413
    • CVE-2026-86415
  • Upgrade 'expat' from 2.8.4-2 to 2.9.0-1
    • CVE-2026-93990
    • CVE-2026-77214
    • CVE-2026-102633
  • Upgrade 'nghttp2' from 1.68.1-1 to 1.70.0-1
    • CVE-2026-58055
  • Upgrade 'glibc' from 2.42-17 to 2.42-17gl2
    • CVE-2026-19542
    • CVE-2026-77117
    • CVE-2026-80489
    • CVE-2026-19499
    • CVE-2026-6368
    • CVE-2026-89092
    • CVE-2026-8674
    • CVE-2026-95818
    • CVE-2026-86805
    • CVE-2026-97399
  • Upgrade 'libssh2' from 1.11.1-5 to 1.11.1-6
    • CVE-2026-7598
    • CVE-2026-55200
    • CVE-2026-55199
    • CVE-2025-15661
    • CVE-2026-58050
    • CVE-2026-58051
    • CVE-2026-66032
    • CVE-2026-66033
    • CVE-2026-66034
    • CVE-2026-66035
  • Upgrade 'jq' from 1.8.1-8 to 1.8.2-1
    • CVE-2026-32316
    • CVE-2026-33947
    • CVE-2026-39979
    • CVE-2026-33948
    • CVE-2026-43894
    • CVE-2026-43895
    • CVE-2026-43896
    • CVE-2026-44777
    • CVE-2026-40612
    • CVE-2026-41256
    • CVE-2026-41257
    • CVE-2026-47770
    • CVE-2026-49839
    • CVE-2026-54679
    • CVE-2026-40164
  • Upgrade 'sssd' from 2.10.1-2gl0 to 2.13.1-3
    • CVE-2025-11561
  • Upgrade 'wget' from 1.25.0-2 to 1.25.0-3
    • CVE-2026-58469
    • CVE-2026-58470
    • CVE-2026-58471
    • CVE-2026-58472
    • CVE-2026-15146
  • Upgrade 'sqlite3' from 3.46.1-9 to 3.53.4-2
    • CVE-2025-29087
    • CVE-2025-3277
    • CVE-2025-6965
    • CVE-2026-11822
    • CVE-2026-11824
    • CVE-2025-7709
    • CVE-2026-50812
    • CVE-2026-50813
  • Upgrade 'gnupg' from 2.4.8-5 to 2.4.9-8
    • CVE-2025-68973
    • CVE-2026-57062
    • CVE-2026-105712
  • Upgrade 'gzip' from 1.13-1 to 1.14-1
    • CVE-2026-41992
  • Upgrade 'nss' from 3.120-1 to 3.131-1
    • CVE-2026-2781
    • CVE-2026-16389
  • Upgrade 'ca-certificates' from 20250419 to 20260816+nmu1
  • Upgrade 'golang-runtime' from 1.26.8 to 1.26.9-1
    • CVE-2026-78665
    • CVE-2026-78664
    • CVE-2026-78660
    • CVE-2026-94448
    • CVE-2026-94447
    • CVE-2026-97030
    • CVE-2026-94444
    • CVE-2026-78669
    • CVE-2026-97031
    • CVE-2026-94440
    • CVE-2026-78667
    • CVE-2026-94439
    • CVE-2026-78659
    • CVE-2026-78663
    • CVE-2026-56866
    • CVE-2026-56857
    • CVE-2026-97032
  • Upgrade 'brotli' from 1.2.0-3 to 1.2.0-4.1
    • CVE-2026-111497
  • Upgrade 'nodejs' from 22.22.0+dfsg+~cs22.19.6-1+b1 to 24.22.0+dfsg+~cs24.19.2-2
    • CVE-2026-106074
    • CVE-2026-106073
    • CVE-2026-106072
    • CVE-2026-106069
    • CVE-2026-105483
    • CVE-2026-105482
    • CVE-2026-105481
    • CVE-2026-58045
    • CVE-2026-58044
    • CVE-2026-48937
    • CVE-2026-48932
    • CVE-2026-48619
    • CVE-2026-21717
  • Upgrade edk2-cloud-hypervisor-gl from 20260221+261014-1gl0~bp2150 to 20260221+261029-1gl0~bp2150
    • CVE-2026-97631

