gpp_maybe Security update for elemental-operator

SUSE-SLE-Micro-6.0-750

This update for elemental-operator fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-operator: - Fix substitution - Fix reference in labels - Adapt labels to pass OBS container checks - Update to version 1.6.11: * Bump unit test environment artifacts * Bump test environment tools in Makefile * Bump actions * Refresh auto-generated code (make run) * Bump controller generator to version 0.19 * Bump golangci/golangci-lint-action * Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * Update spec and Dockerfiles to use go1.25 * Bump golang.org/x/net to v0.55.0, includes fixes for: - bsc#1266789 bsc#1265921 bsc#1267197 bsc#1267168 bsc#1251679 * Update year in header * Remove labeler workflow

• Release Date
  Jun 10 2026
• References
  Bugzilla: 1251679, 1260277, 1265921, 1266789, 1267168, 1267197
  CVEs: CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-33814, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64

• Packages
  elemental-register
  The registration client

  1.6.11-1.1 lock rpm

  elemental-support
  Collect important logs for support

  1.6.11-1.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  elemental-register
  The registration client

  1.6.11-1.1 lock rpm

  elemental-support
  Collect important logs for support

  1.6.11-1.1 lock rpm