< back to search

gpp_maybe Security update for ignition

SUSE-SLE-Module-HPC-15-SP6-2025-2014

This update for ignition fixes the following issues: - CVE-2025-22870: golang.org/x/net/http/httpproxy: proxy bypass using IPv6 zone IDs (bsc#1238681). - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239192).

Release Date

Jun 19 2025
References

Bugzilla: 1238681, 1239192
CVEs: CVE-2025-22868, CVE-2025-22870
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

HPC Module 15.6 aarch64

Packages

ignition
First boot installer and configuration tool

2.14.0-150400.9.9.1 lock rpm lock src

ignition-dracut-grub2
Files to trigger ignition firstboot with grub2

2.14.0-150400.9.9.1 lock rpm

HPC Module 15.6 x86_64

Packages

ignition
First boot installer and configuration tool

2.14.0-150400.9.9.1 lock rpm lock src

ignition-dracut-grub2
Files to trigger ignition firstboot with grub2

2.14.0-150400.9.9.1 lock rpm