Changes in Package Versions

Package 2150.12.0 2150.14.0
bsdextrautils 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
ca-certificates 20250419 20260816+nmu1gl0~bp2150
containerd 2.3.6-0gl0~bp2150 2.3.7-0gl1~bp2150
cron-daemon-common 3.0pl1-206 3.0pl1-212gl0+bp2150
curl 8.22.0-1gl0~bp2150 8.23.0-1gl0~bp2150
dirmngr 2.4.8-5 2.4.9-8gl0~bp2150
dnsmasq-base 2.92-1 2.93-3gl0~bp2150
edk2-cloud-hypervisor-gl 20260221+261014-1gl0~bp2150 20260221+261029-1gl0~bp2150
fdisk 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
gardenlinux-update 0.9gl4~bp2150 0.9gl6~bp2150
gnupg 2.4.8-5 2.4.9-8gl0~bp2150
gnupg-l10n 2.4.8-5 2.4.9-8gl0~bp2150
gpg 2.4.8-5 2.4.9-8gl0~bp2150
gpg-agent 2.4.8-5 2.4.9-8gl0~bp2150
gpgconf 2.4.8-5 2.4.9-8gl0~bp2150
gpgsm 2.4.8-5 2.4.9-8gl0~bp2150
gzip 1.13-1 1.14-1gl0~bp2150
ignition 2.26.0-1gl3~bp2150 2.26.0-1gl4~bp2150
ignition-legacy 2.26.0-0gl3+bp2150 2.26.0-0gl4+bp2150
jq 1.8.1-8gl0~bp2150 1.8.2-1gl0~bp2150
libarchive13t64:amd64 3.8.5-1 3.8.9-1gl0~bp2150
libblkid1:amd64 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
libbrotli1:amd64 1.2.0-3 1.2.0-4.1gl0~bp2150
libc-bin 2.42-17gl1+bp2150 2.42-17gl2+bp2150
libc-gconv-modules-extra:amd64 2.42-17gl1+bp2150 2.42-17gl2+bp2150
libc6:amd64 2.42-17gl1+bp2150 2.42-17gl2+bp2150
libcapstone5:amd64 5.0.6-1+b1 5.0.9-1gl0~bp2150
libcurl3t64-gnutls:amd64 8.22.0-1gl0~bp2150 8.23.0-1gl0~bp2150
libcurl4-gnutls:amd64 8.22.0-1gl0~bp2150 8.23.0-1gl0~bp2150
libcurl4t64:amd64 8.22.0-1gl0~bp2150 8.23.0-1gl0~bp2150
libexpat1:amd64 2.8.4-2gl0~bp2150 2.9.0-1gl0~bp2150
libfdisk1:amd64 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
libglib2.0-0t64:amd64 2.87.2-3 2.87.2-3gl0~bp2150
libipa-hbac0t64 2.10.1-2gl0 2.13.1-3gl0~bp2150
libjq1:amd64 1.8.1-8gl0~bp2150 1.8.2-1gl0~bp2150
libmount1:amd64 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
libnghttp2-14:amd64 1.68.1-1gl0~bp2150 1.70.0-1gl0~bp2150
libnss-resolve:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
libnss-sss:amd64 2.10.1-2gl0 2.13.1-3gl0~bp2150
libnss-systemd:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
libnss3:amd64 2:3.120-1 2:3.131-1gl0~bp2150
libpam-sss:amd64 2.10.1-2gl0 2.13.1-3gl0~bp2150
libpam-systemd:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
libpng16-16t64:amd64 1.6.54-1 1.6.59-1gl0~bp2150
libsmartcols1:amd64 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
libsqlite3-0:amd64 3.46.1-9 3.53.4-2gl0+bp2150
libssh-4:amd64 0.11.3-1+b1 0.12.2-1gl0~bp2150
libssh2-1t64:amd64 1.11.1-5gl0~bp2150 1.11.1-6gl0~bp2150
libssl3t64:amd64 3.5.5-1gl57~bp2150 3.5.9-1gl58~bp2150
libsss-certmap0 2.10.1-2gl0 2.13.1-3gl0~bp2150
libsss-idmap0 2.10.1-2gl0 2.13.1-3gl0~bp2150
libsss-nss-idmap0 2.10.1-2gl0 2.13.1-3gl0~bp2150
libsystemd-shared:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
libsystemd0:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
libudev1:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
libunbound8:amd64 1.24.2-1 1.26.1-1gl0~bp2150
libuuid1:amd64 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
libuv1t64:amd64 1.51.0-2+b1 1.53.0-1gl0~bp2150
linux-base-6.18.56-amd64 6.18.56-1gl0~bp2150 6.18.59-1gl0~bp2150
linux-base-amd64 6.18.56-1gl0~bp2150 6.18.59-1gl0~bp2150
linux-image-6.18.56-amd64 6.18.56-1gl0~bp2150 6.18.59-1gl0~bp2150
linux-image-amd64 6.18.56-1gl0~bp2150 6.18.59-1gl0~bp2150
login 1:4.16.0-2+really2.42.2-1gl0+bp2150 1:4.16.0-2+really2.42.4-1gl0+bp2150
mount 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
openssh-client 1:10.4p1-4gl0~bp2150 1:10.6p1-1gl0~bp2150
openssh-common 1:10.4p1-4gl0~bp2150 1:10.6p1-1gl0~bp2150
openssh-server 1:10.4p1-4gl0~bp2150 1:10.6p1-1gl0~bp2150
openssh-sftp-server 1:10.4p1-4gl0~bp2150 1:10.6p1-1gl0~bp2150
openssl 3.5.5-1gl57~bp2150 3.5.9-1gl58~bp2150
openssl-provider-legacy 3.5.5-1gl57~bp2150 3.5.9-1gl58~bp2150
python3-sss 2.10.1-2gl0 2.13.1-3gl0~bp2150
runc 1.4.3-1gl8~bp2150 1.4.3-1gl9~bp2150
sssd 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-ad 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-ad-common 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-common 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-ipa 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-krb5 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-krb5-common 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-ldap 2.10.1-2gl0 2.13.1-3gl0~bp2150
sssd-proxy 2.10.1-2gl0 2.13.1-3gl0~bp2150
systemd 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-boot 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-boot-efi:amd64 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-boot-tools 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-container 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-coredump 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-cryptsetup 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-journal-remote 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-repart 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-resolved 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-sysv 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-timesyncd 259.9-1gl0+bp2150 259.10-1gl0+bp2150
systemd-ukify 259.9-1gl0+bp2150 259.10-1gl0+bp2150
udev 259.9-1gl0+bp2150 259.10-1gl0+bp2150
util-linux 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
uuid-runtime 2.42.2-1gl0+bp2150 2.42.4-1gl0+bp2150
wget 1.25.0-2 1.25.0-3gl0~bp2150

SCI 2150.14.X releases are based on the upstream releases 2150.14.0

Software Component Versions

containerd 2.3.6-0gl0~bp2150
curl 8.22.0-1gl0~bp2150
libc-bin 2.42-17gl1+bp2150
linux-image-amd64 6.18.56-1gl0~bp2150
openssh-server 1:10.4p1-4gl0~bp2150
openssl 3.5.5-1gl57~bp2150
runc 1.4.3-1gl8~bp2150
systemd 259.9-1gl0+bp2150
cloud-hypervisor-gl 52.1+261014-1gl0~bp2150
edk2-cloud-hypervisor-gl 20260221+261029-1gl0~bp2150
libvirt 12.7.0+261014-1gl0~bp2150
Assets 2
Loading